$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: 3d2dQQZqdt8NeFy+l8lv1nwGpYivVR9ADU9hUFrBYKk= Subject key identifier: 8F:92:2D:96:5A:1C:38:D2:B0:4C:F5:4C:45:9E:66:BA:56:8E:F5:CB Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0EDA Signing time: Fri 22 Nov 2024 17:52:40 +0000 Manifest this update: Fri 22 Nov 2024 17:52:39 +0000 Manifest next update: Fri 29 Nov 2024 17:52:39 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: KgJ78BhC6xQi6ZKqC8Eh92WJyg634unPfP8Ucg8ZYpE=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: HiUI4r/SFIegFaFFoXRBRf157uEBpMM7bqdYETmrC8o=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: 8sLoIeCKa+LBQU6M3xgcWt70Xa8ypzI1STCtNIDj7w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Nov 22 17:52:39 2024 GMT Not After : Nov 29 17:52:39 2024 GMT Subject: CN=6740c4e8-3dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:02:20:f1:ad:45:19:ff:38:ac:da:a3:27: ce:18:6c:2b:dc:71:87:ab:2c:b2:19:bf:f9:32:25: cf:ea:8b:db:10:99:06:4f:f7:27:17:ea:d8:d3:55: 19:38:ad:11:cc:54:6c:d5:e2:09:23:0f:c2:83:61: 2a:40:68:71:31:c4:c8:45:5e:ea:a9:ec:71:e8:09: 56:59:57:79:a0:a9:07:8d:0b:71:a8:5d:a1:73:ae: e3:1b:8e:f5:cc:a1:40:01:2c:05:cd:3c:0f:d7:30: 1a:db:dc:22:9b:aa:4d:1a:99:dc:9b:22:e0:32:37: 12:b7:af:ce:5f:76:1e:3a:bf:2f:e6:d9:85:a7:ef: d9:5c:65:56:94:a5:36:f9:f3:6d:27:f7:52:d7:d8: 2f:83:e2:63:82:49:ea:b3:f4:66:aa:97:21:e1:48: 21:49:d7:8e:b0:b4:37:d3:c6:da:0b:50:5e:33:84: 0a:18:01:eb:74:9c:60:76:b4:37:c4:78:f4:cf:21: da:b7:f7:61:f2:d2:3c:c8:9f:00:40:95:7b:0c:17: 0d:20:8b:34:84:52:36:de:d1:7d:61:2e:23:a6:e0: 50:37:87:b3:94:10:63:bb:40:af:f4:44:c1:e6:9e: 3b:e9:8a:16:f3:a2:4a:5f:e0:83:3b:05:a1:ff:e8: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:92:2D:96:5A:1C:38:D2:B0:4C:F5:4C:45:9E:66:BA:56:8E:F5:CB X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:27:69:93:3b:01:69:b7:cb:a2:fc:20:d2:73:fd:12:71:6a: 88:2d:f2:e5:bb:4c:ec:89:3b:05:8b:d9:cb:14:de:2f:d8:45: 02:90:a8:5d:13:d6:b1:5a:b6:64:d8:f0:b2:35:ac:50:a4:2c: 48:5d:48:5e:be:a7:df:aa:0c:f1:43:e2:e5:36:d3:98:56:15: 55:92:7d:81:4a:5e:9f:a3:9c:e9:c6:72:1c:f7:11:cd:e2:8e: 80:41:92:40:52:f9:a8:c3:b0:a8:9a:ec:74:67:97:98:bc:d9: b5:21:d3:c6:fe:fc:59:d7:47:e7:75:ef:0f:e1:eb:a0:ad:64: c0:84:34:47:b4:e7:f4:c9:0a:68:e2:81:0b:08:5d:05:e8:bf: 52:af:1f:a9:e3:7f:9d:38:ad:38:5b:62:32:cb:b6:f7:59:b0: 2a:a6:d7:a8:28:ad:c2:93:f8:c6:5f:fd:2b:48:f4:7d:c4:5f: 97:93:7b:74:97:eb:ac:6d:fd:1e:a7:82:1a:8f:dc:08:09:2c: 07:9a:c6:bb:01:c3:91:9f:3e:27:6d:9b:c5:e7:50:5b:41:cd: d1:74:e8:d8:0b:ff:a5:ae:25:c7:2c:e7:d8:03:0f:39:e4:8b: dc:2d:6e:6a:82:64:c2:2d:52:9e:63:a7:d1:3a:84:a3:8d:e4: ab:aa:26:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjQxMTIyMTc1MjM5WhcNMjQxMTI5MTc1MjM5WjAYMRYwFAYD VQQDEw02NzQwYzRlOC0zZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu80CIPGtRRn/OKzaoyfOGGwr3HGHqyyyGb/5MiXP6ovbEJkGT/cnF+rY01UZ OK0RzFRs1eIJIw/Cg2EqQGhxMcTIRV7qqexx6AlWWVd5oKkHjQtxqF2hc67jG471 zKFAASwFzTwP1zAa29wim6pNGpncmyLgMjcSt6/OX3YeOr8v5tmFp+/ZXGVWlKU2 +fNtJ/dS19gvg+Jjgknqs/Rmqpch4UghSdeOsLQ308baC1BeM4QKGAHrdJxgdrQ3 xHj0zyHat/dh8tI8yJ8AQJV7DBcNIIs0hFI23tF9YS4jpuBQN4ezlBBju0Cv9ETB 5p476YoW86JKX+CDOwWh/+iRuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+SLZZa HDjSsEz1TEWeZrpWjvXLMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNJ2mTOwFpt8ui/CDSc/0ScWqILfLlu0zsiTsFi9nLFN4v2EUCkKhd E9axWrZk2PCyNaxQpCxIXUhevqffqgzxQ+LlNtOYVhVVkn2BSl6fo5zpxnIc9xHN 4o6AQZJAUvmow7Comux0Z5eYvNm1IdPG/vxZ10fnde8P4eugrWTAhDRHtOf0yQpo 4oELCF0F6L9Srx+p43+dOK04W2Iyy7b3WbAqpteoKK3Ck/jGX/0rSPR9xF+Xk3t0 l+usbf0ep4Iaj9wICSwHmsa7AcORnz4nbZvF51BbQc3RdOjYC/+lriXHLOfYAw85 5IvcLW5qgmTCLVKeY6fROoSjjeSrqia/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org