$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: xguM6GSVKGHsOrshjisHzTm89KvbkacUuKya/UTgz1A= Subject key identifier: 1C:C3:DD:30:53:40:85:02:32:D4:9F:84:A4:FF:C2:61:11:31:BF:D6 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 0959 Signing time: Wed 20 Nov 2024 19:53:48 +0000 Manifest this update: Wed 20 Nov 2024 19:53:47 +0000 Manifest next update: Wed 27 Nov 2024 19:53:47 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: vJCON77ych8x6VGidaMqSJidFt9sl4gDXUYmI+mHLZY=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: 3rWkl0W3crfARyeJEWHkC4Z5dwQIq9F1gZTXeYw8MYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2400 (0x960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Nov 20 19:53:47 2024 GMT Not After : Nov 27 19:53:47 2024 GMT Subject: CN=673e3e4b-f2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:c4:ca:44:ab:b2:de:92:2b:3a:54:90:72: a0:3c:11:7a:21:32:a9:72:e6:dd:33:58:76:76:47: 9c:23:42:5d:c7:ef:b2:b6:cd:c9:a3:e4:d2:9b:d8: c4:6c:07:5a:5a:1c:a7:fb:b0:8f:86:c9:88:60:df: a7:a7:49:7b:ed:a3:2b:f5:ed:c3:87:e4:c9:33:f3: 6b:c8:29:14:8a:88:b1:4d:6b:9d:32:b2:6c:30:dd: de:63:81:27:2b:a9:4f:07:c5:23:bc:85:ae:d1:9c: af:59:23:e0:6e:01:bd:c7:3b:54:cd:24:bf:58:f3: 3b:8b:c2:6e:8e:85:b7:11:2b:3b:7c:2f:4d:6d:c3: b6:e8:f1:70:13:d4:f0:9c:aa:c5:6a:ab:39:f2:d2: 94:8a:e5:e4:0d:2f:55:0b:77:7d:d5:e5:ff:5f:a1: 24:e0:d9:3a:7f:95:50:8a:fc:15:71:c2:ef:17:86: 25:4f:9d:a5:0a:bf:73:7b:0a:22:3f:36:e6:e9:86: ea:a7:fa:5b:9d:8c:3f:d5:eb:80:c9:5e:79:8e:1c: 4f:68:b0:c4:a8:f5:d6:8b:57:61:fe:01:d1:76:5e: 01:71:c9:14:7f:16:c1:ec:ea:a1:3f:66:7f:22:95: 8a:2f:e2:2e:09:96:fe:53:26:13:a6:94:0d:a9:8c: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:DD:30:53:40:85:02:32:D4:9F:84:A4:FF:C2:61:11:31:BF:D6 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2c:e2:9c:76:3d:9b:81:25:b0:49:c0:b3:bc:c0:e5:8e:00: 2f:84:3e:b5:2e:d5:6a:8a:cf:43:47:cb:9c:cb:34:88:09:aa: 44:e3:af:2c:2a:15:53:9c:a0:a2:e6:a3:72:0a:31:bd:5a:19: 1b:56:35:8a:b3:c4:bc:80:e7:0e:60:eb:d8:e8:0d:79:90:0e: 95:67:12:97:04:3d:81:17:38:86:bb:7d:ad:26:f0:5b:80:26: 43:5b:71:d1:3f:fe:5e:39:d1:7e:21:c7:cc:55:6b:33:e7:fc: b0:03:b0:1c:60:51:24:fa:68:04:9b:3d:1d:1c:9d:57:7b:23: eb:ca:af:17:bd:5b:fd:58:e9:dc:f0:84:66:29:55:29:7d:e7: 80:a7:37:7a:45:06:a0:8c:35:22:2c:1d:cd:3e:12:2c:0c:1f: 9b:00:89:34:d9:21:92:c5:7b:dc:c0:2c:56:36:26:6b:f9:9d: 6d:a7:29:e9:dd:87:e0:1e:c0:d9:02:28:43:e2:8d:cf:8c:2b: fa:b0:08:81:90:61:af:0a:8e:f9:d7:f4:ab:64:3f:7b:53:6d: 39:0f:9e:cf:26:e8:52:4b:c8:61:0e:11:dd:61:62:89:67:b6: 70:62:4a:0d:a2:08:f8:51:25:50:34:5c:e1:35:e2:d9:68:de: 31:75:8c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjQxMTIwMTk1MzQ3WhcNMjQxMTI3MTk1MzQ3WjAYMRYwFAYD VQQDEw02NzNlM2U0Yi1mMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBXEykSrst6SKzpUkHKgPBF6ITKpcubdM1h2dkecI0Jdx++yts3Jo+TSm9jE bAdaWhyn+7CPhsmIYN+np0l77aMr9e3Dh+TJM/NryCkUioixTWudMrJsMN3eY4En K6lPB8UjvIWu0ZyvWSPgbgG9xztUzSS/WPM7i8JujoW3ESs7fC9NbcO26PFwE9Tw nKrFaqs58tKUiuXkDS9VC3d91eX/X6Ek4Nk6f5VQivwVccLvF4YlT52lCr9zewoi Pzbm6Ybqp/pbnYw/1euAyV55jhxPaLDEqPXWi1dh/gHRdl4BcckUfxbB7OqhP2Z/ IpWKL+IuCZb+UyYTppQNqYzKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzD3TBT QIUCMtSfhKT/wmERMb/WMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsLOKcdj2bgSWwScCzvMDljgAvhD61LtVqis9DR8ucyzSICapE468s KhVTnKCi5qNyCjG9WhkbVjWKs8S8gOcOYOvY6A15kA6VZxKXBD2BFziGu32tJvBb gCZDW3HRP/5eOdF+IcfMVWsz5/ywA7AcYFEk+mgEmz0dHJ1XeyPryq8XvVv9WOnc 8IRmKVUpfeeApzd6RQagjDUiLB3NPhIsDB+bAIk02SGSxXvcwCxWNiZr+Z1tpynp 3YfgHsDZAihD4o3PjCv6sAiBkGGvCo751/SrZD97U205D57PJuhSS8hhDhHdYWKJ Z7ZwYkoNogj4USVQNFzhNeLZaN4xdYzM -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:05 2024 by rpki-client on console-ams.rpki-client.org