$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: Gu3/o3tglc8Vy3+SEks3C5SLeOCH503Jltqx1+jV2Yg= Subject key identifier: 3D:3B:9C:32:73:2A:2F:D0:C7:8C:EA:3D:AE:D0:A5:A3:05:BD:DF:DF Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 346F Signing time: Wed 20 Nov 2024 14:25:39 +0000 Manifest this update: Wed 20 Nov 2024 14:25:39 +0000 Manifest next update: Wed 27 Nov 2024 14:25:39 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: w6Yj3c5iCEizYw7ZTpXMnaVBVSRzf+Xqa3DnSMyc5w4=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 5: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 6: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Nov 20 14:25:39 2024 GMT Not After : Nov 27 14:25:39 2024 GMT Subject: CN=673df163-dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:fc:31:17:0c:9c:39:50:4d:f8:6c:71:ec: 6d:f7:db:64:a2:fe:d4:43:6a:2d:6a:9e:1c:35:dd: bb:d1:d8:fd:d0:e9:b9:8d:bb:d8:55:f3:85:de:93: 87:f5:4d:a2:3e:a1:f9:3a:a4:08:43:af:8e:56:86: ff:f8:7a:22:7a:71:3f:4b:3e:7a:3b:5b:aa:d8:b4: ad:22:8d:dd:2f:f7:25:39:8a:93:29:9d:92:56:b1: 4c:d4:ae:b7:43:66:25:f8:a0:bb:3a:43:23:74:a4: 50:b7:6f:fa:6b:aa:9e:2c:8a:37:d3:ad:97:5b:6b: 0e:47:09:2c:aa:fc:b4:9f:1d:f1:87:a8:d5:3b:84: 3c:31:64:15:54:23:a4:6b:c5:80:91:99:4e:e2:e4: c6:58:82:da:7a:14:93:7e:53:62:55:ac:44:60:f2: f3:a9:16:66:0c:e3:c9:13:5e:e0:a5:8e:ac:f2:88: bf:ad:1d:2d:9d:f6:44:57:95:81:79:ad:5f:f0:ae: c7:9a:c4:ab:99:f7:a8:0f:a2:d8:02:79:8d:31:5b: 30:7a:a7:71:36:36:f6:9b:de:93:42:3a:9b:e3:9a: 19:62:ca:96:9d:f0:a0:1f:a5:0b:94:4a:27:cc:6e: d8:bc:95:48:14:5b:fb:79:fd:b5:4c:9b:5d:f9:f6: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3B:9C:32:73:2A:2F:D0:C7:8C:EA:3D:AE:D0:A5:A3:05:BD:DF:DF X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d0:f7:a8:12:bc:6e:da:12:ff:30:b1:79:68:4e:7b:8f:2f: d5:bb:11:d9:39:1e:33:93:f7:a2:42:d4:1f:5c:aa:a2:7e:78: 76:c1:83:91:02:4e:0e:d5:26:0a:fa:95:a4:09:42:0d:54:e4: 0e:e8:b8:36:d5:40:2b:58:fa:d3:fd:a4:10:6d:db:4d:bf:37: 00:e7:c2:d7:44:9c:26:d5:03:61:99:81:d7:df:32:60:51:37: d4:7b:30:e4:d2:65:a5:37:1b:b0:77:e4:57:98:8b:c8:6d:63: 29:a4:79:48:b5:6f:81:f1:ed:51:7e:e6:08:64:61:6d:9d:8c: a8:3d:ec:e1:11:97:36:4f:9e:aa:83:59:65:c0:10:c6:e4:12: 94:77:95:5c:2d:7c:91:0c:cf:e0:e5:4a:57:59:74:1f:6d:df: 42:7f:a1:28:d3:c7:fa:22:42:e4:32:61:d1:f3:d1:3c:9e:8d: bb:7f:0b:cf:67:d1:81:ea:1c:18:83:05:5c:16:60:11:d5:77: 0f:34:8a:5e:76:cf:73:db:3c:65:08:09:70:7b:9a:02:7a:6b: f0:46:1a:bd:fd:5f:59:6d:16:55:df:7b:d9:bd:15:40:d5:f2: 80:b8:ac:fc:27:86:43:2c:bb:93:ba:d5:85:ec:38:93:63:33: 78:55:ef:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjQxMTIwMTQyNTM5WhcNMjQxMTI3MTQyNTM5WjAYMRYwFAYD VQQDEw02NzNkZjE2My1kZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1L8MRcMnDlQTfhscext99tkov7UQ2otap4cNd270dj90Om5jbvYVfOF3pOH 9U2iPqH5OqQIQ6+OVob/+HoienE/Sz56O1uq2LStIo3dL/clOYqTKZ2SVrFM1K63 Q2Yl+KC7OkMjdKRQt2/6a6qeLIo3062XW2sORwksqvy0nx3xh6jVO4Q8MWQVVCOk a8WAkZlO4uTGWILaehSTflNiVaxEYPLzqRZmDOPJE17gpY6s8oi/rR0tnfZEV5WB ea1f8K7HmsSrmfeoD6LYAnmNMVsweqdxNjb2m96TQjqb45oZYsqWnfCgH6ULlEon zG7YvJVIFFv7ef21TJtd+fZNHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD07nDJz Ki/Qx4zqPa7QpaMFvd/fMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB90PeoErxu2hL/MLF5aE57jy/VuxHZOR4zk/eiQtQfXKqifnh2wYOR Ak4O1SYK+pWkCUINVOQO6Lg21UArWPrT/aQQbdtNvzcA58LXRJwm1QNhmYHX3zJg UTfUezDk0mWlNxuwd+RXmIvIbWMppHlItW+B8e1RfuYIZGFtnYyoPezhEZc2T56q g1llwBDG5BKUd5VcLXyRDM/g5UpXWXQfbd9Cf6Eo08f6IkLkMmHR89E8no27fwvP Z9GB6hwYgwVcFmAR1XcPNIpeds9z2zxlCAlwe5oCemvwRhq9/V9ZbRZV33vZvRVA 1fKAuKz8J4ZDLLuTutWF7DiTYzN4Ve/Q -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:03 2024 by rpki-client on console-fra.rpki-client.org