$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: KN1W6DwNJ425RUhK11M0OgHAetXmTA5zfN2iSR1m+Zw= Subject key identifier: F6:14:DD:10:F0:38:35:63:FD:BB:EF:D7:2A:45:1D:35:A5:DD:98:FA Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 058C Signing time: Sun 24 Nov 2024 22:37:52 +0000 Manifest this update: Sun 24 Nov 2024 22:37:52 +0000 Manifest next update: Sun 01 Dec 2024 22:37:52 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: LSABEDpeQSAvmkFJ/KjOCPn6zidXHNEBRqs4g3E4oIY=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 71YGKNQuEj1eOHiH3hSh40TaFwuCn87ADtJkRqIHklk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Nov 24 22:37:52 2024 GMT Not After : Dec 1 22:37:52 2024 GMT Subject: CN=6743aac0-8493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:3a:6f:c9:b5:a0:68:9e:7b:b0:24:63:92: b6:75:b6:1e:d4:3d:5b:5f:43:7a:e8:88:6a:43:f7: 02:81:c5:cd:de:0b:28:78:41:97:55:d9:62:14:fb: 97:4b:0c:32:89:79:1f:3b:da:2e:de:5d:dd:b9:47: 81:71:19:dc:f9:11:49:e7:a0:54:a2:12:f5:bd:58: 07:1f:22:63:4b:1a:bb:1e:dd:5b:90:91:1b:e6:b2: f6:c2:ee:0a:42:4c:fc:21:21:b8:97:73:94:03:88: 8b:15:62:01:1e:d1:d0:3b:40:84:b0:3b:71:e2:29: e4:77:01:86:e1:a4:0c:1a:65:e0:9e:6e:0b:6b:73: c8:9f:e1:a9:30:fe:9c:cd:37:04:c4:b4:5a:1d:88: 95:2a:2f:e3:6c:ec:9b:64:8e:f6:5a:b7:a2:2c:bf: 09:3f:5d:d1:28:15:53:10:c2:3a:be:50:31:e4:d6: d7:e1:09:4c:d2:bf:6d:56:82:0e:41:49:6d:5e:e6: af:c4:22:b3:1a:a4:75:4c:ea:b6:ec:97:0d:32:2b: 39:54:c4:ff:f2:77:92:b6:f5:fa:e1:1a:76:0f:eb: 16:a4:e4:45:0e:ac:91:63:7f:5f:46:8f:54:e9:ad: 23:30:c5:94:ff:85:4e:a9:01:2d:1b:c5:33:94:45: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:14:DD:10:F0:38:35:63:FD:BB:EF:D7:2A:45:1D:35:A5:DD:98:FA X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:97:c2:79:b6:c6:4b:d7:1c:84:30:39:ea:04:4c:df:aa:bc: 66:f6:0b:fe:17:cc:3a:7f:f1:50:76:05:79:f6:dd:e2:59:41: b3:e5:cb:34:27:35:67:06:ba:5d:1f:77:aa:23:7b:da:a5:92: 50:30:74:d6:2c:cc:73:6a:d4:ab:89:b9:d4:dd:31:de:01:b9: 16:11:6a:54:4b:02:b1:4a:81:a3:99:58:63:4b:fa:01:f7:41: e1:a1:90:a8:9b:d5:ed:8f:91:58:1b:7a:35:a5:4e:52:43:b7: 6d:ea:6a:fc:4e:9c:31:5a:9a:30:b7:ee:7b:98:59:0d:5a:cd: 97:fe:92:b7:41:90:1e:ef:0e:b0:a4:39:93:0d:91:f0:7b:45: 73:b0:76:75:34:87:d8:e1:0b:f7:09:cd:a7:52:e4:04:c0:b3: b5:e1:63:1b:3a:e5:d6:7e:83:c3:05:41:3c:7e:6a:22:7e:1a: ba:15:f6:f0:51:4c:5c:86:9a:ed:3d:4d:f6:8c:57:f3:e7:37: 38:9d:b3:a4:dc:d8:72:20:02:7e:69:7f:55:a4:e5:1c:b5:5b: 22:a0:1d:45:bd:49:c1:f8:32:43:c9:bf:3a:f4:a8:f3:af:90: cd:4b:db:22:10:47:41:0f:83:6a:15:6b:7e:26:a9:f5:6a:60: 49:33:9a:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjQxMTI0MjIzNzUyWhcNMjQxMjAxMjIzNzUyWjAYMRYwFAYD VQQDEw02NzQzYWFjMC04NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJY6b8m1oGiee7AkY5K2dbYe1D1bX0N66IhqQ/cCgcXN3gsoeEGXVdliFPuX SwwyiXkfO9ou3l3duUeBcRnc+RFJ56BUohL1vVgHHyJjSxq7Ht1bkJEb5rL2wu4K Qkz8ISG4l3OUA4iLFWIBHtHQO0CEsDtx4inkdwGG4aQMGmXgnm4La3PIn+GpMP6c zTcExLRaHYiVKi/jbOybZI72WreiLL8JP13RKBVTEMI6vlAx5NbX4QlM0r9tVoIO QUltXuavxCKzGqR1TOq27JcNMis5VMT/8neStvX64Rp2D+sWpORFDqyRY39fRo9U 6a0jMMWU/4VOqQEtG8UzlEUItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYU3RDw ODVj/bvv1ypFHTWl3Zj6MB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvl8J5tsZL1xyEMDnqBEzfqrxm9gv+F8w6f/FQdgV59t3iWUGz5cs0 JzVnBrpdH3eqI3vapZJQMHTWLMxzatSribnU3THeAbkWEWpUSwKxSoGjmVhjS/oB 90HhoZCom9Xtj5FYG3o1pU5SQ7dt6mr8TpwxWpowt+57mFkNWs2X/pK3QZAe7w6w pDmTDZHwe0VzsHZ1NIfY4Qv3Cc2nUuQEwLO14WMbOuXWfoPDBUE8fmoifhq6Ffbw UUxchprtPU32jFfz5zc4nbOk3NhyIAJ+aX9VpOUctVsioB1FvUnB+DJDyb869Kjz r5DNS9siEEdBD4NqFWt+Jqn1amBJM5rK -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:51 2024 by rpki-client on console-fra.rpki-client.org