$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json) Hash identifier: cQo1/Vg34RwtwYVNP1o4OvV3LPWgGix8BxzgFiQKuZY= Subject key identifier: 62:20:1A:BD:38:F3:30:FB:23:0C:E5:53:2B:8B:B4:B3:52:FF:85:32 Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft Manifest number: 013C Signing time: Sat 23 Nov 2024 02:41:39 +0000 Manifest this update: Sat 23 Nov 2024 02:41:39 +0000 Manifest next update: Sat 30 Nov 2024 02:41:39 +0000 Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: GP4LUlwpS7owtbOHHYzIAnPij4Frja4V2BUUiwRQNGc=) 2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: hP+l6tFfGRtL/s3PVotLK1C45PriZjz7pB5mLcbuaqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Validity Not Before: Nov 23 02:41:39 2024 GMT Not After : Nov 30 02:41:39 2024 GMT Subject: CN=674140e3-66c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:c7:6f:86:ac:60:8c:09:e4:34:34:86:72: 11:7c:93:60:1a:aa:80:80:a3:bc:3f:92:7c:2d:a7: 34:94:00:e3:7f:6b:f2:d9:15:39:5e:c9:3a:cf:1d: 6b:93:89:dc:06:0e:8a:c2:b6:af:42:2b:dc:7c:05: 59:ba:f6:7f:bf:ee:2f:4d:6e:c7:61:bb:60:18:62: c0:13:2f:c7:c1:7f:36:08:19:fe:f8:eb:5e:a8:0d: 3b:75:2f:78:c1:39:52:77:74:0e:38:9b:e6:38:93: 83:d3:40:9f:2f:e6:6b:df:0b:dd:8e:09:fa:51:f1: 95:3d:30:8c:b1:b9:dd:08:af:4e:62:3a:94:4b:73: b5:f5:e8:c2:1e:70:e6:6d:bb:36:65:7e:2f:8e:41: c9:6c:06:8f:fa:ad:91:a3:af:04:1d:29:36:56:89: 31:7a:b9:10:71:08:ca:c5:64:59:7f:68:ec:72:99: 24:fd:6e:bb:82:e1:d6:a9:5d:cf:9a:bd:da:e3:9d: de:a1:86:58:11:ab:f3:2d:ce:28:7a:f6:12:00:ea: d5:72:39:27:83:ba:57:7c:11:a5:4e:dd:65:0f:66: e6:1b:dd:0e:60:36:15:05:b1:c2:30:f2:6d:1e:81: 89:b7:25:9b:1c:d9:63:9f:0f:d6:73:7d:fd:b2:95: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:20:1A:BD:38:F3:30:FB:23:0C:E5:53:2B:8B:B4:B3:52:FF:85:32 X509v3 Authority Key Identifier: keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:7c:a3:ff:2f:b5:12:60:b2:ac:e5:3c:c0:ea:5e:40:6e: 22:55:31:a5:d0:9c:55:d7:4c:85:d2:59:f7:3c:ad:8c:85:a3: 9f:4a:a9:03:a9:89:08:ce:6e:0e:ee:77:64:02:76:f9:22:64: 8d:f2:52:27:09:e8:91:79:98:6e:3e:48:80:93:14:bb:ea:75: 2e:ae:c7:3e:a9:99:f9:00:d5:f8:65:c6:82:dc:0c:7b:6e:25: ec:27:fe:2e:4a:f0:01:55:6a:15:2d:e9:25:f8:98:0c:0d:2c: c6:ba:4e:97:bb:c8:29:36:6e:10:3d:85:a4:f1:0f:28:e0:05: ed:12:6e:70:87:a3:79:c3:9d:31:dd:6e:50:01:08:c1:85:70: ca:9c:f5:94:9c:54:f3:b4:8e:e2:f5:12:27:6f:26:20:f8:02: be:16:2f:79:7c:9a:2d:2d:39:37:0f:21:00:c9:7f:cd:76:05: dd:b4:ba:7d:d1:88:eb:94:74:f5:fe:46:31:a8:ff:44:81:6e: 65:d4:42:1a:ca:24:43:cb:6f:bb:e7:9b:98:09:3f:6d:ba:17: e4:f2:4f:10:7b:af:71:d1:16:da:d0:03:1d:79:a8:9f:cc:45: 99:8f:af:0d:cc:c2:f0:3e:06:d2:2c:14:aa:62:4a:63:28:ae: 71:5a:6c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRDOUE0NjQ1Njgz QzM5RThBMTEwHhcNMjQxMTIzMDI0MTM5WhcNMjQxMTMwMDI0MTM5WjAYMRYwFAYD VQQDEw02NzQxNDBlMy02NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0vHb4asYIwJ5DQ0hnIRfJNgGqqAgKO8P5J8Lac0lADjf2vy2RU5Xsk6zx1r k4ncBg6KwravQivcfAVZuvZ/v+4vTW7HYbtgGGLAEy/HwX82CBn++OteqA07dS94 wTlSd3QOOJvmOJOD00CfL+Zr3wvdjgn6UfGVPTCMsbndCK9OYjqUS3O19ejCHnDm bbs2ZX4vjkHJbAaP+q2Ro68EHSk2VokxerkQcQjKxWRZf2jscpkk/W67guHWqV3P mr3a453eoYZYEavzLc4oevYSAOrVcjkng7pXfBGlTt1lD2bmG90OYDYVBbHCMPJt HoGJtyWbHNljnw/Wc339spVWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIgGr04 8zD7IwzlUyuLtLNS/4UyMB8GA1UdIwQYMBaAFH+xbkD6PKd/ziTEyaRkVoPDnooR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjgzRC9BM0Q1MkZCOEM4 NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAzX09KTVRKcEdSV2c4T2Vp aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3RnVRUG84cDNfT0pNVEpwR1JXZzhPZWloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAz X09KTVRKcEdSV2c4T2VpaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC1Hyj/y+1EmCyrOU8wOpeQG4iVTGl0JxV10yF0ln3PK2MhaOfSqkD qYkIzm4O7ndkAnb5ImSN8lInCeiReZhuPkiAkxS76nUursc+qZn5ANX4ZcaC3Ax7 biXsJ/4uSvABVWoVLekl+JgMDSzGuk6Xu8gpNm4QPYWk8Q8o4AXtEm5wh6N5w50x 3W5QAQjBhXDKnPWUnFTztI7i9RInbyYg+AK+Fi95fJotLTk3DyEAyX/NdgXdtLp9 0YjrlHT1/kYxqP9EgW5l1EIayiRDy2+755uYCT9tuhfk8k8Qe69x0Rba0AMdeaif zEWZj68NzMLwPgbSLBSqYkpjKK5xWmza -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org