$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: s1xBrG3+dPpDW6wiuXqv2OpJ2FfhlmDMz9mnNq1cdas= Subject key identifier: 52:A3:5A:BB:7D:6C:4E:83:7B:0D:58:73:43:81:53:E2:C4:FA:87:F4 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 0225 Signing time: Sat 23 Nov 2024 01:27:18 +0000 Manifest this update: Sat 23 Nov 2024 01:27:18 +0000 Manifest next update: Sat 30 Nov 2024 01:27:18 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: CVq9ba7ZthKYYWvF9+9vcuwR8d6k+5xMWSfLpJwDwVU=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Nov 23 01:27:18 2024 GMT Not After : Nov 30 01:27:18 2024 GMT Subject: CN=67412f76-b14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:30:57:24:5e:7b:85:01:19:6d:a4:25:86: 18:d9:b4:c2:f2:02:89:5f:01:a6:e2:7a:96:1a:1c: 76:f0:70:b3:c6:29:ff:08:7b:12:65:c5:39:aa:c0: 1a:ae:22:53:d1:14:c3:8a:ff:62:ec:e1:51:c0:38: 73:b8:b0:17:3d:11:80:4a:fa:82:ad:ad:d9:27:18: a9:da:d2:b7:e2:1c:64:9a:01:b1:0f:c0:9e:ea:bb: 92:c4:8a:b0:56:af:e1:5a:1e:c1:63:fb:bb:4d:c5: 8c:9c:09:12:df:1a:0b:27:51:02:6a:67:d5:58:7e: ed:5e:b2:01:c3:12:fb:2f:e5:7c:df:e8:75:dd:c0: c0:a0:72:65:f1:e7:54:55:76:25:78:16:f7:3d:0d: 5d:cb:43:55:57:92:f4:e4:61:d4:c0:96:cf:81:cc: 42:83:ab:e8:26:86:5b:56:56:dc:77:a6:87:1f:d2: b8:a0:0d:97:74:4f:46:8e:22:27:00:e5:50:28:8a: d8:85:f1:20:9c:99:7e:44:25:91:60:a8:c3:ba:de: ed:a3:d0:b3:6e:b0:8e:38:9a:2b:9f:3e:9b:a0:11: 0f:4b:e1:ef:e8:d7:a4:12:58:b5:3c:42:f1:a4:05: 70:2e:36:39:59:d6:69:d5:4d:0f:15:b6:0d:b2:e7: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A3:5A:BB:7D:6C:4E:83:7B:0D:58:73:43:81:53:E2:C4:FA:87:F4 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:bb:24:21:23:90:eb:38:2b:8a:8e:09:eb:86:cd:7c:e9: 69:7f:83:f2:e6:e5:42:63:d7:ca:a0:d0:52:5e:8c:99:2c:c9: 7c:9e:ce:a2:32:de:cf:e2:50:ac:c8:76:72:ca:ab:70:fc:f4: d6:3a:d2:4a:81:b7:3c:81:fb:f6:94:1b:fa:fd:24:78:73:76: 80:35:e3:c7:d8:6c:21:ea:6b:7a:fd:f2:69:78:cd:4c:d5:f4: 6d:59:e1:58:42:a6:d1:8e:e4:e1:21:96:c7:bb:60:60:f2:2e: 84:1e:3d:f1:87:a6:7f:8e:5d:38:a4:0d:8e:f8:74:a6:48:9d: 51:60:3f:a8:86:62:b8:79:62:2d:fd:dc:8c:cd:9b:dc:25:e8: ac:9d:0a:ed:16:79:c6:94:43:50:71:c0:5e:87:4b:0a:0b:88: 79:76:f0:9d:dc:16:05:18:d3:6d:77:55:e0:34:0f:bd:f5:8a: d0:00:db:ae:be:23:1f:ad:ee:f6:62:20:4b:37:c2:9b:0d:c8: 2b:81:8b:ac:07:49:66:3d:1e:a3:2b:dc:48:61:1d:b1:41:3e: 88:ae:3d:fd:78:89:05:43:1d:78:25:5c:b2:71:63:47:f7:2f: 9c:3b:47:ea:77:ea:a5:79:e4:9d:63:d2:77:1a:5f:8a:36:dd: 5b:a9:f8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjQxMTIzMDEyNzE4WhcNMjQxMTMwMDEyNzE4WjAYMRYwFAYD VQQDEw02NzQxMmY3Ni1iMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJcwVyRee4UBGW2kJYYY2bTC8gKJXwGm4nqWGhx28HCzxin/CHsSZcU5qsAa riJT0RTDiv9i7OFRwDhzuLAXPRGASvqCra3ZJxip2tK34hxkmgGxD8Ce6ruSxIqw Vq/hWh7BY/u7TcWMnAkS3xoLJ1ECamfVWH7tXrIBwxL7L+V83+h13cDAoHJl8edU VXYleBb3PQ1dy0NVV5L05GHUwJbPgcxCg6voJoZbVlbcd6aHH9K4oA2XdE9GjiIn AOVQKIrYhfEgnJl+RCWRYKjDut7to9CzbrCOOJornz6boBEPS+Hv6NekEli1PELx pAVwLjY5WdZp1U0PFbYNsueGhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKjWrt9 bE6Dew1Yc0OBU+LE+of0MB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR+7skISOQ6zgrio4J64bNfOlpf4Py5uVCY9fKoNBSXoyZLMl8ns6i Mt7P4lCsyHZyyqtw/PTWOtJKgbc8gfv2lBv6/SR4c3aANePH2Gwh6mt6/fJpeM1M 1fRtWeFYQqbRjuThIZbHu2Bg8i6EHj3xh6Z/jl04pA2O+HSmSJ1RYD+ohmK4eWIt /dyMzZvcJeisnQrtFnnGlENQccBeh0sKC4h5dvCd3BYFGNNtd1XgNA+99YrQANuu viMfre72YiBLN8KbDcgrgYusB0lmPR6jK9xIYR2xQT6Irj39eIkFQx14JVyycWNH 9y+cO0fqd+qleeSdY9J3Gl+KNt1bqfgT -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org