$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json) Hash identifier: QMBoq2QNbpTBVWDbb5MsZfrJhDse0DF5ZYHviSzWz3o= Subject key identifier: AD:D7:92:8E:7D:22:A1:2A:6B:D4:01:18:49:FB:9E:B3:A6:16:D7:0E Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 15:08:14 +0000 Manifest this update: Fri 22 Nov 2024 15:08:13 +0000 Manifest next update: Fri 29 Nov 2024 15:08:13 +0000 Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: 3AVhUM4dLNY/H3J68r3OIxkKD2h9ObGB5RKhz4aziSQ=) 2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Q6U74OWQee2tozS+dAmpsL+G+700VEvm1Ngpa46boEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Validity Not Before: Nov 22 15:08:13 2024 GMT Not After : Nov 29 15:08:13 2024 GMT Subject: CN=67409e5e-552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:c4:8f:02:2f:4e:0a:06:d7:60:4c:e5:19: 7b:6c:64:59:a0:bc:db:e8:8c:3e:aa:04:6d:b4:46: 08:91:a9:a3:22:cd:4e:3e:18:60:07:39:c1:5a:97: 1e:04:3c:5d:29:e7:9a:e8:16:36:05:fa:4c:4f:7d: 66:72:49:b6:37:3f:f6:0e:4a:ab:4d:17:89:98:74: 33:43:35:d7:7e:db:a9:56:f4:b6:81:b3:42:41:25: 8a:5c:5a:ca:e1:b6:9e:23:7d:48:5b:12:52:c0:34: c9:e6:75:58:ca:e9:7e:8e:af:51:43:89:ca:b4:14: 3b:f6:65:41:b3:e4:1e:49:da:13:1c:c6:44:0f:1e: 83:a5:11:e9:61:c3:43:7b:97:0d:1e:73:92:5c:c9: d2:de:cc:db:67:04:91:16:cc:5a:39:89:9f:ed:ea: 31:6f:6a:1f:e0:7a:07:59:eb:26:a8:59:20:27:e3: d1:b7:83:59:82:20:e8:e7:9c:c0:57:58:64:b0:b8: c6:71:e0:25:4d:9c:71:a5:b7:9c:ac:6e:33:7b:a1: 32:0d:c9:76:8c:22:12:79:86:c2:66:89:eb:b1:34: 77:04:81:84:20:6a:9b:83:94:bd:0c:5f:7a:58:fd: 05:f1:a3:ea:5a:86:34:f9:73:18:32:80:7e:32:bc: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:92:8E:7D:22:A1:2A:6B:D4:01:18:49:FB:9E:B3:A6:16:D7:0E X509v3 Authority Key Identifier: keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d2:92:24:d6:40:16:b9:43:07:9e:9f:76:d1:64:1b:16:6d: a9:8e:0d:32:91:1a:20:bf:f8:87:a1:29:33:b8:07:0a:df:53: 32:35:37:f1:b1:3e:53:6a:e9:00:d5:5e:08:70:82:cf:64:47: 39:d7:11:7c:9d:9a:1d:7e:5f:4f:c0:f8:e4:fb:5e:7f:d0:87: f2:7a:79:2c:42:76:07:90:21:76:d2:f1:d1:81:ef:01:8e:3b: 2e:85:fb:a6:85:92:a6:d0:38:b1:e3:e9:46:b6:f5:7f:fd:ad: 81:96:18:61:e0:2e:1c:4b:d7:a9:35:1f:31:38:55:d1:d1:26: 30:44:5d:9a:11:15:ed:e6:24:75:d8:af:ab:54:66:a8:b2:88: 02:4f:d7:91:b8:21:ce:42:a8:36:42:b2:d8:de:e8:78:0c:51: 32:b3:65:3b:0a:ce:55:c2:13:37:77:5e:93:fa:dd:69:6f:7c: f0:2e:67:34:29:65:44:38:fb:1b:1d:2b:fa:20:75:5e:84:2c: a3:07:03:04:8d:35:c7:8c:2d:bc:a8:12:29:df:b3:7c:85:2b: 59:a0:78:ba:af:27:86:6c:df:e6:db:38:f5:25:24:8b:32:c8: 4a:90:06:05:2a:60:d2:64:b3:b0:8c:8a:5b:85:2e:5b:43:39: b4:ad:db:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0 Mzg2Mjk3QkYwHhcNMjQxMTIyMTUwODEzWhcNMjQxMTI5MTUwODEzWjAYMRYwFAYD VQQDEw02NzQwOWU1ZS01NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrzEjwIvTgoG12BM5Rl7bGRZoLzb6Iw+qgRttEYIkamjIs1OPhhgBznBWpce BDxdKeea6BY2BfpMT31mckm2Nz/2DkqrTReJmHQzQzXXftupVvS2gbNCQSWKXFrK 4baeI31IWxJSwDTJ5nVYyul+jq9RQ4nKtBQ79mVBs+QeSdoTHMZEDx6DpRHpYcND e5cNHnOSXMnS3szbZwSRFsxaOYmf7eoxb2of4HoHWesmqFkgJ+PRt4NZgiDo55zA V1hksLjGceAlTZxxpbecrG4ze6EyDcl2jCISeYbCZonrsTR3BIGEIGqbg5S9DF96 WP0F8aPqWoY0+XMYMoB+Mry0PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3Xko59 IqEqa9QBGEn7nrOmFtcOMB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3 ck00aWdSblAtQU5EaGlsNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB80pIk1kAWuUMHnp920WQbFm2pjg0ykRogv/iHoSkzuAcK31MyNTfx sT5TaukA1V4IcILPZEc51xF8nZodfl9PwPjk+15/0IfyenksQnYHkCF20vHRge8B jjsuhfumhZKm0Dix4+lGtvV//a2Blhhh4C4cS9epNR8xOFXR0SYwRF2aERXt5iR1 2K+rVGaosogCT9eRuCHOQqg2QrLY3uh4DFEys2U7Cs5VwhM3d16T+t1pb3zwLmc0 KWVEOPsbHSv6IHVehCyjBwMEjTXHjC28qBIp37N8hStZoHi6ryeGbN/m2zj1JSSL MshKkAYFKmDSZLOwjIpbhS5bQzm0rdtm -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org