$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: aBLnqhrppK3JKb6Cq/3jAtUG6MSY3TjgX2Txh8LQMA4= Subject key identifier: 84:7D:F8:0C:2B:8D:C9:22:9D:A7:0D:EA:55:8C:A8:07:B4:D5:EA:A9 Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 0141 Signing time: Sat 23 Nov 2024 02:38:48 +0000 Manifest this update: Sat 23 Nov 2024 02:38:48 +0000 Manifest next update: Sat 30 Nov 2024 02:38:48 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: lUik5gGRSt3/1ZVVfHUn3Y6RczdIlftADTsh9OYyEjM=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: pRhFi90u5iaLYPX6g3PP+55Ior11n+chfHkyJHcRUKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: Nov 23 02:38:48 2024 GMT Not After : Nov 30 02:38:48 2024 GMT Subject: CN=67414038-1f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:da:e5:68:65:84:42:a2:db:48:4b:f3:64: fb:34:e1:6a:d6:c5:a6:a1:23:0b:33:69:60:df:d9: 28:10:7b:c7:aa:2f:9e:3c:69:35:a2:22:30:c8:5c: 3b:9a:7a:53:43:b0:ab:f2:3b:6a:a8:af:06:f0:44: 37:f1:cc:66:d1:07:f7:e7:a9:53:53:4a:4b:37:09: 8e:15:35:95:76:9e:54:20:a0:f4:45:77:06:2f:d7: e0:5c:44:d5:0d:8d:e2:23:3d:25:8e:a5:a0:d6:2d: 71:b0:34:3c:39:ba:2c:27:36:6e:55:24:ad:15:8d: 8c:f7:dd:ed:75:dd:03:a4:95:ea:b4:2e:bb:be:da: 0e:36:fb:62:55:a0:f3:aa:c1:e9:b6:94:4a:62:f0: 97:ca:9d:e0:a1:4c:36:cc:99:27:c0:76:0d:e1:c3: e3:75:c1:c2:d7:bd:d0:9b:40:69:31:ba:97:8f:ad: 40:2d:00:70:8f:5b:98:fb:ee:c9:6b:40:43:56:b7: b5:a5:b2:bb:b3:92:d6:90:88:c3:c0:bb:2f:51:fc: 58:59:65:1f:16:c4:13:78:14:c0:36:71:dc:5b:e0: f5:b5:8d:16:00:8d:a0:b9:99:11:5f:6a:f5:96:59: fd:38:f4:82:ff:57:0c:3b:44:3a:5e:92:eb:2f:8b: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:F8:0C:2B:8D:C9:22:9D:A7:0D:EA:55:8C:A8:07:B4:D5:EA:A9 X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:83:fc:eb:75:12:bf:aa:e6:83:45:42:fb:2d:28:15:b7:55: 53:d4:f9:9a:0d:f7:49:10:50:f8:5d:1f:2b:d3:f5:16:f4:57: 81:a0:08:ba:59:bf:f5:79:83:83:f0:70:83:2e:21:05:c9:d3: 72:5e:b0:ba:27:76:8a:8a:38:bb:0c:3c:e2:f3:65:13:fd:75: 52:a6:45:64:b5:4d:73:71:21:68:48:c4:1b:8c:4b:6d:b3:9a: 7b:87:56:38:f7:36:3f:b6:fa:ff:ec:4e:1e:e8:ac:c7:2e:bf: be:f9:54:b7:8b:0f:a7:e7:80:57:b2:f3:ee:d4:3b:6f:b5:38: f1:84:14:c4:1b:62:ca:72:d1:61:8a:57:25:d6:4b:b2:0f:2c: 78:5d:97:b3:45:95:dc:fd:62:a6:7c:05:6c:46:73:2a:4f:0a: 5e:e8:ba:f0:bd:b9:ec:59:d7:34:18:46:9d:d4:99:d7:e9:1f: 27:a8:73:71:5c:a0:84:76:37:5c:e7:bc:1c:6d:a9:e2:d4:d9: 6a:91:ed:1c:67:a7:63:0d:4f:cf:b7:ab:69:be:1c:f3:38:40: 5d:19:3f:ac:8e:ed:99:95:ea:d4:c9:df:07:ac:e9:33:16:41: c3:95:f6:47:b4:a6:24:cb:c4:1a:8f:e5:85:b1:9e:83:46:8f: 96:f0:4a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjQxMTIzMDIzODQ4WhcNMjQxMTMwMDIzODQ4WjAYMRYwFAYD VQQDEw02NzQxNDAzOC0xZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrLa5WhlhEKi20hL82T7NOFq1sWmoSMLM2lg39koEHvHqi+ePGk1oiIwyFw7 mnpTQ7Cr8jtqqK8G8EQ38cxm0Qf356lTU0pLNwmOFTWVdp5UIKD0RXcGL9fgXETV DY3iIz0ljqWg1i1xsDQ8ObosJzZuVSStFY2M993tdd0DpJXqtC67vtoONvtiVaDz qsHptpRKYvCXyp3goUw2zJknwHYN4cPjdcHC173Qm0BpMbqXj61ALQBwj1uY++7J a0BDVre1pbK7s5LWkIjDwLsvUfxYWWUfFsQTeBTANnHcW+D1tY0WAI2guZkRX2r1 lln9OPSC/1cMO0Q6XpLrL4vAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIR9+Awr jckinacN6lWMqAe01eqpMB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6g/zrdRK/quaDRUL7LSgVt1VT1PmaDfdJEFD4XR8r0/UW9FeBoAi6 Wb/1eYOD8HCDLiEFydNyXrC6J3aKiji7DDzi82UT/XVSpkVktU1zcSFoSMQbjEtt s5p7h1Y49zY/tvr/7E4e6KzHLr+++VS3iw+n54BXsvPu1DtvtTjxhBTEG2LKctFh ilcl1kuyDyx4XZezRZXc/WKmfAVsRnMqTwpe6LrwvbnsWdc0GEad1JnX6R8nqHNx XKCEdjdc57wcbani1Nlqke0cZ6djDU/Pt6tpvhzzOEBdGT+sju2ZlerUyd8HrOkz FkHDlfZHtKYky8Qaj+WFsZ6DRo+W8EoS -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org