$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: Xbmk6cCtHrFM6gYcQDJCGXowadEJoV1rpalpoaUpHZs= Subject key identifier: 90:30:A1:2A:30:A2:20:72:E5:A5:40:A5:DD:48:C8:9E:C9:27:18:5E Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 038E Signing time: Sat 23 Nov 2024 00:23:05 +0000 Manifest this update: Sat 23 Nov 2024 00:23:05 +0000 Manifest next update: Sat 30 Nov 2024 00:23:05 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: VHiqjR0C2VY1LvvpoN/mbdBFQCGiXxP1fDcSIbQsTaw=) 2: 88C188FAEB5611EE9C5CAA45C4F9AE02.roa (hash: jprpkWfVNOHjbEQ1FZ7CZhWx6lIy9Q33wx34en25Wic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Nov 23 00:23:05 2024 GMT Not After : Nov 30 00:23:05 2024 GMT Subject: CN=67412069-858c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:b3:15:9f:c8:3a:b7:fd:5c:66:c3:78:c3: 50:95:28:39:c0:d7:3a:15:2f:b0:1a:fd:20:66:3d: 5a:8a:e5:87:96:54:ff:0a:01:86:42:16:4d:3f:19: 3b:2a:0e:dc:34:a3:65:40:c4:aa:93:07:a1:1b:27: 26:e2:6d:c9:80:e3:9f:eb:b1:00:f4:05:16:78:b2: 30:51:81:a5:ac:e0:c5:f1:93:2e:40:74:3c:bb:62: e0:6c:ae:cd:de:61:ea:49:f1:41:69:0b:9c:d7:e5: e0:0b:e5:15:c1:51:2a:27:3e:bb:ea:b9:ec:6a:c2: 1c:dc:d6:cd:2c:ff:3a:d6:4f:5d:48:a7:d5:7d:9e: b9:80:44:89:7d:17:58:3d:54:a7:a7:69:9b:ad:40: 23:f8:37:b3:05:57:c3:e4:a1:aa:ab:92:3d:10:b3: 99:ed:a2:72:a5:43:fd:04:7b:ab:e2:57:fa:1d:f7: 5b:1e:61:ed:4e:05:2e:03:ad:b4:b3:74:67:65:ef: a5:5e:a9:90:a3:de:9d:7e:bd:69:00:27:89:bf:85: 5a:ff:78:4f:7b:7c:ad:51:b5:90:d1:59:47:03:c1: df:79:7a:d3:7a:d5:07:bd:0b:a3:3b:71:b4:88:83: 71:82:41:06:61:d5:e9:b9:db:95:ff:27:d6:bd:d9: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:A1:2A:30:A2:20:72:E5:A5:40:A5:DD:48:C8:9E:C9:27:18:5E X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:40:b0:b7:64:72:0e:03:e2:b3:25:4d:82:c9:7b:74:6e: 89:4b:c8:51:9a:00:a0:4a:49:b5:9c:a3:b7:41:49:67:7c:fe: 85:09:ac:e9:64:b6:57:d9:c4:d7:a7:30:5d:b3:3c:f4:f6:60: 49:df:c3:58:4a:46:49:a9:3d:e4:7a:4d:ed:f2:79:1a:89:a0: 57:15:71:39:22:9a:b3:f2:17:99:53:64:75:5e:f2:d5:9f:f2: f1:95:8a:4e:49:95:7b:05:60:96:69:3d:7e:74:5b:f2:11:da: 40:04:e3:64:45:57:d9:86:80:f1:9e:bc:da:95:14:cd:6c:7d: d1:1a:33:0b:d2:36:b2:a5:2c:6d:f5:03:04:13:4a:4f:4b:9d: 7a:0c:fe:1f:09:3d:3c:92:b7:5b:d8:58:c3:51:ab:fb:fd:63: f8:9a:58:fd:27:f2:c8:95:23:c0:21:9b:ee:ac:5a:82:92:26: 25:3c:bd:65:46:92:db:cb:33:e8:5c:e0:47:ab:39:d6:5a:43: 2f:a8:a4:a0:38:5a:5b:cd:b3:58:04:20:8b:eb:4e:f5:fc:43: 50:7b:10:79:b3:d7:41:68:46:ea:8a:10:d3:9b:79:98:9c:a7: 94:2c:73:f9:65:8f:aa:d5:8b:83:8d:64:7f:dd:95:7f:6d:d3: c6:77:4c:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjQxMTIzMDAyMzA1WhcNMjQxMTMwMDAyMzA1WjAYMRYwFAYD VQQDEw02NzQxMjA2OS04NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx82zFZ/IOrf9XGbDeMNQlSg5wNc6FS+wGv0gZj1aiuWHllT/CgGGQhZNPxk7 Kg7cNKNlQMSqkwehGycm4m3JgOOf67EA9AUWeLIwUYGlrODF8ZMuQHQ8u2LgbK7N 3mHqSfFBaQuc1+XgC+UVwVEqJz676rnsasIc3NbNLP861k9dSKfVfZ65gESJfRdY PVSnp2mbrUAj+DezBVfD5KGqq5I9ELOZ7aJypUP9BHur4lf6HfdbHmHtTgUuA620 s3RnZe+lXqmQo96dfr1pACeJv4Va/3hPe3ytUbWQ0VlHA8HfeXrTetUHvQujO3G0 iINxgkEGYdXpuduV/yfWvdmIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAwoSow oiBy5aVApd1IyJ7JJxheMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWDkCwt2RyDgPisyVNgsl7dG6JS8hRmgCgSkm1nKO3QUlnfP6FCazp ZLZX2cTXpzBdszz09mBJ38NYSkZJqT3kek3t8nkaiaBXFXE5Ipqz8heZU2R1XvLV n/LxlYpOSZV7BWCWaT1+dFvyEdpABONkRVfZhoDxnrzalRTNbH3RGjML0jaypSxt 9QMEE0pPS516DP4fCT08krdb2FjDUav7/WP4mlj9J/LIlSPAIZvurFqCkiYlPL1l RpLbyzPoXOBHqznWWkMvqKSgOFpbzbNYBCCL6071/ENQexB5s9dBaEbqihDTm3mY nKeULHP5ZY+q1YuDjWR/3ZV/bdPGd0w2 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org