$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: FL3hxt3ogAIij0fsHh37F3yI5pidDYs+MqdJ87dkKUI= Subject key identifier: 87:CF:0D:B8:29:03:4D:48:1E:D6:73:BB:88:5E:32:09:5F:C2:BE:E9 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 10F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 10F3 Signing time: Wed 20 Nov 2024 17:14:51 +0000 Manifest this update: Wed 20 Nov 2024 17:14:50 +0000 Manifest next update: Wed 27 Nov 2024 17:14:50 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: dYFxxAq+ix4Tb2QFNNgs/6o2Y/mqrZhSY966DJM89Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4341 (0x10f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Nov 20 17:14:50 2024 GMT Not After : Nov 27 17:14:50 2024 GMT Subject: CN=673e190a-3bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:af:a6:f7:4c:b5:0c:42:ee:6a:da:7d:0c: 55:5b:55:37:a8:07:6f:89:6e:04:f1:48:7e:0a:62: d3:b1:f0:59:3a:21:de:c4:d3:31:5d:65:20:3b:f8: 86:27:50:4a:7e:f1:fc:be:41:ca:ad:de:07:4c:d6: b8:d7:0e:4d:d4:d5:88:f1:27:25:6d:7c:7e:57:df: 79:dd:f7:f7:17:29:7e:7f:d3:d1:37:78:a5:6e:da: 3c:76:f2:a6:21:35:fc:b4:b6:9d:a9:cc:84:56:bb: d6:78:b8:01:90:40:b9:ec:3c:de:0f:ba:5f:62:47: e2:14:06:3c:7b:f2:84:f3:7e:6a:32:83:15:87:f1: 38:e2:a5:61:49:95:e2:73:49:6e:d9:64:d4:c8:09: 7b:64:93:5d:3e:1b:5e:c9:8f:2e:6f:11:ef:0a:be: ca:c5:3b:64:a0:31:3e:8e:f1:33:33:ba:b2:33:14: 10:9b:07:a2:17:0e:ab:35:d9:3c:eb:d9:57:7f:d0: 53:71:70:cc:b7:1e:e9:1f:2f:30:d3:5d:f9:89:d1: 6c:f7:f8:c3:51:4c:1c:fa:37:b7:dd:ab:74:f9:19: 5c:06:48:2b:9c:a7:b4:22:64:80:44:f1:2b:0f:f0: 0b:89:fd:3f:aa:2b:2a:65:81:02:85:ea:d4:48:da: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:0D:B8:29:03:4D:48:1E:D6:73:BB:88:5E:32:09:5F:C2:BE:E9 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:80:e7:8f:cc:2b:0e:07:c7:2b:08:be:48:f3:2b:f3:ba:1a: cf:49:74:0d:0d:df:e7:6e:b9:41:6d:5f:39:e3:9f:59:62:60: 1d:7d:bb:56:9b:28:dc:81:ea:66:c8:99:06:9d:c3:e0:dd:5c: a3:99:01:8d:6c:51:92:1e:8a:2d:72:35:83:79:34:66:f0:34: bd:02:32:30:46:11:4e:4f:de:fd:37:ac:a3:c9:69:1e:2d:3d: e2:67:36:1f:5d:23:c3:f2:e2:8d:1b:f0:41:a3:b1:85:ae:56: b7:67:2a:92:43:63:95:33:82:7a:de:6a:6a:5b:a6:72:1c:06: d6:d4:81:30:d0:a5:73:d8:36:55:da:f9:47:8b:58:ff:a7:42: 84:88:f1:4a:e0:87:f4:53:b7:d6:6f:70:09:ee:af:c6:ef:91: f2:7e:3a:84:c0:c4:a1:ca:96:01:ad:ad:e1:76:3a:52:a0:e5: 23:47:05:82:96:00:6b:53:27:95:9b:7f:e9:33:30:10:4e:e4: a0:cb:ac:0f:bb:24:84:87:e7:e4:98:b5:97:37:f7:55:31:b7: bb:5f:0f:a5:e1:93:1d:c5:82:93:10:0a:7f:20:51:d0:df:02: 73:c3:6f:b5:6c:5c:2b:c6:a7:4b:6b:51:87:b2:b5:32:18:92: 4a:cb:15:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjQxMTIwMTcxNDUwWhcNMjQxMTI3MTcxNDUwWjAYMRYwFAYD VQQDEw02NzNlMTkwYS0zYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynOvpvdMtQxC7mrafQxVW1U3qAdviW4E8Uh+CmLTsfBZOiHexNMxXWUgO/iG J1BKfvH8vkHKrd4HTNa41w5N1NWI8SclbXx+V9953ff3Fyl+f9PRN3ilbto8dvKm ITX8tLadqcyEVrvWeLgBkEC57DzeD7pfYkfiFAY8e/KE835qMoMVh/E44qVhSZXi c0lu2WTUyAl7ZJNdPhteyY8ubxHvCr7KxTtkoDE+jvEzM7qyMxQQmweiFw6rNdk8 69lXf9BTcXDMtx7pHy8w0135idFs9/jDUUwc+je33at0+RlcBkgrnKe0ImSARPEr D/ALif0/qisqZYECherUSNownwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfPDbgp A01IHtZzu4heMglfwr7pMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/gOePzCsOB8crCL5I8yvzuhrPSXQNDd/nbrlBbV85459ZYmAdfbtW myjcgepmyJkGncPg3VyjmQGNbFGSHootcjWDeTRm8DS9AjIwRhFOT979N6yjyWke LT3iZzYfXSPD8uKNG/BBo7GFrla3ZyqSQ2OVM4J63mpqW6ZyHAbW1IEw0KVz2DZV 2vlHi1j/p0KEiPFK4If0U7fWb3AJ7q/G75HyfjqEwMShypYBra3hdjpSoOUjRwWC lgBrUyeVm3/pMzAQTuSgy6wPuySEh+fkmLWXN/dVMbe7Xw+l4ZMdxYKTEAp/IFHQ 3wJzw2+1bFwrxqdLa1GHsrUyGJJKyxWj -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:06 2024 by rpki-client on console-fra.rpki-client.org