$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: TBZmKqJS9zxPk0H9FgasCjvyZad4jvn/tYfMGr2Bs1Q= Subject key identifier: FF:54:32:85:87:50:CE:EF:F2:35:B7:4B:63:32:00:20:3F:30:3A:53 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0BD9 Signing time: Fri 22 Nov 2024 18:33:36 +0000 Manifest this update: Fri 22 Nov 2024 18:33:35 +0000 Manifest next update: Fri 29 Nov 2024 18:33:35 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: jcQW6UMn7RW4OusLPPb5M6e1Kkt1NSUEVTjF347Cjro=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: R8KJDJxlQWb8ndwOjrL7Ucl8gCWXIPBfXSkLlfNAWuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Nov 22 18:33:35 2024 GMT Not After : Nov 29 18:33:35 2024 GMT Subject: CN=6740ce80-0e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:18:28:a7:7e:70:f7:f3:90:13:7a:6a:05: 7f:b0:45:44:38:4e:d8:19:86:3c:c0:a8:7c:0b:86: e6:84:0c:0d:0c:19:48:76:1b:10:07:e2:bb:a9:4a: fe:b7:83:81:4a:34:09:6f:f1:36:31:7b:9d:e7:3b: e9:8b:06:42:5c:4a:07:02:99:d4:d1:d0:63:bb:5a: 35:c8:62:68:f2:ca:16:78:4c:3a:29:f5:97:e4:19: 74:49:25:18:80:95:0f:35:53:84:e1:f1:b7:1c:dd: 1b:9d:b0:85:19:22:e5:37:a2:7d:77:60:de:d6:84: 12:6c:ca:79:74:45:10:ff:c6:a7:32:7a:43:6d:7c: 4c:1e:9d:89:99:14:fd:17:8e:1e:0f:a6:2f:a6:10: 8d:d0:74:a7:a9:48:05:f3:ac:22:8f:89:4b:d4:19: a5:75:be:e8:9d:2b:1a:6c:59:12:0a:f5:93:08:bf: eb:19:dc:f3:55:68:e6:19:64:f7:4f:c1:2b:68:d2: df:cf:0c:a0:c0:88:fd:d7:3a:38:74:dc:86:f0:7f: 68:c5:68:73:3a:49:c8:40:38:61:12:53:df:5d:da: 70:ff:ce:c7:c6:92:92:dc:14:58:d8:a0:08:46:9c: 02:4d:56:5e:08:d4:a0:4e:cd:d9:5d:dd:3d:14:00: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:32:85:87:50:CE:EF:F2:35:B7:4B:63:32:00:20:3F:30:3A:53 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:f9:c0:59:63:0c:06:9e:f0:89:81:a9:73:b9:6a:7c:7e: b0:c7:4a:4b:67:5e:e1:57:4f:24:e8:8a:c7:78:f9:a3:30:7f: f5:9d:75:3a:2b:0a:70:97:d2:e3:a6:92:4a:98:03:33:cc:36: 4a:2f:6b:b0:c5:72:01:0c:2c:f0:7a:d3:bf:63:5c:bf:a6:42: 3e:18:56:05:a7:5f:92:07:f8:03:1a:1b:35:24:63:ba:b5:09: 25:4e:88:17:b7:3f:13:28:80:0e:97:9f:79:54:3c:a8:57:ed: 25:15:aa:39:b3:54:74:e5:0a:2c:24:7e:f2:83:5c:37:96:c9: a7:8b:49:b5:e6:13:6b:1d:d0:ba:df:07:cf:16:8a:e9:39:f4: fb:63:0d:dc:23:20:51:83:57:18:23:91:63:e9:2f:de:5a:07: e8:32:ce:99:38:75:11:f6:47:96:f8:f3:32:ee:51:1c:f0:ca: 2f:36:99:14:5e:4d:51:bb:1b:51:65:5a:96:75:0f:69:e6:2a: 26:f1:86:60:ce:09:cd:2f:e6:c6:56:29:a5:9b:31:e5:45:68: 0c:c3:01:8e:e4:7a:c6:63:5f:b1:f1:24:95:84:8a:ee:14:67: 81:d3:d8:a9:2a:da:c8:0a:d1:d3:97:40:b7:51:d9:87:c9:f8: bb:0f:07:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjQxMTIyMTgzMzM1WhcNMjQxMTI5MTgzMzM1WjAYMRYwFAYD VQQDEw02NzQwY2U4MC0wZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+wYKKd+cPfzkBN6agV/sEVEOE7YGYY8wKh8C4bmhAwNDBlIdhsQB+K7qUr+ t4OBSjQJb/E2MXud5zvpiwZCXEoHApnU0dBju1o1yGJo8soWeEw6KfWX5Bl0SSUY gJUPNVOE4fG3HN0bnbCFGSLlN6J9d2De1oQSbMp5dEUQ/8anMnpDbXxMHp2JmRT9 F44eD6YvphCN0HSnqUgF86wij4lL1Bmldb7onSsabFkSCvWTCL/rGdzzVWjmGWT3 T8EraNLfzwygwIj91zo4dNyG8H9oxWhzOknIQDhhElPfXdpw/87HxpKS3BRY2KAI RpwCTVZeCNSgTs3ZXd09FAAtowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9UMoWH UM7v8jW3S2MyACA/MDpTMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK8PnAWWMMBp7wiYGpc7lqfH6wx0pLZ17hV08k6IrHePmjMH/1nXU6 Kwpwl9LjppJKmAMzzDZKL2uwxXIBDCzwetO/Y1y/pkI+GFYFp1+SB/gDGhs1JGO6 tQklTogXtz8TKIAOl595VDyoV+0lFao5s1R05QosJH7yg1w3lsmni0m15hNrHdC6 3wfPForpOfT7Yw3cIyBRg1cYI5Fj6S/eWgfoMs6ZOHUR9keW+PMy7lEc8MovNpkU Xk1RuxtRZVqWdQ9p5iom8YZgzgnNL+bGVimlmzHlRWgMwwGO5HrGY1+x8SSVhIru FGeB09ipKtrICtHTl0C3UdmHyfi7DwcD -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org