$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: 1HJXZOiPDWZd0rtZjXmQiCEhv5J9RzH1Jtl7wukjtzg= Subject key identifier: 81:54:B2:38:EF:0A:46:F3:C2:5A:8E:70:C3:2A:03:BF:65:0E:97:33 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: E0 Signing time: Sat 23 Nov 2024 03:34:07 +0000 Manifest this update: Sat 23 Nov 2024 03:34:07 +0000 Manifest next update: Sat 30 Nov 2024 03:34:07 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: QZqmBweCqvqRzZSoS2VuOT44ie0ICcp98EWu3qR6p6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Nov 23 03:34:07 2024 GMT Not After : Nov 30 03:34:07 2024 GMT Subject: CN=67414d2f-2337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:f2:62:37:29:f6:94:68:23:47:b6:69:e5: e4:2f:57:1f:02:7e:f9:71:ac:b7:52:f6:0d:53:83: f3:37:ee:53:c0:80:7b:48:17:58:92:20:2c:a9:a7: c7:1b:23:5d:06:92:42:63:4a:39:83:6a:ad:7e:96: 7a:45:df:6e:8b:58:ad:0e:94:25:85:f2:87:f1:c0: 39:5b:2a:b3:7f:a8:6c:f9:cd:77:c0:b6:5e:2b:11: 46:43:ba:3f:93:b7:fc:8a:32:a7:b5:d6:c2:47:3b: 3d:74:97:44:cf:3e:68:5c:d1:d1:63:b5:2b:ec:18: 9d:71:dc:83:85:03:96:47:95:46:43:82:c1:09:ae: a2:2a:87:f7:be:f6:7b:b9:66:f2:c7:64:79:5c:31: 20:c9:88:eb:08:5e:78:56:0f:87:1f:80:af:ad:f3: ad:74:c8:b6:ec:32:c2:0e:d4:81:5b:e9:15:02:86: 36:9b:83:4f:dd:f0:bc:dd:cd:25:79:fd:62:9e:d5: b1:a6:46:54:99:98:bd:9b:51:07:f0:6d:e3:d7:96: 5d:46:38:53:5e:6a:f0:1d:7c:b3:99:9d:6b:20:8c: d4:a8:6d:27:8d:0d:7b:29:90:39:c9:95:1b:7b:a5: 13:b5:2c:62:04:1f:da:ca:60:19:49:b5:ca:9e:d7: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:54:B2:38:EF:0A:46:F3:C2:5A:8E:70:C3:2A:03:BF:65:0E:97:33 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f5:ca:38:18:bd:59:10:58:9f:dc:b9:ab:33:17:49:ae:a5: c8:b2:87:00:db:ad:07:fb:b6:ed:cd:52:c8:9f:0b:62:b4:62: f9:7c:3d:89:a9:a2:30:41:fe:a2:63:2a:7b:5f:ed:b3:a1:7b: f2:a8:c6:c1:5d:49:bb:3c:cd:1a:99:eb:70:d5:81:17:ee:9c: f0:bb:32:02:6f:cc:bb:e3:70:76:bb:8b:42:56:9e:29:29:4d: 0c:25:96:83:fa:fd:44:04:b2:ac:c0:54:fe:11:00:3e:6d:46: 30:8d:83:d1:c9:df:f1:92:9a:e9:dd:c5:e1:b3:78:c3:86:03: fa:6d:04:3e:56:57:7e:fd:39:6d:5e:bd:fb:71:19:7f:6e:6c: 51:5d:dc:35:b5:19:3d:0d:4e:5b:cd:94:a6:f2:3d:6d:1f:db: 9b:bb:0e:f8:22:bf:5d:ae:5c:1b:fe:40:71:4f:8a:ff:70:3a: 7c:43:7d:e7:f2:57:38:9b:e0:19:90:52:21:c1:9f:85:10:ff: a1:18:ed:48:6c:3c:85:4a:fc:43:c1:73:c8:11:2f:d9:06:25: bb:49:81:cd:75:c6:23:40:32:0e:26:09:4c:98:c7:9e:96:55: 70:6c:d2:f3:8e:43:8b:8b:01:bc:ff:38:b2:54:02:a7:69:6d: 84:86:0d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjQxMTIzMDMzNDA3WhcNMjQxMTMwMDMzNDA3WjAYMRYwFAYD VQQDEw02NzQxNGQyZi0yMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSryYjcp9pRoI0e2aeXkL1cfAn75cay3UvYNU4PzN+5TwIB7SBdYkiAsqafH GyNdBpJCY0o5g2qtfpZ6Rd9ui1itDpQlhfKH8cA5Wyqzf6hs+c13wLZeKxFGQ7o/ k7f8ijKntdbCRzs9dJdEzz5oXNHRY7Ur7BidcdyDhQOWR5VGQ4LBCa6iKof3vvZ7 uWbyx2R5XDEgyYjrCF54Vg+HH4CvrfOtdMi27DLCDtSBW+kVAoY2m4NP3fC83c0l ef1intWxpkZUmZi9m1EH8G3j15ZdRjhTXmrwHXyzmZ1rIIzUqG0njQ17KZA5yZUb e6UTtSxiBB/aymAZSbXKntd0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFUsjjv CkbzwlqOcMMqA79lDpczMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA9co4GL1ZEFif3LmrMxdJrqXIsocA260H+7btzVLInwtitGL5fD2J qaIwQf6iYyp7X+2zoXvyqMbBXUm7PM0ametw1YEX7pzwuzICb8y743B2u4tCVp4p KU0MJZaD+v1EBLKswFT+EQA+bUYwjYPRyd/xkprp3cXhs3jDhgP6bQQ+Vld+/Tlt Xr37cRl/bmxRXdw1tRk9DU5bzZSm8j1tH9ubuw74Ir9drlwb/kBxT4r/cDp8Q33n 8lc4m+AZkFIhwZ+FEP+hGO1IbDyFSvxDwXPIES/ZBiW7SYHNdcYjQDIOJglMmMee llVwbNLzjkOLiwG8/ziyVAKnaW2Ehg1m -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org