$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft File: JzQEfW6XjVCbqKUabxBkh49Hddo.mft (raw, json) Hash identifier: jPkjCZTE03+jVFpWXcesbO9KCdCwZDWy8w4qxLP2g1c= Subject key identifier: 9B:BE:0B:2B:A9:9F:A7:E5:92:1E:42:52:40:89:60:6F:5A:7C:C4:DA Authority key identifier: 27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA Certificate issuer: /CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA Certificate serial: 1CD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft Manifest number: 1CC2 Signing time: Fri 22 Nov 2024 16:10:16 +0000 Manifest this update: Fri 22 Nov 2024 16:10:15 +0000 Manifest next update: Fri 29 Nov 2024 16:10:15 +0000 Files and hashes: 1: JzQEfW6XjVCbqKUabxBkh49Hddo.crl (hash: 3lPw5iOBnv7NnjTUxFOu5tdI4+/aXlaF61nk288RAHo=) 2: AC34FBD61C0111EC8ADBF80CC4F9AE02.roa (hash: 5WitENJnrkIaDKSZdGfav4jBMV1MXsoOLjamdvAz9SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7376 (0x1cd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23C5/serialNumber=2734047D6E978D509BA8A51A6F1064878F4775DA Validity Not Before: Nov 22 16:10:15 2024 GMT Not After : Nov 29 16:10:15 2024 GMT Subject: CN=6740ace7-e750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:1d:5e:c4:29:c4:ed:5c:f1:4f:41:d3:1e: 81:61:65:6b:37:cd:1d:40:c1:c5:b0:e7:61:ae:00: 7f:23:c4:b3:fd:10:87:1d:53:9c:b3:de:9d:07:0a: d9:ff:81:67:4e:47:84:94:fd:06:e4:47:21:d5:58: 75:6f:d1:11:00:33:60:c0:03:d4:7d:79:b2:5c:ff: e9:22:56:71:03:0c:8b:c8:a8:44:a9:71:f8:b4:93: 19:78:3a:ce:6d:32:f9:4c:59:d4:9a:8e:26:71:c1: 99:55:4a:8d:64:77:c8:4a:8b:0a:f3:42:82:7f:a0: f0:05:43:c1:d3:22:42:2e:11:69:e4:38:d4:22:0c: 13:de:3d:8c:77:26:db:d8:b1:97:ab:8b:4f:53:db: 19:5a:9d:5b:b2:85:40:df:de:f1:a0:7a:76:96:3c: 30:eb:dd:bb:ca:2b:7e:df:35:fb:16:18:3a:b7:e3: 33:be:85:69:ca:0d:21:59:2a:d5:5f:3a:ed:74:5d: 9e:24:03:d8:e2:32:04:36:82:27:8a:c6:25:24:f0: 22:c8:85:14:8b:52:4f:35:24:e2:bc:8e:ca:dc:fb: 21:0f:77:f2:5b:19:db:67:64:0e:e8:a8:35:8c:7f: 13:df:57:6a:2f:f0:39:8e:c9:c0:f8:eb:aa:ac:2f: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:0B:2B:A9:9F:A7:E5:92:1E:42:52:40:89:60:6F:5A:7C:C4:DA X509v3 Authority Key Identifier: keyid:27:34:04:7D:6E:97:8D:50:9B:A8:A5:1A:6F:10:64:87:8F:47:75:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzQEfW6XjVCbqKUabxBkh49Hddo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23C5/831A20FEB5C311E6B5143A2AC4F9AE02/JzQEfW6XjVCbqKUabxBkh49Hddo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d7:2d:95:eb:76:fb:b2:76:bb:01:20:fe:5b:10:be:95:15: be:f3:53:bf:28:a9:dc:dd:91:34:42:03:1d:42:71:e6:ab:89: d4:c2:78:0e:a5:25:21:c4:37:01:33:49:1a:6f:26:a9:34:d9: 17:9d:12:dd:ae:3d:84:d9:b5:a3:5b:ee:b9:87:f5:1d:3c:98: 88:d7:32:fd:cf:3f:2e:2a:21:82:b4:94:a1:b0:3c:ed:9a:70: 10:38:bd:f6:07:b9:bf:3f:fc:94:18:ed:3c:a4:89:b4:24:14: 37:a8:33:e1:e1:b0:3c:97:9f:ce:2d:bb:06:30:1b:29:a7:47: 31:ca:51:c4:e5:9f:77:a3:cb:d8:4f:d7:34:88:4f:43:99:2c: e2:f3:30:b6:af:34:ca:ed:49:ad:bc:04:32:cd:21:b4:fb:09: ce:e5:30:34:c8:a3:bf:92:85:74:9b:58:e5:a6:9a:fb:db:d1: 4a:76:f2:04:1c:c4:36:5e:19:2d:7c:5c:c6:ce:8a:53:b7:25: 6d:7f:5b:33:aa:fa:e6:9c:38:b9:8d:d1:50:86:99:83:b7:55: 25:19:45:cb:7a:c3:8d:53:60:73:61:9b:62:29:51:83:04:f1: 2c:90:43:d0:b8:c6:1f:e4:23:83:9a:07:38:57:8f:a8:49:4c: 68:f4:f9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzQzUxMTAvBgNVBAUTKDI3MzQwNDdENkU5NzhENTA5QkE4QTUxQTZGMTA2NDg3 OEY0Nzc1REEwHhcNMjQxMTIyMTYxMDE1WhcNMjQxMTI5MTYxMDE1WjAYMRYwFAYD VQQDEw02NzQwYWNlNy1lNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteQdXsQpxO1c8U9B0x6BYWVrN80dQMHFsOdhrgB/I8Sz/RCHHVOcs96dBwrZ /4FnTkeElP0G5Ech1Vh1b9ERADNgwAPUfXmyXP/pIlZxAwyLyKhEqXH4tJMZeDrO bTL5TFnUmo4mccGZVUqNZHfISosK80KCf6DwBUPB0yJCLhFp5DjUIgwT3j2Mdybb 2LGXq4tPU9sZWp1bsoVA397xoHp2ljww6927yit+3zX7Fhg6t+MzvoVpyg0hWSrV XzrtdF2eJAPY4jIENoInisYlJPAiyIUUi1JPNSTivI7K3PshD3fyWxnbZ2QO6Kg1 jH8T31dqL/A5jsnA+OuqrC9ScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu+Cyup n6flkh5CUkCJYG9afMTaMB8GA1UdIwQYMBaAFCc0BH1ul41Qm6ilGm8QZIePR3Xa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNDNS84MzFBMjBGRUI1 QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpWQ2JxS1VhYnhCa2g0OUhk ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6UUVmVzZYalZDYnFLVWFieEJraDQ5SGRkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNDNS84MzFBMjBGRUI1QzMxMUU2QjUxNDNBMkFDNEY5QUUwMi9KelFFZlc2WGpW Q2JxS1VhYnhCa2g0OUhkZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1y2V63b7sna7ASD+WxC+lRW+81O/KKnc3ZE0QgMdQnHmq4nUwngO pSUhxDcBM0kabyapNNkXnRLdrj2E2bWjW+65h/UdPJiI1zL9zz8uKiGCtJShsDzt mnAQOL32B7m/P/yUGO08pIm0JBQ3qDPh4bA8l5/OLbsGMBspp0cxylHE5Z93o8vY T9c0iE9DmSzi8zC2rzTK7UmtvAQyzSG0+wnO5TA0yKO/koV0m1jlppr729FKdvIE HMQ2XhktfFzGzopTtyVtf1szqvrmnDi5jdFQhpmDt1UlGUXLesONU2BzYZtiKVGD BPEskEPQuMYf5CODmgc4V4+oSUxo9Plw -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org