$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: /hz02h2VpOxucUViPcc5q0pAAVVotlLpPPs/iXNtsxc= Subject key identifier: FF:82:60:56:66:3B:22:F2:E6:FA:EF:35:E5:E6:17:2C:CE:FB:38:F3 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 0FD4 Signing time: Fri 22 Nov 2024 17:27:57 +0000 Manifest this update: Fri 22 Nov 2024 17:27:57 +0000 Manifest next update: Fri 29 Nov 2024 17:27:57 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: ykqT8yw8qnS9u9oyRcbac1+Qx9gi6bN/NX1inOIziBU=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Nov 22 17:27:57 2024 GMT Not After : Nov 29 17:27:57 2024 GMT Subject: CN=6740bf1d-1abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a1:ec:c8:1a:ea:e7:6b:75:f6:d6:2e:41:77: ff:13:a4:5a:01:e6:b7:98:df:2b:d8:ad:69:6a:0f: c2:7f:41:47:8e:75:61:37:7c:99:2d:8f:fb:2b:4a: 98:5f:ac:6e:ec:cb:cc:7e:20:5f:e0:53:52:5f:40: ee:29:37:ab:7e:d5:26:be:e1:e6:15:34:60:1b:30: 58:f7:50:0d:6e:34:84:ff:52:90:90:f8:6f:66:0a: 69:2b:fb:16:46:f1:5c:13:e5:37:9b:e7:37:20:2d: 3c:d1:68:01:2c:08:b7:8f:5f:53:5b:a1:a7:8b:8c: 2f:9e:d6:b9:50:21:a6:76:b9:08:ec:ba:d4:28:87: 59:98:56:3f:98:08:89:16:e9:06:1c:b2:92:1d:e9: 90:2b:74:15:67:86:35:fb:19:31:09:c8:aa:11:e6: 15:11:69:4a:3b:e8:37:16:27:27:91:3f:ec:08:48: 37:7e:e3:fe:03:48:ae:67:68:c5:86:15:67:06:75: a1:ee:9d:a4:a5:01:a6:51:61:d4:84:78:4a:b8:55: 8f:a6:91:a1:73:c3:4d:4a:ee:12:03:ba:47:82:04: 6a:b8:01:b0:00:12:bb:9b:7f:c1:de:1f:fe:f3:1a: 78:ae:b7:60:44:6b:1d:2e:b7:82:d0:1f:53:c7:7f: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:60:56:66:3B:22:F2:E6:FA:EF:35:E5:E6:17:2C:CE:FB:38:F3 X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0e:ef:e4:d1:44:1a:43:b6:de:6b:48:f1:c9:2b:15:35:87: ae:d1:7f:04:c4:93:0a:e9:f0:9e:59:e4:c1:57:74:5d:c3:58: 69:0e:54:cc:0e:0b:b7:dd:d5:2e:5f:74:27:9d:33:6b:e2:e4: 6d:a0:a4:5e:d0:c3:b8:21:ac:b3:6e:c4:53:33:90:ec:27:de: 96:24:3e:c7:07:97:5d:8e:1d:88:51:d5:b8:06:aa:1c:07:01: 21:c8:85:b0:77:6d:35:67:ef:5c:3b:6a:74:59:fa:ab:33:c2: 3f:61:f5:27:dd:cd:6b:81:a2:d8:7a:7b:d2:b7:de:07:0b:5a: a5:9b:3e:65:d7:ed:c4:73:86:de:4a:20:2d:5d:84:03:67:1a: 37:cc:c3:01:f6:5d:3d:04:6c:bd:04:4c:39:52:bf:fd:be:a4: f3:e0:3f:e0:ae:dc:9f:36:3c:06:f6:8d:bc:21:e7:f9:f7:ee: 6a:dc:13:6c:ac:85:3f:c4:3a:a0:88:05:88:96:4f:c2:2a:9f: 4e:b1:9a:66:75:77:2f:a7:b1:70:c5:40:03:3d:b2:29:7f:2a: 06:f2:24:75:44:f3:6b:cd:0a:63:dd:4b:b0:d9:57:3d:8a:8b: 80:4b:02:31:1b:de:bd:dd:e9:96:6f:33:5f:ca:62:62:d2:89: 03:77:fe:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjQxMTIyMTcyNzU3WhcNMjQxMTI5MTcyNzU3WjAYMRYwFAYD VQQDEw02NzQwYmYxZC0xYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aHsyBrq52t19tYuQXf/E6RaAea3mN8r2K1pag/Cf0FHjnVhN3yZLY/7K0qY X6xu7MvMfiBf4FNSX0DuKTerftUmvuHmFTRgGzBY91ANbjSE/1KQkPhvZgppK/sW RvFcE+U3m+c3IC080WgBLAi3j19TW6Gni4wvnta5UCGmdrkI7LrUKIdZmFY/mAiJ FukGHLKSHemQK3QVZ4Y1+xkxCciqEeYVEWlKO+g3FicnkT/sCEg3fuP+A0iuZ2jF hhVnBnWh7p2kpQGmUWHUhHhKuFWPppGhc8NNSu4SA7pHggRquAGwABK7m3/B3h/+ 8xp4rrdgRGsdLreC0B9Tx3/XDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+CYFZm OyLy5vrvNeXmFyzO+zjzMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPDu/k0UQaQ7bea0jxySsVNYeu0X8ExJMK6fCeWeTBV3Rdw1hpDlTM Dgu33dUuX3QnnTNr4uRtoKRe0MO4IayzbsRTM5DsJ96WJD7HB5ddjh2IUdW4Bqoc BwEhyIWwd201Z+9cO2p0WfqrM8I/YfUn3c1rgaLYenvSt94HC1qlmz5l1+3Ec4be SiAtXYQDZxo3zMMB9l09BGy9BEw5Ur/9vqTz4D/grtyfNjwG9o28Ief59+5q3BNs rIU/xDqgiAWIlk/CKp9OsZpmdXcvp7FwxUADPbIpfyoG8iR1RPNrzQpj3Uuw2Vc9 iouASwIxG9693emWbzNfymJi0okDd/4t -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org