$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: Hi9Ja1wsQ95FLnxTgu1BBFsb2RlmI7siMcVWP8rq77Y= Subject key identifier: 7F:B0:41:8F:6F:D7:4A:48:6D:17:FC:BA:E8:49:9F:62:45:90:06:F8 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0B66 Signing time: Fri 22 Nov 2024 18:51:01 +0000 Manifest this update: Fri 22 Nov 2024 18:51:00 +0000 Manifest next update: Fri 29 Nov 2024 18:51:00 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: JU/ZB5A4x36+nJ1Z4V+BC4iFLzYA9hVR4FBF2CcxA5o=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Nov 22 18:51:00 2024 GMT Not After : Nov 29 18:51:00 2024 GMT Subject: CN=6740d294-a6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:cb:a2:55:a1:0a:77:96:ba:26:6e:39:0f: 02:b6:e7:02:9e:c7:c3:fa:d4:29:e6:c3:dd:ea:ee: 0e:d8:5f:85:4e:e3:bb:d6:d3:9b:22:cd:05:21:0f: 46:d7:ce:74:23:32:8e:83:eb:b1:42:19:21:f8:22: e5:73:d3:25:d3:af:3f:81:75:e6:6f:c2:ad:93:87: 20:56:71:58:58:2a:2a:14:3a:34:19:1d:82:5a:3c: 71:00:52:3c:a1:ca:e9:00:c9:d0:c8:ee:c7:42:30: 5d:ed:61:9e:75:e7:36:2f:21:01:5f:1a:2e:00:4f: 6b:88:a1:dc:29:59:0a:ee:3d:02:5a:23:fe:87:cb: 2e:b5:a1:39:96:39:24:ae:59:c8:03:8d:e0:0b:09: d4:fb:e5:2e:45:9d:e6:01:55:93:8a:6b:c9:61:cb: d1:f7:ad:41:dc:4c:54:ea:c4:96:f2:e2:60:63:da: 83:e4:10:52:a3:b9:f2:35:29:49:0d:b7:c5:c7:35: 1e:32:67:59:77:09:e2:77:33:89:0c:ec:00:b5:c8: 0b:f3:03:d2:e4:ec:38:53:89:03:c9:3b:7f:b3:9a: 50:ea:7a:ed:7e:f4:9f:a2:04:ed:13:13:c1:2f:85: 6e:a1:cd:4a:99:a5:e5:e2:50:4a:c0:a4:5f:8a:ad: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B0:41:8F:6F:D7:4A:48:6D:17:FC:BA:E8:49:9F:62:45:90:06:F8 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8f:68:0f:11:55:29:15:f8:fc:5e:e7:06:44:66:53:44:63: 99:4d:0e:f4:86:fc:93:ad:8e:82:3e:71:04:cb:0c:96:81:fc: 87:97:7a:0b:89:b6:ce:75:ab:15:e2:37:31:d3:3e:db:62:05: 80:d7:12:b2:ea:98:c5:99:05:56:4c:4d:69:e8:38:4a:26:21: 79:dd:b6:10:a8:5b:5f:5d:bb:95:a5:28:a7:d5:50:54:a9:a9: 3d:71:a4:29:01:8e:10:82:2c:85:b9:f3:71:6a:d0:f2:09:30: 9d:f9:42:86:13:37:26:ff:6b:56:a1:04:97:f2:31:75:d3:90: 5c:8c:66:3c:bc:be:55:6d:9b:54:d8:3c:57:ae:5e:52:6b:ab: c2:2d:61:6d:49:47:ed:4d:df:ae:ca:f6:91:c7:7a:56:f2:5d: 11:0a:20:50:98:fb:6a:a1:f8:ee:ef:aa:d5:35:06:72:f0:46: ff:27:3d:ac:1e:da:b3:78:ae:68:fe:77:ad:6e:fe:2f:cc:a9: 22:71:e2:ad:47:48:ee:50:ed:6d:2c:92:b3:95:44:06:ff:d0: 29:03:04:ac:85:c3:09:54:2f:df:ab:ec:1d:92:ac:88:fc:38: 6e:b5:ff:bd:8a:76:fa:9c:25:e3:9d:cc:03:08:34:f5:1e:51: 4c:8d:49:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjQxMTIyMTg1MTAwWhcNMjQxMTI5MTg1MTAwWjAYMRYwFAYD VQQDEw02NzQwZDI5NC1hNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwunLolWhCneWuiZuOQ8CtucCnsfD+tQp5sPd6u4O2F+FTuO71tObIs0FIQ9G 1850IzKOg+uxQhkh+CLlc9Ml068/gXXmb8Ktk4cgVnFYWCoqFDo0GR2CWjxxAFI8 ocrpAMnQyO7HQjBd7WGedec2LyEBXxouAE9riKHcKVkK7j0CWiP+h8sutaE5ljkk rlnIA43gCwnU++UuRZ3mAVWTimvJYcvR961B3ExU6sSW8uJgY9qD5BBSo7nyNSlJ DbfFxzUeMmdZdwnidzOJDOwAtcgL8wPS5Ow4U4kDyTt/s5pQ6nrtfvSfogTtExPB L4Vuoc1KmaXl4lBKwKRfiq3BBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+wQY9v 10pIbRf8uuhJn2JFkAb4MB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRj2gPEVUpFfj8XucGRGZTRGOZTQ70hvyTrY6CPnEEywyWgfyHl3oL ibbOdasV4jcx0z7bYgWA1xKy6pjFmQVWTE1p6DhKJiF53bYQqFtfXbuVpSin1VBU qak9caQpAY4QgiyFufNxatDyCTCd+UKGEzcm/2tWoQSX8jF105BcjGY8vL5VbZtU 2DxXrl5Sa6vCLWFtSUftTd+uyvaRx3pW8l0RCiBQmPtqofju76rVNQZy8Eb/Jz2s HtqzeK5o/netbv4vzKkiceKtR0juUO1tLJKzlUQG/9ApAwSshcMJVC/fq+wdkqyI /Dhutf+9inb6nCXjncwDCDT1HlFMjUmA -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org