$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: GTXoOKDwo5usu2p/UQVvCv6NEGEkm6YXfM/KzfhnuFg= Subject key identifier: 86:9E:2F:40:B7:63:4E:E1:51:08:34:23:41:D6:E5:1B:1E:96:11:3B Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 0191 Signing time: Sat 23 Nov 2024 01:52:53 +0000 Manifest this update: Sat 23 Nov 2024 01:52:52 +0000 Manifest next update: Sat 30 Nov 2024 01:52:52 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: fj0mHAIq5X+KzXZ41GSEoBkPhoE3SWo4fqClhifgKNw=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: HSOz9KJtzn5XtZJbkSZurU8JjbVu9jhgYH7lEouZYZw=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: Qcs39Vrzh4Mv2HdysBKYGDoDMMoidhqC9JSfa2ecdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Nov 23 01:52:52 2024 GMT Not After : Nov 30 01:52:52 2024 GMT Subject: CN=67413575-db24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:14:10:f8:15:bf:fd:45:ab:e2:ed:3c:9a: 9c:db:e0:d4:8b:61:36:44:70:0a:40:4b:a9:6d:1f: 49:9e:0d:8e:8f:f6:99:bf:5a:6a:55:5b:73:e4:ba: 07:f8:08:1f:a7:eb:2c:5b:5e:8a:29:bd:e3:fc:d9: 16:cf:df:85:00:a1:f7:d1:28:cd:a2:25:4e:e5:1c: 26:42:93:97:73:78:e9:b6:f1:5c:e3:10:af:70:56: 5a:f5:bc:83:9b:f6:db:03:98:3f:3a:6c:fd:e7:02: 61:00:9f:67:eb:7a:eb:22:2a:d5:0f:e2:10:20:f0: 12:57:55:09:90:c5:61:31:c7:28:74:d1:4c:79:90: 88:bb:61:82:2a:69:12:04:7a:4f:b0:d5:b0:c4:c9: ea:f4:e3:b1:03:9f:ae:0c:31:77:5b:bb:c5:fe:16: e1:c2:24:e6:49:8d:85:3d:f3:0a:68:bc:d4:c2:da: d9:fb:66:ae:42:42:bd:a6:73:af:2d:3e:cf:0f:71: 08:8b:7b:a9:d0:25:8b:8b:6a:14:81:f7:57:b1:45: 65:72:2b:6b:b0:1a:28:3f:41:e8:1b:3c:9a:1b:2a: ef:60:ad:eb:3b:97:07:99:ef:e2:8b:70:26:e0:2c: 9e:db:b3:82:33:8e:ed:e0:cf:03:90:d2:c9:fe:58: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9E:2F:40:B7:63:4E:E1:51:08:34:23:41:D6:E5:1B:1E:96:11:3B X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:92:7e:86:e7:47:dc:8a:15:50:eb:84:9a:9d:96:d7:4c:43: d8:a8:18:a2:b7:b9:b3:e2:3e:86:0c:64:2d:b9:2e:06:44:05: 23:ce:6b:3e:1b:9d:5c:58:94:b0:60:0e:6d:cb:6d:28:60:19: ef:23:8f:40:46:24:96:0e:db:1e:56:6b:a7:84:c2:0e:4c:a5: 06:db:48:93:54:44:de:1d:e0:01:3a:0d:ab:c4:5e:fe:55:19: 14:dd:45:ff:9b:d7:dd:df:68:1e:47:9a:5a:e4:f5:71:a4:dd: e9:04:cf:82:9d:1f:d2:1f:7e:16:58:e8:06:1b:6c:f4:09:a4: e9:c1:ea:4e:fd:d3:da:f6:08:d4:e8:08:e2:58:69:2f:25:a5: 63:ae:40:15:cf:3e:45:6b:da:a8:c3:61:55:44:65:a9:8d:03: 95:23:f5:a4:e5:e1:c3:b7:c8:91:35:76:a1:93:ef:36:fb:cd: 1b:24:5e:aa:e5:ad:6c:b2:a4:fc:24:40:a5:ae:e1:04:c3:c4: 35:97:e7:91:fe:2d:36:9c:38:b7:cc:11:b6:d1:2e:ec:f5:cd: 87:da:88:03:df:f9:dc:8d:28:31:f6:e0:c7:dd:5f:61:e3:af: 4f:33:41:e4:05:e4:39:22:bb:8b:48:1c:64:5b:63:c7:2c:0b: 74:39:6f:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjQxMTIzMDE1MjUyWhcNMjQxMTMwMDE1MjUyWjAYMRYwFAYD VQQDEw02NzQxMzU3NS1kYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAproUEPgVv/1Fq+LtPJqc2+DUi2E2RHAKQEupbR9Jng2Oj/aZv1pqVVtz5LoH +Agfp+ssW16KKb3j/NkWz9+FAKH30SjNoiVO5RwmQpOXc3jptvFc4xCvcFZa9byD m/bbA5g/Omz95wJhAJ9n63rrIirVD+IQIPASV1UJkMVhMccodNFMeZCIu2GCKmkS BHpPsNWwxMnq9OOxA5+uDDF3W7vF/hbhwiTmSY2FPfMKaLzUwtrZ+2auQkK9pnOv LT7PD3EIi3up0CWLi2oUgfdXsUVlcitrsBooP0HoGzyaGyrvYK3rO5cHme/ii3Am 4Cye27OCM47t4M8DkNLJ/ljFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaeL0C3 Y07hUQg0I0HW5RselhE7MB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXkn6G50fcihVQ64SanZbXTEPYqBiit7mz4j6GDGQtuS4GRAUjzms+ G51cWJSwYA5ty20oYBnvI49ARiSWDtseVmunhMIOTKUG20iTVETeHeABOg2rxF7+ VRkU3UX/m9fd32geR5pa5PVxpN3pBM+CnR/SH34WWOgGG2z0CaTpwepO/dPa9gjU 6AjiWGkvJaVjrkAVzz5Fa9qow2FVRGWpjQOVI/Wk5eHDt8iRNXahk+82+80bJF6q 5a1ssqT8JEClruEEw8Q1l+eR/i02nDi3zBG20S7s9c2H2ogD3/ncjSgx9uDH3V9h 469PM0HkBeQ5IruLSBxkW2PHLAt0OW9Z -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org