$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: DxVqhTWL9J9TSxLQ5UJ7T4/8XQezXjRX7CTzyDmvg7o= Subject key identifier: C6:D8:5B:11:0D:22:62:D5:BC:4D:F6:7F:C5:F6:C2:12:CC:42:98:5C Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: 54 Signing time: Sat 23 Nov 2024 05:08:56 +0000 Manifest this update: Sat 23 Nov 2024 05:08:55 +0000 Manifest next update: Sat 30 Nov 2024 05:08:55 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 5HdcQfXhUJpk4GvgkoVIBA6wOC5s0OWoEkvNcEmVAZ0=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Nov 23 05:08:55 2024 GMT Not After : Nov 30 05:08:55 2024 GMT Subject: CN=67416367-00d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:be:82:c9:34:7a:2a:b6:d9:24:6d:d0:8a: 9e:7a:83:5b:aa:bf:f2:2b:21:aa:d8:fa:9b:c5:87: ef:09:32:6a:24:7c:6e:c2:d8:4a:d2:0a:73:d7:de: 72:50:05:16:41:5a:de:29:17:98:92:5b:85:14:7b: 00:8d:7c:ca:f2:7d:72:71:1c:6c:23:30:48:b8:cc: 00:7d:80:e4:34:09:a2:ef:6c:58:e0:ea:51:7c:2a: e1:02:9b:5a:5b:50:e1:4e:32:86:8c:57:b0:b1:79: 1f:30:dd:a5:ae:99:75:6a:0b:45:6c:a5:cf:b6:90: 5c:92:ed:45:ff:f0:63:26:2a:79:9c:22:d0:f5:21: a6:1e:0b:20:5c:31:12:90:42:70:a8:aa:92:0d:50: b7:21:ea:fe:ab:3f:81:13:06:4e:8d:dd:61:1d:51: 96:7a:87:8c:5d:6c:31:a4:67:36:7d:38:bf:88:11: 7e:38:4b:c7:94:c9:ee:c3:79:54:8a:98:84:f8:f7: 75:df:cd:c2:7f:6b:79:4a:4f:83:ca:b3:53:8b:0e: da:50:bd:f2:17:5d:d7:fe:bd:00:a0:f1:c6:e2:b1: 3f:7d:95:fa:43:5e:0c:3d:59:22:a7:29:b5:51:a6: 29:32:c7:7f:e9:de:ed:da:c1:61:3d:45:2c:67:f2: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:5B:11:0D:22:62:D5:BC:4D:F6:7F:C5:F6:C2:12:CC:42:98:5C X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:31:0e:c3:4c:31:c1:0d:d3:0a:1c:5f:77:04:35:78:2f:fa: 47:07:60:40:7f:bd:ed:14:c9:23:53:48:ec:6a:8d:7e:29:01: 21:86:52:bd:77:59:13:78:62:40:3a:af:68:d0:2a:e0:5a:e4: bc:0d:89:e3:32:29:ce:db:a8:67:7b:20:54:24:02:a4:26:f0: 71:27:d0:66:86:a8:eb:65:98:e8:3f:d3:aa:a7:1f:c2:ee:97: 27:6f:c1:81:6d:0c:ee:03:3f:9e:d0:13:81:ee:1a:90:28:20: 94:5c:ea:5a:a8:ef:3e:af:6c:02:38:2f:dc:62:a1:8d:83:c3: 6e:77:58:92:de:84:ef:11:99:e3:fe:77:86:16:95:eb:be:56: 05:9c:17:88:6f:bd:77:4b:cc:3e:96:00:ed:6b:b8:33:6a:91: f4:76:7d:39:9f:f0:22:b0:11:5c:36:3e:a5:a8:2d:bd:e5:1b: dd:8c:a1:4d:dc:82:2c:ea:29:85:13:81:f7:f8:18:57:a2:25: 2d:ce:f1:84:04:4b:59:85:a7:b5:85:66:08:db:21:ad:47:ae: e3:47:ae:82:d3:85:76:fa:95:fd:9f:9e:a3:d1:9b:00:21:6e: eb:3f:2b:28:94:b7:e6:d8:ea:77:64:67:fb:8e:9a:06:e7:dd: af:09:3e:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVCQTExMC8GA1UEBRMoMTU2RDRBOUM2RjE1RUIyQjRCM0YzNjdENjlGQUEyNTEw MTI4MDc4ODAeFw0yNDExMjMwNTA4NTVaFw0yNDExMzAwNTA4NTVaMBgxFjAUBgNV BAMTDTY3NDE2MzY3LTAwZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Hr6CyTR6KrbZJG3Qip56g1uqv/IrIarY+pvFh+8JMmokfG7C2ErSCnPX3nJQ BRZBWt4pF5iSW4UUewCNfMryfXJxHGwjMEi4zAB9gOQ0CaLvbFjg6lF8KuECm1pb UOFOMoaMV7CxeR8w3aWumXVqC0Vspc+2kFyS7UX/8GMmKnmcItD1IaYeCyBcMRKQ QnCoqpINULch6v6rP4ETBk6N3WEdUZZ6h4xdbDGkZzZ9OL+IEX44S8eUye7DeVSK mIT493XfzcJ/a3lKT4PKs1OLDtpQvfIXXdf+vQCg8cbisT99lfpDXgw9WSKnKbVR pikyx3/p3u3awWE9RSxn8scvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxthbEQ0i YtW8TfZ/xfbCEsxCmFwwHwYDVR0jBBgwFoAUFW1KnG8V6ytLPzZ9afqiUQEoB4gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUJBLzcyRTU0Q0ZFMkM1 MzExRUY5MUJGN0MzMEM0RjlBRTAyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlcxS25HOFY2eXRMUHpaOWFmcWlVUUVvQjRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUJBLzcyRTU0Q0ZFMkM1MzExRUY5MUJGN0MzMEM0RjlBRTAyL0ZXMUtuRzhWNnl0 TFB6WjlhZnFpVVFFb0I0Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEoxDsNMMcEN0wocX3cENXgv+kcHYEB/ve0UySNTSOxqjX4pASGGUr13 WRN4YkA6r2jQKuBa5LwNieMyKc7bqGd7IFQkAqQm8HEn0GaGqOtlmOg/06qnH8Lu lydvwYFtDO4DP57QE4HuGpAoIJRc6lqo7z6vbAI4L9xioY2Dw253WJLehO8RmeP+ d4YWleu+VgWcF4hvvXdLzD6WAO1ruDNqkfR2fTmf8CKwEVw2PqWoLb3lG92MoU3c gizqKYUTgff4GFeiJS3O8YQES1mFp7WFZgjbIa1HruNHroLThXb6lf2fnqPRmwAh bus/KyiUt+bY6ndkZ/uOmgbn3a8JPvw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org