$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: QK3foVnb5aaPdyuOipyLDHI4VY4QdHsly2/8IteWzzQ= Subject key identifier: 13:D9:DF:17:56:D0:68:E9:F8:7A:1A:F4:84:81:1F:7F:AB:F1:69:3C Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0AA2 Signing time: Fri 22 Nov 2024 19:17:08 +0000 Manifest this update: Fri 22 Nov 2024 19:17:08 +0000 Manifest next update: Fri 29 Nov 2024 19:17:08 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: kDZQhhrt4eaN2yBk8tU/WL3QJT5Qw8EGrTTvCy3r5kI=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Nov 22 19:17:08 2024 GMT Not After : Nov 29 19:17:08 2024 GMT Subject: CN=6740d8b4-572d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:3e:e4:3c:74:c1:12:95:68:95:8d:31:ad: cf:a8:f2:e0:c3:8b:fb:bf:b2:8f:85:75:aa:c4:73: f9:2c:ec:be:1c:4c:5a:b4:6c:b7:66:ae:7b:f9:f6: b9:c1:62:63:4d:09:1f:22:f5:86:6a:fb:09:1c:72: 54:df:e7:08:ce:3a:db:a2:22:6c:20:79:2e:76:7b: 5e:ae:32:8f:6e:41:53:30:86:e4:a0:a3:d7:57:80: 5b:b9:8d:73:fa:ad:73:c9:19:88:0e:83:29:af:85: e0:c0:48:90:76:ab:09:d6:f3:13:de:d0:b1:ff:71: 27:86:92:37:4d:c7:f7:fe:ab:36:25:1b:41:31:34: 97:07:5e:1d:38:6a:92:2c:1a:74:54:8c:40:f1:dd: 2c:03:e6:41:8b:83:4e:05:01:d0:6c:c6:5e:44:3e: 33:24:00:25:05:a3:ab:e6:48:b6:ee:48:6b:5e:6a: 5b:2c:39:7f:d0:3e:3b:3a:7d:3d:d0:94:be:e7:17: 58:30:bc:5a:05:47:14:00:18:74:ce:6c:ea:d7:26: d5:f6:4a:13:96:9e:56:11:13:ec:23:94:09:25:e9: cb:99:be:73:d8:eb:77:52:fd:50:ab:6d:eb:7a:55: a9:f5:2c:1f:8a:e4:06:56:ee:7e:b1:a8:28:74:8c: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:DF:17:56:D0:68:E9:F8:7A:1A:F4:84:81:1F:7F:AB:F1:69:3C X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:16:f7:46:d0:21:e8:0e:b0:30:06:83:e2:8a:14:7f:2d:f9: 6d:a4:29:b2:89:84:fb:04:63:9a:75:ea:50:a7:9b:97:2d:ab: 07:23:1b:b0:66:10:bb:c2:34:ac:1a:da:77:0c:3d:41:33:f7: 53:1d:e1:6b:33:0d:b6:da:f5:00:70:8c:ee:31:5b:eb:3b:38: 6d:69:b2:e1:6f:d0:e7:fe:a7:0d:f3:ac:f9:ee:c4:dd:f7:9c: 67:b8:5c:71:d1:54:b2:76:69:0b:fb:6a:03:7a:ef:0b:ef:ac: ea:d6:14:d8:ca:07:a7:9b:e9:36:d5:6a:ad:a8:6c:f4:0c:fa: bf:97:e8:a4:70:cc:86:3f:89:46:da:6b:c6:2b:02:43:2c:12: af:35:36:56:01:c7:91:0b:53:4b:b9:23:38:13:7b:ea:62:db: 93:83:41:58:e4:20:23:18:b8:f6:2c:a2:5b:cb:f3:aa:05:8a: d4:3e:a7:ae:fb:8f:bb:05:8f:cb:d8:90:b6:f8:90:3c:27:63: 1f:fd:53:21:d8:44:b9:a0:ef:7f:88:c6:09:d4:77:7a:05:28: c2:84:e5:74:a6:75:58:25:73:3c:f6:51:5d:25:d8:80:42:24: 62:a9:5f:b3:ee:91:0a:59:95:56:ee:cb:f0:4f:18:d1:55:54: a6:e7:1d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjQxMTIyMTkxNzA4WhcNMjQxMTI5MTkxNzA4WjAYMRYwFAYD VQQDEw02NzQwZDhiNC01NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpk+5Dx0wRKVaJWNMa3PqPLgw4v7v7KPhXWqxHP5LOy+HExatGy3Zq57+fa5 wWJjTQkfIvWGavsJHHJU3+cIzjrboiJsIHkudnterjKPbkFTMIbkoKPXV4BbuY1z +q1zyRmIDoMpr4XgwEiQdqsJ1vMT3tCx/3EnhpI3Tcf3/qs2JRtBMTSXB14dOGqS LBp0VIxA8d0sA+ZBi4NOBQHQbMZeRD4zJAAlBaOr5ki27khrXmpbLDl/0D47On09 0JS+5xdYMLxaBUcUABh0zmzq1ybV9koTlp5WERPsI5QJJenLmb5z2Ot3Uv1Qq23r elWp9SwfiuQGVu5+sagodIyu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPZ3xdW 0Gjp+Hoa9ISBH3+r8Wk8MB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0FvdG0CHoDrAwBoPiihR/LfltpCmyiYT7BGOadepQp5uXLasHIxuw ZhC7wjSsGtp3DD1BM/dTHeFrMw222vUAcIzuMVvrOzhtabLhb9Dn/qcN86z57sTd 95xnuFxx0VSydmkL+2oDeu8L76zq1hTYygenm+k21WqtqGz0DPq/l+ikcMyGP4lG 2mvGKwJDLBKvNTZWAceRC1NLuSM4E3vqYtuTg0FY5CAjGLj2LKJby/OqBYrUPqeu +4+7BY/L2JC2+JA8J2Mf/VMh2ES5oO9/iMYJ1Hd6BSjChOV0pnVYJXM89lFdJdiA QiRiqV+z7pEKWZVW7svwTxjRVVSm5x2N -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org