$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: m8d7Fi5deUI+Bjfr9Xs7g2azbcMrUwDxbCcRdU9TfGs= Subject key identifier: DB:55:A2:4A:2E:B6:E4:D8:4B:C6:B1:80:2C:88:70:31:0A:81:AC:2D Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 0590 Signing time: Fri 22 Nov 2024 18:54:16 +0000 Manifest this update: Fri 22 Nov 2024 18:54:15 +0000 Manifest next update: Fri 29 Nov 2024 18:54:15 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: s9t1b2/crufwm5hDLVIRYGlOxJrOv94KqxD1D37iAq0=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Nov 22 18:54:15 2024 GMT Not After : Nov 29 18:54:15 2024 GMT Subject: CN=6740d357-7f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:25:56:7e:56:1e:ba:f3:f6:a2:88:2b:3f: 90:12:6e:69:9b:f5:6a:fa:b5:29:5f:7a:d7:35:21: aa:9c:f3:4a:a2:59:b9:36:b3:9d:15:f4:4f:bb:3b: d9:4f:ea:8b:83:b0:f2:01:3b:6d:31:07:98:42:7c: 16:8c:8e:41:a3:1c:2f:f0:82:bc:67:9f:60:75:8b: ec:78:49:b6:f6:83:7d:1f:1a:6e:34:fc:0b:32:c6: 47:01:58:83:84:01:83:86:f8:07:64:b4:ae:5f:02: d5:2e:6e:73:4e:5e:99:9a:f3:0c:07:fc:77:3f:52: f8:15:72:43:65:47:b8:53:7c:a0:e7:24:6c:dc:78: f8:23:86:a4:4f:51:71:b7:60:c7:e1:0b:bc:b7:48: 16:02:ca:cd:3f:0b:89:34:d1:23:d6:fc:dd:fc:3d: 8d:84:d6:3b:6a:88:74:e3:c4:32:e1:f2:74:81:a8: e7:27:74:bc:77:a6:49:70:18:7a:c4:ed:68:f8:72: 06:ec:95:60:0b:3e:95:0b:d9:eb:39:ca:b5:0a:d2: 17:53:10:2d:4e:0a:8c:d1:a4:84:83:2b:30:61:b5: 80:d8:4b:a4:af:81:2b:df:02:94:3b:5c:77:ae:9f: 1e:53:ae:75:0a:e9:22:3a:98:93:41:5e:43:4b:a6: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:A2:4A:2E:B6:E4:D8:4B:C6:B1:80:2C:88:70:31:0A:81:AC:2D X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:47:9e:08:a6:be:25:3d:39:7d:fe:c7:dd:be:87:11:ca:cd: 73:48:52:70:7c:49:ff:a2:1b:d7:da:37:7d:5b:84:34:f0:ba: 8f:25:c9:97:74:c3:3b:3b:90:6b:1d:c2:0e:12:1f:5d:73:16: 08:25:b0:c5:e8:54:52:4a:04:5b:62:8c:5c:6c:66:d6:fc:a5: f0:8e:06:3a:d9:c7:2a:f1:25:78:af:31:88:9d:30:09:0d:1b: 97:f2:64:6d:b0:99:a9:f0:7b:2d:63:9b:2a:34:e0:c6:ea:25: db:5e:d3:e5:a3:7d:5b:18:ab:34:30:49:80:0b:1c:7d:d1:e7: 90:8d:4c:8f:6d:a9:3e:e6:92:33:74:0d:99:26:87:b9:5c:66: 97:cb:50:d2:29:89:0f:9e:45:40:89:b7:f1:fe:80:0e:63:d1: 05:4c:d8:08:c9:57:f6:b1:04:fb:84:de:7a:49:31:27:9e:e1: 07:f3:41:80:38:cf:78:a4:57:11:35:c5:3d:84:04:c8:76:5a: 89:f0:94:51:57:18:81:38:75:2f:8d:45:e4:40:7e:81:e0:d7: 5b:cb:70:19:73:40:0f:37:64:ea:ab:7e:d9:06:73:b3:3c:ec: 59:30:ce:35:81:f4:7b:ad:5f:c1:be:59:86:15:ae:56:56:66: d1:7c:be:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjQxMTIyMTg1NDE1WhcNMjQxMTI5MTg1NDE1WjAYMRYwFAYD VQQDEw02NzQwZDM1Ny03ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GYlVn5WHrrz9qKIKz+QEm5pm/Vq+rUpX3rXNSGqnPNKolm5NrOdFfRPuzvZ T+qLg7DyATttMQeYQnwWjI5Boxwv8IK8Z59gdYvseEm29oN9HxpuNPwLMsZHAViD hAGDhvgHZLSuXwLVLm5zTl6ZmvMMB/x3P1L4FXJDZUe4U3yg5yRs3Hj4I4akT1Fx t2DH4Qu8t0gWAsrNPwuJNNEj1vzd/D2NhNY7aoh048Qy4fJ0gajnJ3S8d6ZJcBh6 xO1o+HIG7JVgCz6VC9nrOcq1CtIXUxAtTgqM0aSEgyswYbWA2Eukr4Er3wKUO1x3 rp8eU651CukiOpiTQV5DS6arGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtVokou tuTYS8axgCyIcDEKgawtMB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdR54Ipr4lPTl9/sfdvocRys1zSFJwfEn/ohvX2jd9W4Q08LqPJcmX dMM7O5BrHcIOEh9dcxYIJbDF6FRSSgRbYoxcbGbW/KXwjgY62ccq8SV4rzGInTAJ DRuX8mRtsJmp8HstY5sqNODG6iXbXtPlo31bGKs0MEmACxx90eeQjUyPbak+5pIz dA2ZJoe5XGaXy1DSKYkPnkVAibfx/oAOY9EFTNgIyVf2sQT7hN56STEnnuEH80GA OM94pFcRNcU9hATIdlqJ8JRRVxiBOHUvjUXkQH6B4Ndby3AZc0APN2Tqq37ZBnOz POxZMM41gfR7rV/BvlmGFa5WVmbRfL5C -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org