$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: sDtSqHVIUosCjtACtCJ73nRELfofXTprQCbim2D1+V8= Subject key identifier: 14:3F:82:60:87:C7:74:D7:FD:2D:0E:7B:58:18:A0:F8:2D:A1:94:3C Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 09BC Signing time: Fri 22 Nov 2024 19:46:44 +0000 Manifest this update: Fri 22 Nov 2024 19:46:44 +0000 Manifest next update: Fri 29 Nov 2024 19:46:44 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: RMTBtiAQQHddzHl7XeZWR235F6ST1RghyUTpC3f5DXE=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: m/p8bbAHJM24HdYiY9DoNYUeIyo2VNJNxbaHYIEgDWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Nov 22 19:46:44 2024 GMT Not After : Nov 29 19:46:44 2024 GMT Subject: CN=6740dfa4-a3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:1a:3c:85:70:e2:f6:f5:24:0a:30:09:04: f5:6e:f6:bb:e0:cc:60:02:80:23:50:fe:28:cb:d9: a3:bc:d0:7f:bd:1d:b1:d4:70:0a:e9:39:c6:cd:6d: 9b:ef:4f:5f:37:c5:13:cf:88:8f:79:25:44:69:f1: 7b:19:ac:92:61:47:11:89:ce:e6:90:fc:03:b5:8d: 26:41:60:c6:6c:3a:ed:30:49:3f:ea:9f:9e:06:d8: d4:9b:5d:44:39:fc:8d:59:28:ac:32:ab:de:6e:e0: 66:e4:08:41:e5:9b:f4:05:e9:7f:c1:7d:89:28:f3: e7:b8:b3:fb:60:ff:7a:7c:53:67:b6:c7:2f:70:f4: d4:4d:fb:4f:36:db:c7:a9:a9:0a:e1:e9:98:bc:33: d9:7a:1a:fe:e9:0c:c8:5a:39:7f:27:61:ef:ed:69: 2c:31:3e:c2:7b:61:d4:0f:13:25:dc:4c:1e:26:53: da:ca:c2:ca:d1:73:ea:47:af:99:89:bc:50:7b:cb: c8:e9:da:95:aa:fd:af:17:8a:c0:9a:33:50:09:b1: 61:a9:64:3e:0f:45:b5:07:3d:89:6c:de:e7:ce:eb: 19:58:dd:ba:a0:a8:95:8a:e1:e9:79:f4:a0:b7:98: bc:de:a8:a3:50:73:5e:01:b5:41:c8:0c:15:f6:89: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:82:60:87:C7:74:D7:FD:2D:0E:7B:58:18:A0:F8:2D:A1:94:3C X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:da:c0:5c:ac:38:db:33:6b:f8:05:aa:e8:84:30:49:9d:bd: 77:ea:46:1b:c7:39:ac:c9:ad:0c:5e:6d:ab:e2:33:b8:06:c4: 6a:6f:f5:cc:d1:7a:4d:e0:0d:57:22:54:18:24:f9:bb:a5:6d: 52:70:e8:c0:0c:20:c3:f5:6a:fe:f1:50:3d:a3:70:95:e9:07: f2:0d:f5:70:1a:33:67:e0:8d:4b:7d:d5:8b:e0:89:d5:db:af: 3f:2d:20:3d:bb:bf:18:e1:e3:80:f0:68:01:c9:0c:e5:89:95: 59:0b:b2:0e:84:61:fe:7a:f0:9f:b8:f1:3e:95:b4:f0:1c:a1: ef:5f:da:05:91:70:c0:1e:3a:ff:36:f6:69:b5:17:1a:de:bc: 5c:a7:4d:6e:47:c9:6c:0a:4b:18:68:ec:1d:ce:62:ee:5d:dc: 66:5c:a6:31:1b:f9:4d:c4:d4:2e:9d:bb:81:34:81:3e:6a:1e: 2d:9d:5f:5c:4c:cc:07:01:1b:07:46:59:a5:0e:84:83:44:7e: 2b:66:80:b9:94:ce:e3:d6:52:db:99:fa:1f:50:5d:a1:29:67: e4:fd:88:65:50:d7:10:37:c7:aa:0b:27:7b:9d:dd:a9:c9:cf: 41:f2:62:d7:93:3a:08:60:62:24:f6:a7:a0:05:c2:18:3a:f9: 30:b6:fd:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjQxMTIyMTk0NjQ0WhcNMjQxMTI5MTk0NjQ0WjAYMRYwFAYD VQQDEw02NzQwZGZhNC1hM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcsaPIVw4vb1JAowCQT1bva74MxgAoAjUP4oy9mjvNB/vR2x1HAK6TnGzW2b 709fN8UTz4iPeSVEafF7GaySYUcRic7mkPwDtY0mQWDGbDrtMEk/6p+eBtjUm11E OfyNWSisMqvebuBm5AhB5Zv0Bel/wX2JKPPnuLP7YP96fFNntscvcPTUTftPNtvH qakK4emYvDPZehr+6QzIWjl/J2Hv7WksMT7Ce2HUDxMl3EweJlPaysLK0XPqR6+Z ibxQe8vI6dqVqv2vF4rAmjNQCbFhqWQ+D0W1Bz2JbN7nzusZWN26oKiViuHpefSg t5i83qijUHNeAbVByAwV9onsYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ/gmCH x3TX/S0Oe1gYoPgtoZQ8MB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY2sBcrDjbM2v4BarohDBJnb136kYbxzmsya0MXm2r4jO4BsRqb/XM 0XpN4A1XIlQYJPm7pW1ScOjADCDD9Wr+8VA9o3CV6QfyDfVwGjNn4I1LfdWL4InV 268/LSA9u78Y4eOA8GgByQzliZVZC7IOhGH+evCfuPE+lbTwHKHvX9oFkXDAHjr/ NvZptRca3rxcp01uR8lsCksYaOwdzmLuXdxmXKYxG/lNxNQunbuBNIE+ah4tnV9c TMwHARsHRlmlDoSDRH4rZoC5lM7j1lLbmfofUF2hKWfk/YhlUNcQN8eqCyd7nd2p yc9B8mLXkzoIYGIk9qegBcIYOvkwtv3M -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org