$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: v8vuiEoKQZRy/mZaqskUXPZ8/glJ2a9XZFb+ZZDWLxU= Subject key identifier: 2A:77:55:7B:69:B9:47:AB:8E:90:83:B5:ED:A8:82:3E:A3:A7:D9:6E Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 19AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1999 Signing time: Fri 22 Nov 2024 16:25:00 +0000 Manifest this update: Fri 22 Nov 2024 16:24:59 +0000 Manifest next update: Fri 29 Nov 2024 16:24:59 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: RnJ+geKgsedhdy+nAebXSRBM3wh6WYaxOZyulG/60K4=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: 5xyOynEgqDMhag5EGZQN5c/BseZmGpYeCMWkUJIxh/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6573 (0x19ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Nov 22 16:24:59 2024 GMT Not After : Nov 29 16:24:59 2024 GMT Subject: CN=6740b05b-4f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:69:27:11:27:18:55:f0:ed:d6:4e:5d:b8: 34:f5:51:f1:fe:1e:03:d5:62:1e:5c:e9:7c:29:d1: 99:12:d6:6f:b5:fe:9f:b6:f5:ac:71:e9:a4:05:d9: 35:96:11:78:ea:80:8d:18:aa:3d:33:9c:6f:59:b7: ba:dd:03:32:36:52:c9:3d:78:75:09:6b:98:38:dd: e1:a3:37:1b:cf:c8:f7:7d:32:2b:77:96:14:eb:4f: 5c:32:97:13:37:fd:c3:1d:2a:7a:73:67:d8:2e:0f: 79:08:c0:fe:4e:00:c0:6c:bb:68:0e:b2:75:68:67: 40:9f:32:0f:72:b0:44:1e:df:1a:7e:26:61:23:9d: 7c:6c:78:27:fc:1e:c8:71:06:13:ac:0d:65:98:6a: af:ba:da:aa:3d:ea:9e:c9:fb:35:76:38:82:68:2b: 11:ad:35:db:59:0f:b5:87:5e:fb:ed:ea:96:fb:bd: 76:1e:c6:12:6f:c6:4d:d1:a2:66:10:0d:d7:35:c2: c1:12:27:ed:33:a9:ac:66:0c:19:8e:d6:48:bd:f5: 5a:ff:b9:5d:12:a1:16:9e:0e:1d:11:85:fb:3e:3b: ce:29:d9:5a:72:39:1f:a3:e8:48:7c:95:8b:66:5d: cf:04:f6:c6:17:55:38:a0:f1:a2:76:5e:9a:32:5b: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:55:7B:69:B9:47:AB:8E:90:83:B5:ED:A8:82:3E:A3:A7:D9:6E X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:71:72:c4:23:ce:63:03:98:74:b1:ef:25:62:c1:33:65:43: 01:40:32:ae:df:9b:0b:82:1e:74:46:c7:70:a6:b3:13:87:90: ef:4c:d0:e3:a4:fd:f6:02:cf:89:7e:6e:ee:cc:04:da:24:10: 06:9e:80:07:af:b5:13:d9:19:1e:1e:20:24:0c:1b:dc:76:9f: 14:09:9b:25:3b:44:ac:5e:f1:13:64:53:b6:d2:2a:81:06:b1: 5c:a5:37:ee:c3:1e:46:54:42:f8:3c:86:96:99:8e:19:81:84: 15:bf:01:ea:2d:0b:ac:5f:83:56:ae:38:6b:b5:7d:c3:c9:6b: 1f:d0:63:cb:fd:21:9c:a0:06:66:b0:92:0e:d0:b4:f0:8b:bb: c9:d5:ff:bf:cb:09:75:28:b1:d9:90:8a:97:f8:06:56:1b:f8: 74:7a:54:30:df:1e:51:f0:11:62:8e:47:45:a1:8f:a6:77:01: 34:e7:e1:c0:29:f0:da:f9:c9:0a:d4:64:0e:76:05:1d:d7:3b: 9f:dd:54:f2:cf:56:62:2d:20:80:0f:44:77:db:82:c8:4c:c1: 24:b9:e3:53:e5:9b:3f:69:5b:bb:ac:42:88:68:66:37:a8:fd: b1:7d:52:8a:50:86:1c:7e:78:9a:f7:84:00:86:c7:54:70:d9: 04:bb:ed:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjQxMTIyMTYyNDU5WhcNMjQxMTI5MTYyNDU5WjAYMRYwFAYD VQQDEw02NzQwYjA1Yi00Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNlpJxEnGFXw7dZOXbg09VHx/h4D1WIeXOl8KdGZEtZvtf6ftvWscemkBdk1 lhF46oCNGKo9M5xvWbe63QMyNlLJPXh1CWuYON3hozcbz8j3fTIrd5YU609cMpcT N/3DHSp6c2fYLg95CMD+TgDAbLtoDrJ1aGdAnzIPcrBEHt8afiZhI518bHgn/B7I cQYTrA1lmGqvutqqPeqeyfs1djiCaCsRrTXbWQ+1h1777eqW+712HsYSb8ZN0aJm EA3XNcLBEiftM6msZgwZjtZIvfVa/7ldEqEWng4dEYX7PjvOKdlacjkfo+hIfJWL Zl3PBPbGF1U4oPGidl6aMlsmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp3VXtp uUerjpCDte2ogj6jp9luMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9cXLEI85jA5h0se8lYsEzZUMBQDKu35sLgh50RsdwprMTh5DvTNDj pP32As+Jfm7uzATaJBAGnoAHr7UT2RkeHiAkDBvcdp8UCZslO0SsXvETZFO20iqB BrFcpTfuwx5GVEL4PIaWmY4ZgYQVvwHqLQusX4NWrjhrtX3DyWsf0GPL/SGcoAZm sJIO0LTwi7vJ1f+/ywl1KLHZkIqX+AZWG/h0elQw3x5R8BFijkdFoY+mdwE05+HA KfDa+ckK1GQOdgUd1zuf3VTyz1ZiLSCAD0R324LITMEkueNT5Zs/aVu7rEKIaGY3 qP2xfVKKUIYcfnia94QAhsdUcNkEu+3/ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org