$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: KMu0xJrUfrqGj+SxTlFhxO8tIZZ0r5T1S6KXzgp/YKk= Subject key identifier: 10:0B:78:E5:60:50:C6:9E:BD:62:57:73:D6:DF:A9:65:81:DB:00:B7 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: EC Signing time: Sat 23 Nov 2024 03:28:00 +0000 Manifest this update: Sat 23 Nov 2024 03:28:00 +0000 Manifest next update: Sat 30 Nov 2024 03:27:59 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: T69915t+j10xai96RHVgcU7oYW9zUtbxbhTmxxkZLGA=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: /4GsPDOsOz6IKJ8MiECwyeOuOhiaIGDZwISWVLxNOyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Nov 23 03:28:00 2024 GMT Not After : Nov 30 03:27:59 2024 GMT Subject: CN=67414bc0-1b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:df:2d:d4:37:5a:d7:5c:bb:bb:53:28:ca: 15:c0:e8:15:e1:fd:fd:f0:98:36:ef:cb:d0:21:0a: 8b:d4:7e:53:07:90:64:e8:0c:36:47:98:d2:4d:74: 6f:39:85:2f:d7:3e:11:0d:06:be:81:f7:5b:1d:be: 94:4b:86:16:4b:b7:9d:5e:4d:48:02:63:01:8a:91: 82:7e:60:a4:ee:0f:64:db:3a:8d:dd:d7:6b:0a:ad: fe:9f:ee:80:b5:e8:6a:8a:40:d4:5e:e3:a1:d4:12: 6b:76:f1:a5:ed:38:91:59:d0:e8:a5:da:3d:19:5a: f5:b0:90:1b:e7:4d:56:c0:19:ab:10:21:b2:c8:23: 5f:bc:b3:ad:a3:0a:f7:be:ff:3d:06:3f:ee:8b:b6: 22:88:ac:9a:63:cf:c7:c1:8a:86:ef:56:38:53:17: 2d:09:60:42:6e:67:d6:49:26:22:b9:d7:65:ee:7f: a6:dd:ca:3e:08:9c:01:af:30:25:08:cf:f9:00:12: 89:86:fb:2f:d8:9b:cc:33:59:79:3d:c9:c0:17:10: ce:ea:52:96:7d:6d:07:ee:d5:39:9f:1e:88:93:bd: c9:96:c7:a6:50:0b:17:40:cc:86:2f:11:c8:99:90: 7f:6d:d5:3c:5a:81:46:90:bb:2f:15:fe:42:51:28: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:78:E5:60:50:C6:9E:BD:62:57:73:D6:DF:A9:65:81:DB:00:B7 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ab:c0:63:49:dc:c5:68:7c:59:f6:14:2d:82:8c:fa:08:e1: 6c:66:1b:86:eb:22:be:33:40:21:10:42:39:a3:df:56:e5:22: 0e:b9:ab:4d:18:db:ea:ac:8f:37:8e:d4:ca:0a:9c:6e:9f:81: 9b:9e:56:bc:24:ba:09:c4:27:96:5b:fd:c5:a4:cb:d2:c6:29: 22:29:89:b0:3c:f7:5d:d1:02:4e:ca:0e:62:85:69:79:2b:d4: c3:ad:4f:1d:47:79:1a:aa:d6:f2:ea:0a:4c:ad:60:76:2e:62: 0c:5f:d7:ae:1d:ae:58:a2:98:20:4d:de:4a:ad:c6:c6:6c:56: 77:bc:80:cb:a6:ba:44:fe:ea:e7:f7:13:d2:75:53:8d:e6:70: b2:f4:3d:f7:ae:65:b2:6f:db:b0:78:aa:60:38:51:20:42:41: 66:e3:e8:44:aa:56:06:e2:d1:65:87:8b:04:a8:6f:0f:3a:68: c9:af:86:77:db:7f:5d:77:c8:fa:2e:06:f6:f1:85:30:90:2a: b4:77:84:47:2d:02:e2:7d:c1:1a:03:df:44:71:8e:79:bf:96: d1:8e:d1:74:98:87:71:b9:b6:cf:80:4e:78:0c:c6:25:e4:8a: 95:f5:17:59:22:1c:46:db:ab:6c:ec:2b:9f:33:67:c7:01:86: cc:b6:cc:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjQxMTIzMDMyODAwWhcNMjQxMTMwMDMyNzU5WjAYMRYwFAYD VQQDEw02NzQxNGJjMC0xYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pjfLdQ3Wtdcu7tTKMoVwOgV4f398Jg278vQIQqL1H5TB5Bk6Aw2R5jSTXRv OYUv1z4RDQa+gfdbHb6US4YWS7edXk1IAmMBipGCfmCk7g9k2zqN3ddrCq3+n+6A tehqikDUXuOh1BJrdvGl7TiRWdDopdo9GVr1sJAb501WwBmrECGyyCNfvLOtowr3 vv89Bj/ui7YiiKyaY8/HwYqG71Y4UxctCWBCbmfWSSYiuddl7n+m3co+CJwBrzAl CM/5ABKJhvsv2JvMM1l5PcnAFxDO6lKWfW0H7tU5nx6Ik73JlsemUAsXQMyGLxHI mZB/bdU8WoFGkLsvFf5CUSjqUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBALeOVg UMaevWJXc9bfqWWB2wC3MB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKq8BjSdzFaHxZ9hQtgoz6COFsZhuG6yK+M0AhEEI5o99W5SIOuatN GNvqrI83jtTKCpxun4Gbnla8JLoJxCeWW/3FpMvSxikiKYmwPPdd0QJOyg5ihWl5 K9TDrU8dR3kaqtby6gpMrWB2LmIMX9euHa5YopggTd5KrcbGbFZ3vIDLprpE/urn 9xPSdVON5nCy9D33rmWyb9uweKpgOFEgQkFm4+hEqlYG4tFlh4sEqG8POmjJr4Z3 239dd8j6Lgb28YUwkCq0d4RHLQLifcEaA99EcY55v5bRjtF0mIdxubbPgE54DMYl 5IqV9RdZIhxG26ts7CufM2fHAYbMtsyX -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org