$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: /m0m894ViGOqbLupOdbtAv3Aydu0mSsMPodykQ1f8/k= Subject key identifier: 62:36:D4:6A:28:1A:9B:42:66:4F:29:F7:D6:6F:50:4F:1B:72:73:AE Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: 45 Signing time: Sat 23 Nov 2024 05:19:53 +0000 Manifest this update: Sat 23 Nov 2024 05:19:53 +0000 Manifest next update: Sat 30 Nov 2024 05:19:53 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: +rDBuc8Z/2SfSi5184qV0dJu8NZPHZGBDcU+V93SeuI=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: q/DDrGFL5S2NU9DAF/3ZYujxHcWmF0oksvSTie/kXHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Nov 23 05:19:53 2024 GMT Not After : Nov 30 05:19:53 2024 GMT Subject: CN=674165f9-12e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:2b:f1:32:05:2d:13:e6:c1:91:2c:7e:3a: 7a:29:5c:80:ab:f4:14:0c:3b:f0:68:37:85:99:10: 8d:e2:bc:59:eb:8b:99:67:c2:60:2a:ab:d5:16:18: b0:26:27:3c:f4:54:49:47:95:5d:aa:7c:4f:36:a6: 1b:db:22:64:00:19:ba:61:8f:57:8c:bc:d7:b9:78: 33:8c:85:cf:91:8b:73:d3:9a:29:e6:27:aa:d6:70: 75:fb:6b:03:ab:80:97:f3:d9:5e:21:9f:bc:59:fd: 11:cc:ca:cc:6a:a6:d7:95:2d:8b:ea:07:de:80:eb: 89:d2:d9:7e:db:85:a0:64:53:96:06:6c:d2:77:83: 44:1f:c7:fd:29:ca:3b:e9:a1:38:e2:a5:8f:ea:88: 1b:32:39:26:b5:e8:9f:5f:81:a7:db:14:92:18:10: 51:39:a0:56:d2:d2:38:db:4e:a9:b3:e2:84:73:3a: 5b:65:c6:cb:b8:8b:c6:89:dd:11:89:4d:2e:7d:2d: c2:80:e6:c7:41:24:45:fb:f1:9c:56:9c:9d:f7:5b: 6a:40:35:e9:64:93:5e:d6:3f:e7:b8:ee:a3:55:f5: 03:7b:be:a2:47:e6:77:25:d6:e0:31:be:7f:6a:aa: 6a:a2:a5:1a:7e:2c:37:9d:0c:63:5a:8f:9e:18:fb: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:36:D4:6A:28:1A:9B:42:66:4F:29:F7:D6:6F:50:4F:1B:72:73:AE X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:fd:04:55:44:cb:24:ff:21:4c:ab:4a:89:bf:3e:1c:a8:2f: fe:08:a8:fb:6e:f9:27:50:45:0d:8f:cf:c0:b6:f5:32:1d:85: c9:35:ae:eb:76:3b:61:ac:62:16:96:2c:1a:15:3a:2e:56:c1: bf:b0:7b:b8:93:b4:82:37:84:d3:fc:75:de:cb:83:eb:2d:3e: 49:d3:86:44:b3:4b:f1:b9:83:27:31:cd:7c:cd:0d:e1:e0:be: 68:8d:2b:92:b8:31:b8:66:c5:31:6b:eb:e1:3d:95:8a:dc:ab: d5:6f:f1:c9:48:0c:2a:5b:1f:5a:de:4a:4e:c0:5a:b0:54:94: 20:89:7b:eb:ea:b6:ca:da:34:4d:f9:9d:a1:ad:cd:a5:9d:7e: 9f:02:ab:7b:24:34:a8:7d:6c:e1:20:dd:0a:69:03:35:b4:b5: b0:77:d2:66:93:3d:9e:5d:b8:98:d8:b6:be:79:f5:78:c7:30: 91:18:8f:8f:a9:1e:4c:b3:54:b5:d4:c4:0b:97:e2:02:6c:37: ff:c1:68:ad:ab:8c:99:f0:13:19:8b:3e:0e:e4:c6:a5:3d:92: fc:a4:60:b7:2c:8d:19:8f:8f:d2:3f:cc:4b:d0:f8:41:6c:6e: 39:73:3c:dd:48:3c:71:a7:c3:9f:6c:f0:6d:7b:4d:3c:8e:95: cc:a8:e0:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEQ4ODExMC8GA1UEBRMoRDA5OUVFQTlGNUNEQjZGRTRDNkVGOThFOEQ4Q0YzMzY0 QjlENjI2MTAeFw0yNDExMjMwNTE5NTNaFw0yNDExMzAwNTE5NTNaMBgxFjAUBgNV BAMTDTY3NDE2NWY5LTEyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ/yvxMgUtE+bBkSx+OnopXICr9BQMO/BoN4WZEI3ivFnri5lnwmAqq9UWGLAm Jzz0VElHlV2qfE82phvbImQAGbphj1eMvNe5eDOMhc+Ri3PTminmJ6rWcHX7awOr gJfz2V4hn7xZ/RHMysxqpteVLYvqB96A64nS2X7bhaBkU5YGbNJ3g0Qfx/0pyjvp oTjipY/qiBsyOSa16J9fgafbFJIYEFE5oFbS0jjbTqmz4oRzOltlxsu4i8aJ3RGJ TS59LcKA5sdBJEX78ZxWnJ33W2pANelkk17WP+e47qNV9QN7vqJH5ncl1uAxvn9q qmqipRp+LDedDGNaj54Y+7qHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYjbUaiga m0JmTyn31m9QTxtyc64wHwYDVR0jBBgwFoAU0JnuqfXNtv5MbvmOjYzzNkudYmEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwRDg4L0I5ODZEOTFBNDMx MDExRUY4ODQxMTc4MkM0RjlBRTAyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFlt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEpudXFmWE50djVNYnZtT2pZenpOa3VkWW1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw RDg4L0I5ODZEOTFBNDMxMDExRUY4ODQxMTc4MkM0RjlBRTAyLzBKbnVxZlhOdHY1 TWJ2bU9qWXp6Tmt1ZFltRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKv9BFVEyyT/IUyrSom/PhyoL/4IqPtu+SdQRQ2Pz8C29TIdhck1rut2 O2GsYhaWLBoVOi5Wwb+we7iTtII3hNP8dd7Lg+stPknThkSzS/G5gycxzXzNDeHg vmiNK5K4MbhmxTFr6+E9lYrcq9Vv8clIDCpbH1reSk7AWrBUlCCJe+vqtsraNE35 naGtzaWdfp8Cq3skNKh9bOEg3QppAzW0tbB30maTPZ5duJjYtr559XjHMJEYj4+p HkyzVLXUxAuX4gJsN//BaK2rjJnwExmLPg7kxqU9kvykYLcsjRmPj9I/zEvQ+EFs bjlzPN1IPHGnw59s8G17TTyOlcyo4BI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org