$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: Xc2g+kDDLoq2FwyKSsmnKhWrlQM5WS7VymEYdeiINqE= Subject key identifier: 3C:7F:4A:BE:E1:2C:03:96:F3:36:37:C5:71:F4:1A:D4:91:7A:4F:EF Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: 7D Signing time: Sat 23 Nov 2024 04:42:08 +0000 Manifest this update: Sat 23 Nov 2024 04:42:08 +0000 Manifest next update: Sat 30 Nov 2024 04:42:08 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: XEGvTI7HWrSKcYbk/XhgO8xhfmwst/K3NJnry49kdEk=) 2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: aFMYkYBw2EhyeI2pqMsreJuK3qV39ueiDtvXsuPF2Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: Nov 23 04:42:08 2024 GMT Not After : Nov 30 04:42:08 2024 GMT Subject: CN=67415d20-18dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:18:3f:60:8a:7b:81:94:dc:0b:87:f8:2f: 74:a0:ae:4d:fb:f9:cb:29:37:22:08:1c:94:9c:d8: 9e:c3:0e:f2:ad:24:9d:97:65:54:ad:b4:18:ef:31: 87:52:1e:ac:ae:bf:05:b3:6a:e2:2d:fa:81:2e:da: a1:ee:e1:d7:7c:dc:a6:6f:44:db:04:e7:66:ee:fc: fe:de:de:26:aa:60:a2:1a:5d:3d:10:33:b2:db:6d: c8:d3:60:e5:39:a4:9e:51:75:51:00:db:ae:19:37: 5b:09:34:96:2b:c4:c1:28:10:39:ea:c9:d9:22:02: c5:91:f6:12:14:92:c0:b3:9d:b9:d6:32:07:15:20: 5f:ff:e9:f5:db:1a:ae:13:d7:33:e9:75:6c:62:ab: d7:74:dc:c3:6b:c9:ad:fc:8a:34:03:be:be:c1:b3: 15:d8:f5:2e:80:3f:d9:81:68:f9:f8:47:0f:ca:50: c7:ff:26:f7:19:66:6c:4a:3c:dd:10:9a:6e:a2:ac: a2:32:a0:0c:b4:ef:4e:90:98:54:ca:8e:e2:f7:ce: 3f:99:2f:60:53:bc:ef:14:b0:c9:c1:da:05:9b:cd: f3:7e:9c:05:16:ab:64:c3:53:77:75:45:9a:c6:f0: 5c:1f:76:ff:67:4b:7c:1c:68:00:b0:ed:d3:a4:bb: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:4A:BE:E1:2C:03:96:F3:36:37:C5:71:F4:1A:D4:91:7A:4F:EF X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7d:14:80:2f:bc:de:05:be:91:c3:fd:b1:39:71:b7:fc:06: 6b:1a:bb:e5:90:37:32:b6:73:4a:25:56:8c:12:94:e0:94:b9: 01:c5:0b:46:51:ff:ef:de:74:b8:4b:d3:81:2a:8c:c9:13:2c: a9:e6:a7:74:cb:a9:1d:41:63:56:c4:22:80:2d:b4:d3:59:46: 2b:c3:08:eb:0f:5e:a9:53:d8:13:c9:7d:a7:e1:74:79:e4:7e: e8:62:58:70:15:db:1b:6a:8a:2a:ca:c5:51:b0:57:27:fb:da: 85:ba:e8:cf:bc:ef:a0:07:c8:8e:66:cb:6f:10:25:50:c8:c4: 47:5b:dd:89:71:05:f6:26:25:03:89:c8:da:82:03:5a:7d:fb: c9:8b:e8:7f:51:77:9e:99:12:2c:d4:47:9b:94:52:75:48:a4: ab:bd:16:1f:1f:c3:17:84:fe:dd:9d:56:24:ef:34:5e:3d:d4: 4f:58:5f:09:4d:de:d7:51:00:7c:75:4e:c0:2e:27:6e:fc:71: a5:6c:e0:db:cf:35:b8:43:2e:a8:c3:7d:b8:74:1f:75:10:b6: ad:7d:d9:11:68:26:9d:12:e5:c0:8c:40:e2:fd:7f:ce:8d:a2: 6b:81:b2:c5:6a:fa:30:34:6c:6d:f4:34:84:98:bd:c5:57:54: c9:19:1a:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUI2RDExMC8GA1UEBRMoOEUwMkI1QzRERUI1M0YyQjcxMkZGMDc3REUwNDkwODM3 NUU4MTNEQjAeFw0yNDExMjMwNDQyMDhaFw0yNDExMzAwNDQyMDhaMBgxFjAUBgNV BAMTDTY3NDE1ZDIwLTE4ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5nRg/YIp7gZTcC4f4L3Sgrk37+cspNyIIHJSc2J7DDvKtJJ2XZVSttBjvMYdS HqyuvwWzauIt+oEu2qHu4dd83KZvRNsE52bu/P7e3iaqYKIaXT0QM7LbbcjTYOU5 pJ5RdVEA264ZN1sJNJYrxMEoEDnqydkiAsWR9hIUksCznbnWMgcVIF//6fXbGq4T 1zPpdWxiq9d03MNrya38ijQDvr7BsxXY9S6AP9mBaPn4Rw/KUMf/JvcZZmxKPN0Q mm6irKIyoAy0706QmFTKjuL3zj+ZL2BTvO8UsMnB2gWbzfN+nAUWq2TDU3d1RZrG 8Fwfdv9nS3wcaACw7dOku2gTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPH9KvuEs A5bzNjfFcfQa1JF6T+8wHwYDVR0jBBgwFoAUjgK1xN61PytxL/B33gSQg3XoE9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1QjZELzIxNTIyMTgyRTc4 RTExRUU5ODMxRUI3RUM0RjlBRTAyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamdLMXhONjFQeXR4TF9CMzNnU1FnM1hvRTlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 QjZELzIxNTIyMTgyRTc4RTExRUU5ODMxRUI3RUM0RjlBRTAyL2pnSzF4TjYxUHl0 eExfQjMzZ1NRZzNYb0U5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZ9FIAvvN4FvpHD/bE5cbf8Bmsau+WQNzK2c0olVowSlOCUuQHFC0ZR /+/edLhL04EqjMkTLKnmp3TLqR1BY1bEIoAttNNZRivDCOsPXqlT2BPJfafhdHnk fuhiWHAV2xtqiirKxVGwVyf72oW66M+876AHyI5my28QJVDIxEdb3YlxBfYmJQOJ yNqCA1p9+8mL6H9Rd56ZEizUR5uUUnVIpKu9Fh8fwxeE/t2dViTvNF491E9YXwlN 3tdRAHx1TsAuJ278caVs4NvPNbhDLqjDfbh0H3UQtq192RFoJp0S5cCMQOL9f86N omuBssVq+jA0bG30NISYvcVXVMkZGiM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org