$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: A6uSLDIoTWE5BCQiCZxS1J6HdEO/xYxMrX3TK36A6Qo= Subject key identifier: E5:73:34:87:F6:3E:1B:77:A2:EB:B3:FF:96:EA:17:E9:60:35:3C:4C Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0A74 Signing time: Fri 22 Nov 2024 19:24:39 +0000 Manifest this update: Fri 22 Nov 2024 19:24:38 +0000 Manifest next update: Fri 29 Nov 2024 19:24:38 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: Lhx5IT5BFzd71Hb/tZZ99ACbNP33kcc3pEtWCJEYCAk=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Nov 22 19:24:38 2024 GMT Not After : Nov 29 19:24:38 2024 GMT Subject: CN=6740da77-5a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:6d:15:4f:64:39:93:7b:97:1d:b9:ad:b0: 06:d1:ae:4d:ae:99:f2:ca:8a:ac:af:04:d0:ad:b5: 59:72:19:a9:52:88:58:c2:fc:e6:b3:9b:f7:5c:2f: 74:9a:39:fd:cd:18:92:ea:03:ac:f6:e2:26:50:71: 45:56:2d:90:85:c4:f3:4b:b3:1b:32:73:5f:31:3d: 4d:bb:d7:b5:e1:ed:41:dd:7b:4c:0a:cb:cd:b4:9e: 52:0b:49:99:9d:2b:c2:34:6a:01:23:04:f6:83:df: 1d:a3:fd:41:7b:e1:c8:3d:f4:b2:e8:1c:3e:14:9f: 2f:92:45:ee:f1:73:68:5f:0d:b8:b5:c7:3d:cf:6e: f1:99:f4:d9:9a:f9:83:45:d8:e3:75:ef:ba:7a:fe: c4:3e:40:3c:54:30:19:2e:4c:23:7b:62:db:a8:3e: 17:b9:bc:c8:35:60:e3:23:0f:fb:c3:ab:b5:43:fd: 95:da:d8:a4:f5:19:3d:67:86:48:92:66:ae:3d:c1: f6:ac:1b:94:ba:5d:f1:c4:81:23:e3:4d:65:33:d8: 96:45:42:4b:da:30:1a:8a:89:05:18:2b:51:ab:9b: ad:04:2f:bb:6f:11:df:96:bd:9a:72:55:34:d0:da: 10:e9:59:c4:b5:75:99:37:6f:bf:54:8a:0d:42:8c: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:34:87:F6:3E:1B:77:A2:EB:B3:FF:96:EA:17:E9:60:35:3C:4C X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:c6:55:23:26:e2:09:04:d7:86:e3:7b:c2:1c:1d:a1:b3: 7c:d1:a4:0d:be:eb:22:d4:f3:45:2b:54:42:29:ff:81:5a:7e: 99:04:53:2e:9f:38:ce:f4:5b:55:69:55:82:7a:96:38:a3:90: 38:1d:fb:81:a2:62:cb:da:3d:be:8f:a0:67:d0:9e:bb:ba:3b: 21:9b:d4:b4:91:7f:a6:45:9c:20:b8:9a:b1:16:57:3c:82:b6: 5d:ed:2b:ca:a9:64:a9:11:59:83:17:b0:8e:12:68:94:0b:6a: 55:92:2f:69:c3:16:9e:42:41:a5:f0:7e:fc:5e:94:a9:19:c4: e4:25:e4:cc:47:a4:4a:87:49:e5:a2:0f:a4:0c:e5:2d:4f:ce: ac:a8:1d:d2:61:d2:b2:a2:0e:6b:b3:b8:b1:57:96:00:18:ce: 32:29:a2:9c:7f:e1:41:50:d1:bd:0f:7d:c8:49:87:89:1d:95: 9e:33:10:b5:34:4d:06:dd:0e:49:d6:1f:ac:c3:56:ab:87:1c: 96:69:43:61:c8:d9:ee:d8:64:7e:0d:ff:89:5c:b3:02:b1:5a: f9:05:76:38:99:2c:a2:cf:e5:2e:d8:9d:6a:ae:81:8e:a3:65: c1:dc:8f:bc:f7:37:ed:47:2f:6b:37:b0:d9:ad:57:f2:87:e6: 09:25:b1:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjQxMTIyMTkyNDM4WhcNMjQxMTI5MTkyNDM4WjAYMRYwFAYD VQQDEw02NzQwZGE3Ny01YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEJtFU9kOZN7lx25rbAG0a5NrpnyyoqsrwTQrbVZchmpUohYwvzms5v3XC90 mjn9zRiS6gOs9uImUHFFVi2QhcTzS7MbMnNfMT1Nu9e14e1B3XtMCsvNtJ5SC0mZ nSvCNGoBIwT2g98do/1Be+HIPfSy6Bw+FJ8vkkXu8XNoXw24tcc9z27xmfTZmvmD Rdjjde+6ev7EPkA8VDAZLkwje2LbqD4XubzINWDjIw/7w6u1Q/2V2tik9Rk9Z4ZI kmauPcH2rBuUul3xxIEj401lM9iWRUJL2jAaiokFGCtRq5utBC+7bxHflr2aclU0 0NoQ6VnEtXWZN2+/VIoNQowYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVzNIf2 Pht3ouuz/5bqF+lgNTxMMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4UMZVIybiCQTXhuN7whwdobN80aQNvusi1PNFK1RCKf+BWn6ZBFMu nzjO9FtVaVWCepY4o5A4HfuBomLL2j2+j6Bn0J67ujshm9S0kX+mRZwguJqxFlc8 grZd7SvKqWSpEVmDF7COEmiUC2pVki9pwxaeQkGl8H78XpSpGcTkJeTMR6RKh0nl og+kDOUtT86sqB3SYdKyog5rs7ixV5YAGM4yKaKcf+FBUNG9D33ISYeJHZWeMxC1 NE0G3Q5J1h+sw1arhxyWaUNhyNnu2GR+Df+JXLMCsVr5BXY4mSyiz+Uu2J1qroGO o2XB3I+89zftRy9rN7DZrVfyh+YJJbGe -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org