$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: 5YZ+zdfLDiM6g8DVh5tjusZJZ4HQnrOyJPwHeghfmRg= Subject key identifier: E6:AF:A3:ED:0C:F6:52:57:64:C7:15:F5:97:9A:90:79:4F:F5:81:B2 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 08 Signing time: Sat 23 Nov 2024 06:06:44 +0000 Manifest this update: Sat 23 Nov 2024 06:06:43 +0000 Manifest next update: Sat 30 Nov 2024 06:06:43 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: k5pxA/x24CBexdB+nZEJImzOk+35evaJUt2PnBbyVuw=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: plZkhxc00wQXxhpH5zdDV/kYvwUsg48B+WnMIB2ox4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Nov 23 06:06:43 2024 GMT Not After : Nov 30 06:06:43 2024 GMT Subject: CN=674170f3-d6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:99:59:88:5f:d3:31:ea:4b:78:bc:b3:9d: e5:bc:37:b2:ef:c5:3b:59:94:42:57:e6:51:f0:13: 6d:2d:f2:4b:57:ea:8b:4d:a9:5b:51:fc:b0:52:03: 96:a1:8f:46:5c:b1:c6:8b:b4:a7:36:1d:c9:dc:00: e0:2a:3e:08:54:29:94:e0:a4:2c:d2:bd:82:a0:d5: 25:8d:a7:af:ff:95:76:46:08:f2:30:4b:0d:e1:0c: a1:eb:15:49:2a:72:6a:4b:81:14:7a:0b:dc:60:27: 55:7d:fa:77:dd:56:92:57:15:77:fb:3c:02:53:da: ec:bf:b7:0a:7e:6b:12:9e:10:80:36:0e:bd:5d:5e: 32:7e:b5:61:a5:6c:7e:22:eb:d0:1d:1b:50:df:3c: dd:dd:cb:f7:67:84:a3:a8:1f:04:72:f2:3b:81:09: 69:84:41:c3:b2:a6:21:1e:d0:ad:37:bb:4f:f6:12: c2:26:87:5f:65:a5:a4:fd:ea:75:38:42:ba:a3:1c: ef:06:03:53:e1:4d:fa:8c:39:7a:a7:79:7d:da:79: f8:d7:7c:c0:bd:a9:d0:55:60:63:c9:7e:df:31:3b: 85:fd:7a:b5:ee:e3:96:97:96:86:1a:9c:0d:78:c7: 14:7b:59:e7:6a:30:e1:89:a3:4e:5a:07:10:26:be: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AF:A3:ED:0C:F6:52:57:64:C7:15:F5:97:9A:90:79:4F:F5:81:B2 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ad:19:f1:55:a0:30:09:71:1a:cf:bd:2b:ed:8f:d1:f1:06: 46:eb:71:71:8f:1e:ac:42:2e:43:61:e4:8c:82:c8:be:51:41: a1:ba:c8:e0:c6:33:58:85:e6:a9:14:c9:ff:ac:b2:97:a1:6e: 6f:a9:d3:bc:df:ab:63:2a:f9:1b:9a:02:dd:94:1a:3b:26:be: 0a:3f:ba:39:b7:36:01:da:cf:4d:6b:ff:b2:06:8e:98:5a:c8: 83:e2:3f:ca:15:d0:37:dd:ad:f1:d4:8d:41:9b:7c:c1:2d:a5: 75:38:92:d6:6c:9b:63:06:df:9d:3e:43:7a:12:68:f9:6d:0d: ba:99:48:8f:38:05:8f:41:39:d0:7c:e9:af:e4:dc:5b:19:33: 73:b6:f0:8f:5c:c3:e4:fa:8c:92:9e:64:f3:da:9a:64:9f:ca: 7d:78:d3:c3:38:a6:8d:2b:4c:f5:c8:29:f6:47:e4:f7:87:c0: ee:50:ea:da:97:87:ec:1b:00:84:ae:6c:0c:1f:d9:14:1b:c3: c2:3c:5d:01:a0:81:e2:d1:7e:ae:8c:7e:fd:28:bb:c7:da:11: ed:4b:2b:f1:40:ea:c6:5e:d9:8b:8e:e5:4f:80:ca:89:64:f8: 06:d4:59:e2:54:f0:bd:bd:71:0a:9c:f8:64:ae:f2:1a:24:b6: a3:38:c0:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNDExMjMwNjA2NDNaFw0yNDExMzAwNjA2NDNaMBgxFjAUBgNV BAMTDTY3NDE3MGYzLWQ2ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp+plZiF/TMepLeLyzneW8N7LvxTtZlEJX5lHwE20t8ktX6otNqVtR/LBSA5ah j0ZcscaLtKc2HcncAOAqPghUKZTgpCzSvYKg1SWNp6//lXZGCPIwSw3hDKHrFUkq cmpLgRR6C9xgJ1V9+nfdVpJXFXf7PAJT2uy/twp+axKeEIA2Dr1dXjJ+tWGlbH4i 69AdG1DfPN3dy/dnhKOoHwRy8juBCWmEQcOypiEe0K03u0/2EsImh19lpaT96nU4 QrqjHO8GA1PhTfqMOXqneX3aefjXfMC9qdBVYGPJft8xO4X9erXu45aXloYanA14 xxR7WedqMOGJo05aBxAmvsUhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5q+j7Qz2 UldkxxX1l5qQeU/1gbIwHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKtGfFVoDAJcRrPvSvtj9HxBkbrcXGPHqxCLkNh5IyCyL5RQaG6yODG M1iF5qkUyf+sspehbm+p07zfq2Mq+RuaAt2UGjsmvgo/ujm3NgHaz01r/7IGjpha yIPiP8oV0DfdrfHUjUGbfMEtpXU4ktZsm2MG350+Q3oSaPltDbqZSI84BY9BOdB8 6a/k3FsZM3O28I9cw+T6jJKeZPPammSfyn1408M4po0rTPXIKfZH5PeHwO5Q6tqX h+wbAISubAwf2RQbw8I8XQGggeLRfq6Mfv0ou8faEe1LK/FA6sZe2YuO5U+Ayolk +AbUWeJU8L29cQqc+GSu8hoktqM4wME= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org