$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: ziSHVgJYhuV41OqVEbnCiCNQwEUleW+Uwjst+0YI18o= Subject key identifier: DA:53:41:FA:28:11:2B:0C:B8:E0:73:E8:7E:AD:4C:A2:FD:81:75:13 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 09CD Signing time: Fri 22 Nov 2024 19:43:48 +0000 Manifest this update: Fri 22 Nov 2024 19:43:47 +0000 Manifest next update: Fri 29 Nov 2024 19:43:47 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: 5S/LkhBn1KA8M7HaSoi8KfWTl1C8WxJ9L/CoBiOyyWQ=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: EkYTFmKjanasajMVGUVTZ322q1F+k60qJOC2SSq8q9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Nov 22 19:43:47 2024 GMT Not After : Nov 29 19:43:47 2024 GMT Subject: CN=6740def3-efeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:41:b4:b3:04:e2:e0:24:7b:a9:64:ec:36:4f: d7:77:4f:37:5c:9a:7c:3f:ff:72:3a:d5:68:eb:14: 63:62:1e:ef:a1:89:c5:34:49:7c:e7:fb:58:35:e2: d6:82:fb:42:f3:c4:37:38:6b:70:9b:a5:c9:bc:45: 26:54:5b:33:b0:74:fc:a0:45:85:58:e3:0a:a2:54: 22:22:a7:8a:ad:b3:87:70:dc:d3:77:d4:fb:cd:47: 5a:4a:08:6d:ef:41:63:39:e1:7e:51:da:b2:bf:fb: f2:d3:52:02:17:60:78:bb:81:28:1e:40:70:40:30: e1:78:a6:f6:50:56:77:db:19:8b:9e:88:08:ce:c6: ec:68:ad:af:23:bf:a9:7f:1d:e2:4b:4f:fa:4b:bf: e4:a5:8e:7f:2f:6f:91:7c:96:8e:a5:cb:7f:38:e9: 5d:7d:67:ca:0f:1b:4f:5c:bb:52:d3:24:b8:67:0b: e4:2e:16:05:c8:33:50:1d:a2:7e:1b:61:6d:17:1a: 7d:de:69:44:32:01:70:c9:26:cf:78:34:5a:42:ac: a5:22:0d:c2:8a:98:8d:d1:36:d4:2c:d6:9e:f2:d2: 4b:29:5d:f2:61:cf:44:8b:ec:2a:cf:73:8b:86:64: 37:6d:5e:c9:14:58:9f:44:49:67:f3:6f:e3:f2:7c: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:53:41:FA:28:11:2B:0C:B8:E0:73:E8:7E:AD:4C:A2:FD:81:75:13 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5a:5e:e6:78:71:4f:01:ce:b8:75:5c:b2:01:cb:be:c3:d2: d5:5b:b9:0d:91:1d:72:23:d1:66:2b:12:fd:9b:f4:69:b5:91: a7:e2:56:bd:7e:88:b9:41:19:af:66:b5:68:2f:3e:d8:67:4b: e8:8e:68:48:9b:d7:55:30:51:df:ef:87:3e:5b:f8:bb:92:f6: 52:ef:41:9f:50:e2:15:69:cf:c9:80:b4:0a:bd:87:99:26:16: a9:52:62:2d:1e:e4:93:36:63:b8:4d:26:35:0a:57:ff:a2:c7: d8:09:7a:9e:86:9d:2b:a4:d1:11:66:74:25:b9:ea:26:b6:6b: bc:14:80:3d:4b:6b:23:05:cc:1f:df:6f:59:54:1a:4e:b3:b4: e4:5c:49:e4:ce:0f:2a:3d:67:3a:1d:66:3b:54:30:9a:d8:1f: 3b:24:be:05:fe:24:36:d9:48:3f:75:c3:56:ef:67:c2:72:1e: 8a:c6:32:5b:66:c6:34:fa:9b:eb:33:fc:93:9a:d0:fd:3f:90: f5:5f:b0:cb:5b:9b:26:10:19:d0:d1:52:31:18:27:84:88:df: 28:15:94:b5:b7:f2:ff:09:bd:08:d0:fa:4b:5f:30:c6:0e:98: 46:f1:0e:ec:22:b6:53:2c:35:6f:75:f8:45:cf:d3:bc:11:08: 05:56:c5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjQxMTIyMTk0MzQ3WhcNMjQxMTI5MTk0MzQ3WjAYMRYwFAYD VQQDEw02NzQwZGVmMy1lZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kG0swTi4CR7qWTsNk/Xd083XJp8P/9yOtVo6xRjYh7voYnFNEl85/tYNeLW gvtC88Q3OGtwm6XJvEUmVFszsHT8oEWFWOMKolQiIqeKrbOHcNzTd9T7zUdaSght 70FjOeF+Udqyv/vy01ICF2B4u4EoHkBwQDDheKb2UFZ32xmLnogIzsbsaK2vI7+p fx3iS0/6S7/kpY5/L2+RfJaOpct/OOldfWfKDxtPXLtS0yS4ZwvkLhYFyDNQHaJ+ G2FtFxp93mlEMgFwySbPeDRaQqylIg3CipiN0TbULNae8tJLKV3yYc9Ei+wqz3OL hmQ3bV7JFFifREln82/j8nySLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpTQfoo ESsMuOBz6H6tTKL9gXUTMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWl7meHFPAc64dVyyAcu+w9LVW7kNkR1yI9FmKxL9m/RptZGn4la9 foi5QRmvZrVoLz7YZ0vojmhIm9dVMFHf74c+W/i7kvZS70GfUOIVac/JgLQKvYeZ JhapUmItHuSTNmO4TSY1Clf/osfYCXqehp0rpNERZnQlueomtmu8FIA9S2sjBcwf 329ZVBpOs7TkXEnkzg8qPWc6HWY7VDCa2B87JL4F/iQ22Ug/dcNW72fCch6KxjJb ZsY0+pvrM/yTmtD9P5D1X7DLW5smEBnQ0VIxGCeEiN8oFZS1t/L/Cb0I0PpLXzDG DphG8Q7sIrZTLDVvdfhFz9O8EQgFVsXi -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org