$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: 1cdn9yaJONqhLO8YX+kNZo/sUtJqnl24TeTX+b+b9pw= Subject key identifier: F8:3A:C9:0D:3E:4C:07:FD:24:2B:ED:58:77:DC:A7:C3:BE:0D:C0:4A Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0162 Signing time: Tue 03 Dec 2024 02:32:13 +0000 Manifest this update: Tue 03 Dec 2024 02:32:13 +0000 Manifest next update: Tue 10 Dec 2024 02:32:13 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: 2RXMJokR6gsKl7KeH6JthZD+Ao6z72fxs6d85AG5MPQ=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: +c/zc2M6EaCjZss6KyiDiaF5vMET6QNIUwZ2J66ySBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Dec 2024 02:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Dec 3 02:32:13 2024 GMT Not After : Dec 10 02:32:13 2024 GMT Subject: CN=674e6dad-aa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:17:d2:af:ce:b7:31:ca:57:c7:fa:e3:3f:ab: ef:f8:a6:64:b9:9c:61:84:4f:d2:fc:8a:2c:54:f7: b7:15:2e:fe:0e:d3:d9:0e:7e:2d:de:57:2d:c1:b3: 25:47:d8:be:1f:25:da:34:cb:70:c1:f7:07:78:e7: ea:b5:5e:bc:2f:b9:48:4a:dc:f6:1b:8f:24:3e:00: 51:c8:0f:67:10:e0:98:88:c7:72:0a:2d:7e:8e:4b: e6:23:e8:4b:c2:8f:cd:7d:32:f1:86:c1:6b:b8:32: 64:9a:e1:74:67:17:42:22:5e:40:fb:64:2d:7a:b6: 22:23:5a:2f:97:44:49:08:47:5e:74:2a:61:cd:00: 08:f1:26:33:8d:c3:92:1c:b1:67:76:66:28:04:38: d2:a1:92:9b:d1:75:1d:9d:14:53:74:16:22:c5:aa: 78:10:35:41:64:c5:65:2f:09:88:41:a6:71:68:75: 06:f8:f5:be:32:6d:d6:88:7d:02:fe:00:b6:40:a8: 59:a0:a3:55:b4:22:c2:56:23:0c:ec:cf:41:db:b8: e8:3f:0a:da:18:9a:f7:47:96:2a:ba:20:58:97:bf: 63:28:68:9e:f7:7b:59:58:70:34:16:3a:09:19:ad: 27:45:e1:2d:f9:6a:ad:33:69:29:a1:0d:af:04:1f: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:C9:0D:3E:4C:07:FD:24:2B:ED:58:77:DC:A7:C3:BE:0D:C0:4A X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:55:26:9e:dd:a0:14:24:96:18:3b:ae:09:8b:ee:fb:44:b0: 4a:ba:9c:ec:7e:6e:ee:cf:0f:c8:db:a2:35:e8:db:b5:61:75: 68:15:9c:a5:05:b6:51:36:87:e9:48:60:2f:ff:ff:eb:d9:de: 4b:7d:a4:c8:14:e4:13:82:26:c8:c8:90:6f:d7:18:29:44:31: 75:fe:4f:bc:8f:fa:83:b2:47:3f:1e:a1:f0:78:e0:af:5a:86: ba:d3:77:83:5d:44:65:f5:d1:15:66:d9:19:d4:83:23:c9:23: 8c:a6:5b:d3:02:4a:90:fa:96:ac:44:cb:16:cc:f2:42:6c:34: 20:38:bd:d1:fa:bd:7a:7e:8e:25:a1:e5:ea:e4:58:8c:b2:b3: 91:8a:30:3b:7f:71:c9:88:57:03:0a:e6:f1:cf:35:ff:03:d5: 01:af:0c:9d:bc:f3:9b:5b:c5:dc:cd:f9:3e:c3:07:71:d5:b6: ea:3d:51:c2:11:36:45:e1:be:84:e6:17:b7:e3:0f:9e:3f:fc: 42:d5:f4:d5:fb:31:7e:bd:a5:5b:dc:d3:aa:39:64:e0:61:6a: 07:58:ee:ab:ca:f4:1a:2d:39:7c:0d:79:5c:4c:23:c8:30:d9: f9:06:01:ef:50:f7:cc:69:d8:22:0d:80:f7:c4:10:43:dd:81: b4:96:99:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjQxMjAzMDIzMjEzWhcNMjQxMjEwMDIzMjEzWjAYMRYwFAYD VQQDEw02NzRlNmRhZC1hYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hfSr863McpXx/rjP6vv+KZkuZxhhE/S/IosVPe3FS7+DtPZDn4t3lctwbMl R9i+HyXaNMtwwfcHeOfqtV68L7lIStz2G48kPgBRyA9nEOCYiMdyCi1+jkvmI+hL wo/NfTLxhsFruDJkmuF0ZxdCIl5A+2QterYiI1ovl0RJCEdedCphzQAI8SYzjcOS HLFndmYoBDjSoZKb0XUdnRRTdBYixap4EDVBZMVlLwmIQaZxaHUG+PW+Mm3WiH0C /gC2QKhZoKNVtCLCViMM7M9B27joPwraGJr3R5YquiBYl79jKGie93tZWHA0FjoJ Ga0nReEt+WqtM2kpoQ2vBB+NhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg6yQ0+ TAf9JCvtWHfcp8O+DcBKMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvVSae3aAUJJYYO64Ji+77RLBKupzsfm7uzw/I26I16Nu1YXVoFZyl BbZRNofpSGAv///r2d5LfaTIFOQTgibIyJBv1xgpRDF1/k+8j/qDskc/HqHweOCv Woa603eDXURl9dEVZtkZ1IMjySOMplvTAkqQ+pasRMsWzPJCbDQgOL3R+r16fo4l oeXq5FiMsrORijA7f3HJiFcDCubxzzX/A9UBrwydvPObW8Xczfk+wwdx1bbqPVHC ETZF4b6E5he34w+eP/xC1fTV+zF+vaVb3NOqOWTgYWoHWO6ryvQaLTl8DXlcTCPI MNn5BgHvUPfMadgiDYD3xBBD3YG0lpl0 -----END CERTIFICATE-----Generated at Tue Dec 3 04:39:31 2024 by rpki-client on console-fra.rpki-client.org