$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: gE8C9Fqm9bxdfWtWs+UPTWh+odzQwJzhE4bWOaz9QUQ= Subject key identifier: 70:91:C8:80:A2:1A:CA:BD:3D:AC:FD:9A:57:DA:57:28:B3:37:74:E5 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 07F1 Signing time: Sun 24 Nov 2024 20:39:38 +0000 Manifest this update: Sun 24 Nov 2024 20:39:38 +0000 Manifest next update: Sun 01 Dec 2024 20:39:38 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: hHoLLzIjU8t5w7WcqRA36DXuGaEEVEyC93ZB3OrKwQU=) 2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: SNPBwQUb1RKoaTQTNrfH32vnIjaOv9HeTlrUpVnkMgc=) 3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: KtUrm2foeaUuoNmWh4nKKxxCo2xUAoGCx8YrdIKIWS8=) 4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: eiCuC1YeFyOuHPZHqPQ601dUszGySRFgdPdOWzMPWtY=) 5: 6D0768C2770711EFBA70CE36C4F9AE02.roa (hash: tEuFHPIEilNpnG2svl8ZjY076owwpchb5SOYj1BIOvg=) 6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: P543uAxi61jv6pAr/0Afy+uliwnXO1AO2KiTZ1BtODA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Nov 24 20:39:38 2024 GMT Not After : Dec 1 20:39:38 2024 GMT Subject: CN=67438f0a-c3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:71:c4:e7:d0:16:0b:04:b9:af:8c:c8:85: fe:20:f5:36:cf:49:fc:1e:f8:eb:2e:5c:91:2b:8e: 0d:a8:24:57:68:5b:5f:13:cc:0c:bf:ea:34:7a:31: be:13:a4:16:4c:e3:7c:19:72:5c:96:d0:fe:13:aa: ea:ac:b1:08:05:22:5d:9b:ee:5a:31:db:93:8d:1d: 9b:39:81:98:db:2b:ca:dd:44:56:1e:9c:4c:6a:5c: 09:ae:ff:32:1f:f3:6d:ca:3f:68:82:80:99:6a:0c: fc:ec:f8:d9:dd:78:a0:64:4a:5f:f7:3d:07:1b:88: d1:ff:db:d7:f5:4a:9e:a4:e2:c2:fa:e6:31:08:3b: 6e:67:59:ed:a9:5a:40:93:71:fc:80:98:71:6a:2c: a5:4d:30:ae:02:e0:eb:64:3e:38:a1:ca:53:5a:70: 9b:c3:3b:c4:b8:48:67:a1:2d:23:78:b5:e5:58:0c: 0f:01:9e:ca:7d:36:af:17:80:0e:f8:d5:d6:59:56: 69:a1:d9:92:c7:04:af:cb:4b:52:95:bf:19:2a:15: 12:a1:5f:54:58:5e:51:d0:50:eb:20:00:25:6a:cd: ca:1f:ce:95:ce:4f:af:47:05:80:17:2f:cf:de:e4: bb:63:90:85:b2:2c:39:3d:60:b6:5d:54:a1:af:5d: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:91:C8:80:A2:1A:CA:BD:3D:AC:FD:9A:57:DA:57:28:B3:37:74:E5 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ad:5f:94:98:09:50:6b:bd:c0:c1:40:c0:7d:c2:5c:be:2a: 13:02:67:81:24:e6:89:db:1b:93:d3:e0:a7:40:c2:8a:99:e0: 2c:43:6d:dc:62:f9:b4:b1:0d:9f:0e:61:bd:37:e6:40:83:da: 2f:b9:8c:19:c4:db:47:44:5f:73:83:7e:29:74:9c:fb:7b:62: 90:2b:1f:79:62:09:f9:83:71:44:ec:03:48:9d:ed:44:ed:02: a2:b4:8c:c2:7a:4c:aa:cb:7c:bb:a9:61:87:f9:f2:46:84:e4: 4b:86:b9:08:0c:ea:30:6c:86:98:2b:3c:70:e6:eb:47:f7:ba: 83:84:e0:94:1b:43:a2:1f:23:b6:c5:e7:6d:30:a7:6e:3e:9c: 5e:ed:5a:42:52:93:ae:20:37:2b:55:fb:a3:76:4f:80:e3:c3: fd:bf:33:37:35:20:04:82:3d:e1:20:7f:dd:7c:e8:a9:bd:90: 2e:b8:bf:0e:e1:52:5f:3a:19:00:bb:5c:89:ff:c1:4d:a5:fe: 4c:c3:d7:14:13:c7:f0:d8:e2:ea:e4:fd:0c:24:08:e0:c4:bc: 13:be:5c:f6:16:13:fd:75:fb:86:27:28:8a:b7:01:18:29:38: a5:b6:da:9a:8c:a9:3b:bb:6b:de:13:7b:56:e0:1b:18:15:58: 69:9d:ac:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjQxMTI0MjAzOTM4WhcNMjQxMjAxMjAzOTM4WjAYMRYwFAYD VQQDEw02NzQzOGYwYS1jM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk1xxOfQFgsEua+MyIX+IPU2z0n8HvjrLlyRK44NqCRXaFtfE8wMv+o0ejG+ E6QWTON8GXJcltD+E6rqrLEIBSJdm+5aMduTjR2bOYGY2yvK3URWHpxMalwJrv8y H/Ntyj9ogoCZagz87PjZ3XigZEpf9z0HG4jR/9vX9UqepOLC+uYxCDtuZ1ntqVpA k3H8gJhxaiylTTCuAuDrZD44ocpTWnCbwzvEuEhnoS0jeLXlWAwPAZ7KfTavF4AO +NXWWVZpodmSxwSvy0tSlb8ZKhUSoV9UWF5R0FDrIAAlas3KH86Vzk+vRwWAFy/P 3uS7Y5CFsiw5PWC2XVShr139GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCRyICi Gsq9Paz9mlfaVyizN3TlMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdrV+UmAlQa73AwUDAfcJcvioTAmeBJOaJ2xuT0+CnQMKKmeAsQ23c Yvm0sQ2fDmG9N+ZAg9ovuYwZxNtHRF9zg34pdJz7e2KQKx95Ygn5g3FE7ANIne1E 7QKitIzCekyqy3y7qWGH+fJGhORLhrkIDOowbIaYKzxw5utH97qDhOCUG0OiHyO2 xedtMKduPpxe7VpCUpOuIDcrVfujdk+A48P9vzM3NSAEgj3hIH/dfOipvZAuuL8O 4VJfOhkAu1yJ/8FNpf5Mw9cUE8fw2OLq5P0MJAjgxLwTvlz2FhP9dfuGJyiKtwEY KTilttqajKk7u2veE3tW4BsYFVhpnawx -----END CERTIFICATE-----Generated at Sun Nov 24 22:12:02 2024 by rpki-client on console-fra.rpki-client.org