$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: Iy3hKm8ob644cC3EIqk4jQv3hz3fNSLmGWZUIa1Lli4= Subject key identifier: 6D:08:F6:B3:B2:4F:75:9D:94:C8:2D:AF:94:D2:2C:16:5B:B0:9D:6F Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 9D Signing time: Thu 21 Nov 2024 04:29:18 +0000 Manifest this update: Thu 21 Nov 2024 04:29:18 +0000 Manifest next update: Thu 28 Nov 2024 04:29:18 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: KUvjj92q32fPZUx9+hy+zMg6PlphApGTHj0YLtgqwK4=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: kRccPK3IKp4TRD5L4za5mKd4/pqRwQieUy3McXFTulI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Nov 21 04:29:18 2024 GMT Not After : Nov 28 04:29:18 2024 GMT Subject: CN=673eb71e-c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:77:6c:fe:79:38:3b:14:83:60:99:bc:04: 80:72:34:47:64:16:50:4a:bc:b1:05:be:52:c5:e1: da:ca:93:7c:11:fc:0d:21:2b:d8:96:42:0c:4a:d8: 8f:0c:f3:6a:05:c5:38:49:59:51:14:fe:85:db:a7: 56:fa:cc:03:d0:9c:04:fc:15:7a:5f:4d:79:23:b8: 0b:e2:3e:67:f6:67:68:6f:11:06:ea:e5:ef:aa:e6: f1:c8:71:3e:89:11:f1:fb:95:10:d6:e1:89:77:4b: 47:22:a3:1b:4f:4c:1b:0e:09:34:e3:c5:6d:ed:ae: 86:a6:4d:f8:40:66:d4:3b:b7:1f:8b:58:87:25:0b: e0:79:88:b3:ea:86:96:3d:b3:0b:3b:ba:b4:13:81: 2d:04:e1:09:94:6d:bd:32:bb:8a:77:34:4b:64:1e: 95:eb:4c:31:5e:29:7a:a1:99:6b:39:e8:fd:0a:0c: 6d:36:7c:d7:31:62:89:da:3e:0e:8e:0c:9e:e5:2f: 10:25:e6:f3:4c:d0:19:a2:28:8e:bd:ef:54:c0:6a: 25:07:7f:4b:17:c8:d0:8e:64:83:5d:1b:dd:42:2d: 75:2f:fb:96:e3:07:91:67:4c:67:93:cf:12:fa:a0: 60:10:0a:98:7b:87:4b:13:e1:3e:70:12:9c:85:11: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:F6:B3:B2:4F:75:9D:94:C8:2D:AF:94:D2:2C:16:5B:B0:9D:6F X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b5:60:18:70:1a:a0:95:e2:73:5a:7b:23:30:9c:6f:3e:04: 19:29:45:a6:e2:e0:67:17:45:60:a1:5b:8a:59:e6:dc:7f:cc: 18:45:70:70:35:b5:9f:08:99:d2:b5:d9:a2:33:17:0e:7e:bd: 2f:ff:94:b6:e0:1b:9d:50:16:7c:a9:86:d9:9c:ff:0f:c3:50: c4:d5:88:66:73:91:5a:bd:ef:c1:2f:fc:a1:14:76:78:4c:7c: 2c:c5:d9:9a:0c:59:0e:5d:5f:a7:de:40:b6:c9:02:e9:a0:cf: d8:a3:d5:ac:66:b1:20:f1:dc:29:d7:93:be:b5:35:37:33:ed: be:c5:b5:61:73:ce:23:f9:f3:ac:b9:a6:1e:98:30:2a:1f:55: 1e:91:9e:80:5e:ca:07:f8:b1:bc:e7:c0:94:93:e7:b3:0c:b8: 43:81:9c:4e:50:af:91:7f:88:a9:5b:51:89:dc:f5:61:23:d3: f2:41:42:f6:f3:dc:d6:39:e7:e8:d5:16:a2:cb:7f:33:bd:36: 3b:67:22:5a:ae:fc:8e:b4:7d:0c:db:7c:ba:6c:3a:f9:96:ba: a1:f8:6d:70:ff:a6:ac:cd:77:b4:0d:fa:e0:08:14:b7:db:29: 34:13:86:1c:95:fa:85:e7:36:fa:ef:ca:2a:a7:7b:6b:51:4e: 07:23:c1:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjQxMTIxMDQyOTE4WhcNMjQxMTI4MDQyOTE4WjAYMRYwFAYD VQQDEw02NzNlYjcxZS1jMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4Z3bP55ODsUg2CZvASAcjRHZBZQSryxBb5SxeHaypN8EfwNISvYlkIMStiP DPNqBcU4SVlRFP6F26dW+swD0JwE/BV6X015I7gL4j5n9mdobxEG6uXvqubxyHE+ iRHx+5UQ1uGJd0tHIqMbT0wbDgk048Vt7a6Gpk34QGbUO7cfi1iHJQvgeYiz6oaW PbMLO7q0E4EtBOEJlG29MruKdzRLZB6V60wxXil6oZlrOej9CgxtNnzXMWKJ2j4O jgye5S8QJebzTNAZoiiOve9UwGolB39LF8jQjmSDXRvdQi11L/uW4weRZ0xnk88S +qBgEAqYe4dLE+E+cBKchRGT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0I9rOy T3WdlMgtr5TSLBZbsJ1vMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtWAYcBqgleJzWnsjMJxvPgQZKUWm4uBnF0VgoVuKWebcf8wYRXBw NbWfCJnStdmiMxcOfr0v/5S24BudUBZ8qYbZnP8Pw1DE1Yhmc5Fave/BL/yhFHZ4 THwsxdmaDFkOXV+n3kC2yQLpoM/Yo9WsZrEg8dwp15O+tTU3M+2+xbVhc84j+fOs uaYemDAqH1UekZ6AXsoH+LG858CUk+ezDLhDgZxOUK+Rf4ipW1GJ3PVhI9PyQUL2 89zWOefo1Raiy38zvTY7ZyJarvyOtH0M23y6bDr5lrqh+G1w/6aszXe0DfrgCBS3 2yk0E4YclfqF5zb678oqp3trUU4HI8HM -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:50 2024 by rpki-client on console-fra.rpki-client.org