$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: 3vuMXhNVsjfZnjMBM8+M0Lg3awIqKvKmL9et/SqfjJs= Subject key identifier: 99:7B:61:09:66:F6:23:32:3C:D4:98:6E:43:6E:FA:A9:F2:CC:F7:C6 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0ED1 Signing time: Fri 22 Nov 2024 17:39:08 +0000 Manifest this update: Fri 22 Nov 2024 17:39:07 +0000 Manifest next update: Fri 29 Nov 2024 17:39:07 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: qFPEoSZukNZhbk1ujSpbnXbjTFHGqSfGzittjhL0fZc=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: MfoY7jUmOisar1psO6c2ywlJIDw6cqEA61WVzaSNP5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Nov 22 17:39:07 2024 GMT Not After : Nov 29 17:39:07 2024 GMT Subject: CN=6740c1bb-397e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:70:da:08:b2:d5:71:f5:18:eb:5e:e9:51: 04:0e:16:11:f4:fd:1f:92:fa:34:19:f4:19:78:2f: d7:6f:60:4e:73:4c:4e:21:9f:9c:91:f1:5f:ad:f5: 18:d9:81:dd:7f:22:6c:6f:b7:e5:84:03:93:40:11: 32:02:92:95:14:1c:23:a7:0a:1a:b2:d7:d9:3e:54: 9e:b4:a8:f6:70:12:22:b1:bb:ed:ac:0e:37:24:8f: 15:1b:60:d9:f1:1b:cb:b2:a9:8f:00:de:3c:27:1b: 61:9d:fc:85:03:32:cb:25:05:2e:ae:ab:aa:0a:85: 79:30:71:9b:45:7f:48:40:60:fc:d9:2f:17:7e:36: 36:1a:6e:b0:44:82:d9:2f:68:5b:17:cd:d0:e7:14: 96:fc:7c:f6:cc:c5:e0:23:2c:2d:13:d7:54:87:f5: 64:b8:a8:a1:17:7c:79:51:e3:b7:0e:14:75:aa:1f: 3f:89:91:31:fd:72:80:7a:7d:21:13:37:60:2e:5d: 5e:e6:8c:ba:9b:58:f0:ae:96:27:86:9a:4c:9e:df: 2d:04:28:a7:7d:a0:f3:2d:4b:48:07:45:32:3c:aa: c8:40:a0:6a:ba:1d:5e:f7:b8:9a:0b:20:e9:5c:79: e9:59:24:4d:69:b6:57:79:21:a8:03:ab:5c:0a:0a: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7B:61:09:66:F6:23:32:3C:D4:98:6E:43:6E:FA:A9:F2:CC:F7:C6 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:13:62:30:bb:bc:85:fc:7a:01:f2:05:50:c3:06:85:75:1a: ba:67:7d:b2:b7:d4:f8:3d:51:3f:29:c5:c6:c6:78:9d:64:fd: d4:83:06:38:4f:22:0d:7c:4c:0d:77:af:cb:7a:94:1d:fa:8b: 73:4c:b2:dd:2b:33:c5:14:1e:8a:1d:3b:ab:8d:9e:ca:5f:ea: f0:0d:8d:5a:9f:60:f2:d2:1b:d2:2d:a9:b1:d8:dd:32:01:cf: c4:59:30:4c:33:6e:ab:46:af:c3:21:09:27:47:5b:67:2c:84: 0f:3b:c9:a1:0e:b5:b8:76:c6:96:bd:2b:7c:cd:93:7b:80:c5: 8e:b8:b1:08:04:bd:36:a7:36:bd:16:69:28:9a:cb:e7:17:5a: 20:5c:6e:6d:0d:03:eb:be:9b:03:1e:eb:fa:ce:1e:a6:5b:ab: f9:9e:c6:1c:3b:88:95:61:23:0c:14:c0:aa:29:37:9d:c8:09: 99:7a:65:4b:2f:63:7e:77:41:b7:d5:40:fa:9b:bd:98:3e:8e: 4f:93:51:7b:2e:6f:15:00:9c:54:fb:d9:2c:ac:e5:8e:21:bb: c8:f0:e6:91:cb:85:d9:52:de:af:74:88:ad:a7:57:d8:ba:09: 62:08:c4:50:f7:7f:9b:d6:3a:ff:6c:2b:dd:d2:08:b9:c5:e4: 23:98:c0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjQxMTIyMTczOTA3WhcNMjQxMTI5MTczOTA3WjAYMRYwFAYD VQQDEw02NzQwYzFiYi0zOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uNw2giy1XH1GOte6VEEDhYR9P0fkvo0GfQZeC/Xb2BOc0xOIZ+ckfFfrfUY 2YHdfyJsb7flhAOTQBEyApKVFBwjpwoastfZPlSetKj2cBIisbvtrA43JI8VG2DZ 8RvLsqmPAN48JxthnfyFAzLLJQUurquqCoV5MHGbRX9IQGD82S8XfjY2Gm6wRILZ L2hbF83Q5xSW/Hz2zMXgIywtE9dUh/VkuKihF3x5UeO3DhR1qh8/iZEx/XKAen0h EzdgLl1e5oy6m1jwrpYnhppMnt8tBCinfaDzLUtIB0UyPKrIQKBquh1e97iaCyDp XHnpWSRNabZXeSGoA6tcCgpJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl7YQlm 9iMyPNSYbkNu+qnyzPfGMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUE2Iwu7yF/HoB8gVQwwaFdRq6Z32yt9T4PVE/KcXGxnidZP3UgwY4 TyINfEwNd6/LepQd+otzTLLdKzPFFB6KHTurjZ7KX+rwDY1an2Dy0hvSLamx2N0y Ac/EWTBMM26rRq/DIQknR1tnLIQPO8mhDrW4dsaWvSt8zZN7gMWOuLEIBL02pza9 FmkomsvnF1ogXG5tDQPrvpsDHuv6zh6mW6v5nsYcO4iVYSMMFMCqKTedyAmZemVL L2N+d0G31UD6m72YPo5Pk1F7Lm8VAJxU+9ksrOWOIbvI8OaRy4XZUt6vdIitp1fY ugliCMRQ93+b1jr/bCvd0gi5xeQjmMD3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org