$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: qa8cxXbO2h1iNSfsaeGd/pj9rKEcvjjE8TUg16bKM0A= Subject key identifier: 15:1B:EE:37:C5:F9:B7:BF:1B:DF:27:5A:E6:74:27:E9:13:B6:F3:D3 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 03EC Signing time: Sat 23 Nov 2024 00:07:07 +0000 Manifest this update: Sat 23 Nov 2024 00:07:07 +0000 Manifest next update: Sat 30 Nov 2024 00:07:07 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: pZwvdsx6UcvxHW1kavi4gK1dAtKmViItTXt5ycItB64=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: EJYgzer8+vXx8u7MJTCTkYBHErTwzRTpiwQcsCSE90E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Nov 23 00:07:07 2024 GMT Not After : Nov 30 00:07:07 2024 GMT Subject: CN=67411cab-6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:0b:23:d9:1b:07:69:9b:4c:6d:99:f6:f5: ec:3f:7c:c3:fc:e0:5b:80:15:05:0a:80:e7:64:cc: 58:c9:80:75:54:ec:18:0b:e6:78:70:78:ca:b1:3c: ca:da:a5:6f:a1:d8:55:d9:69:a6:8b:31:42:bc:17: c7:59:12:0b:09:39:2d:34:27:ef:fc:70:16:e7:46: 20:fc:a4:26:b1:d5:58:01:51:7f:50:95:e7:e8:88: 93:9f:49:30:98:96:bd:0a:25:61:a8:b2:46:44:7b: 93:bc:96:a5:3c:d6:a4:53:46:14:b4:32:80:b7:01: b3:33:cd:b2:58:43:05:01:f9:9a:04:3b:28:d2:83: 58:7c:c8:13:3d:6e:a4:43:61:6f:8f:69:80:50:92: 8e:bf:21:40:6e:2c:00:3f:62:1d:8a:4c:4a:99:e5: 85:1e:22:d0:3a:07:f1:c9:ed:e5:c5:f8:ac:c7:20: 68:59:eb:53:18:e5:08:5c:f0:be:c3:be:f5:05:aa: 9b:c7:40:58:62:1a:da:c8:22:34:e7:d2:98:3d:a3: bc:26:b3:88:09:cf:c7:25:7e:2c:8a:e4:f1:bd:3b: fa:ec:06:89:22:63:4c:a7:74:7a:26:c7:3d:47:df: 9f:f9:81:23:54:85:65:d9:3d:ce:79:71:d3:58:f0: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:EE:37:C5:F9:B7:BF:1B:DF:27:5A:E6:74:27:E9:13:B6:F3:D3 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fa:61:6b:5b:03:1a:e0:2f:16:1c:1a:09:a5:ef:a8:90:a7: 10:1e:2b:da:2c:d6:90:d5:45:51:b8:66:1e:56:05:a3:bd:c8: 51:65:6b:88:79:fc:ab:61:07:4a:e8:da:53:e8:b2:3a:eb:a4: bc:34:6b:e2:5d:b3:c2:79:41:b1:56:b5:29:7b:6a:28:d4:e4: df:1b:e4:fd:be:38:80:1f:e0:d1:5c:19:a8:61:30:b0:e6:b8: 0e:aa:40:2d:e4:84:8d:15:e6:68:19:cd:cb:6c:ba:c2:86:7a: 66:1c:b5:88:03:00:17:55:3b:b2:65:e3:82:ee:76:96:83:ed: 45:b0:45:b2:f6:09:15:46:5f:e0:51:66:6a:0c:1f:13:f9:b9: 16:fb:25:55:d5:8b:aa:c0:12:d4:a3:80:2b:29:65:0f:b5:8d: 33:9f:3f:15:24:b5:a9:85:87:9f:c9:50:36:2f:47:db:01:7c: a6:02:55:a7:4e:0d:38:c8:3a:0a:1d:9e:60:ac:0c:2e:03:9c: 4c:fd:14:cf:14:cf:71:e6:6d:ed:82:c3:0c:11:2a:5c:c2:16: 5e:ca:44:0f:e0:a3:6d:b0:53:59:c8:c4:07:75:62:88:0b:8b: a2:d9:a6:40:ee:69:4e:28:97:17:e3:38:db:bb:ca:37:3d:47: d3:41:78:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjQxMTIzMDAwNzA3WhcNMjQxMTMwMDAwNzA3WjAYMRYwFAYD VQQDEw02NzQxMWNhYi02ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoELI9kbB2mbTG2Z9vXsP3zD/OBbgBUFCoDnZMxYyYB1VOwYC+Z4cHjKsTzK 2qVvodhV2WmmizFCvBfHWRILCTktNCfv/HAW50Yg/KQmsdVYAVF/UJXn6IiTn0kw mJa9CiVhqLJGRHuTvJalPNakU0YUtDKAtwGzM82yWEMFAfmaBDso0oNYfMgTPW6k Q2Fvj2mAUJKOvyFAbiwAP2IdikxKmeWFHiLQOgfxye3lxfisxyBoWetTGOUIXPC+ w771Baqbx0BYYhrayCI059KYPaO8JrOICc/HJX4siuTxvTv67AaJImNMp3R6Jsc9 R9+f+YEjVIVl2T3OeXHTWPAkGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUb7jfF +be/G98nWuZ0J+kTtvPTMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+mFrWwMa4C8WHBoJpe+okKcQHivaLNaQ1UVRuGYeVgWjvchRZWuI efyrYQdK6NpT6LI666S8NGviXbPCeUGxVrUpe2oo1OTfG+T9vjiAH+DRXBmoYTCw 5rgOqkAt5ISNFeZoGc3LbLrChnpmHLWIAwAXVTuyZeOC7naWg+1FsEWy9gkVRl/g UWZqDB8T+bkW+yVV1YuqwBLUo4ArKWUPtY0znz8VJLWphYefyVA2L0fbAXymAlWn Tg04yDoKHZ5grAwuA5xM/RTPFM9x5m3tgsMMESpcwhZeykQP4KNtsFNZyMQHdWKI C4ui2aZA7mlOKJcX4zjbu8o3PUfTQXhm -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org