$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: ZfDxS3VfBZcLnm0EzEe6zj2Gv5QmCyQuox9xECLMo4g= Subject key identifier: 78:4C:1E:42:CC:86:E4:AC:46:77:0D:9C:C9:64:51:A4:86:09:69:44 Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 05B0 Signing time: Fri 22 Nov 2024 22:42:18 +0000 Manifest this update: Fri 22 Nov 2024 22:42:17 +0000 Manifest next update: Fri 29 Nov 2024 22:42:17 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: IJ0k+y2z0JEceXaTslxZth8a2N4TEQzBhuxmjpVzF0k=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: G+cvOyuBaI0mJceOtyargePM5Osl1OnTP7qop5mo/cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Validity Not Before: Nov 22 22:42:17 2024 GMT Not After : Nov 29 22:42:17 2024 GMT Subject: CN=674108ca-7ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:82:91:fd:c9:8f:be:ac:df:69:a7:db:63: a8:2b:a2:38:a7:51:72:37:b0:51:40:94:1c:5b:b7: 01:3b:66:f5:2b:2f:12:82:d6:ea:1b:6d:6c:99:6e: e5:40:9d:4e:5c:94:b2:71:31:6a:84:8c:57:49:d8: 55:77:20:2b:10:0d:a7:bf:45:76:6c:9d:29:df:fe: a1:78:59:4d:9b:05:55:d5:f1:7c:93:99:71:73:8b: a0:01:28:45:78:a3:1c:61:e7:2a:30:d4:e8:fc:21: dd:2c:e1:cc:11:28:77:24:1e:83:f7:21:34:12:87: ec:ea:7b:ff:cf:3c:d0:b9:f5:88:91:da:a0:d8:13: 5a:6b:54:d0:60:62:d9:66:48:90:f3:a0:5b:90:86: df:8a:65:a3:84:75:96:a3:6b:d2:10:08:50:e2:5e: 17:0b:c3:72:fe:31:d6:e5:be:95:9d:68:04:14:65: a3:a9:3e:1d:34:d8:fd:3f:7c:03:a5:e9:97:be:86: 78:33:90:2b:00:7d:b1:e1:41:24:01:2f:4f:7d:1f: a3:41:aa:fb:2e:73:b4:00:4c:3a:f9:2a:31:07:25: 10:f7:90:d1:2a:97:cc:02:0e:9e:27:cc:66:05:d4: e1:61:1a:31:6e:1c:3f:68:59:dc:f7:5d:6b:73:8e: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:1E:42:CC:86:E4:AC:46:77:0D:9C:C9:64:51:A4:86:09:69:44 X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bf:4a:e9:93:e6:2a:1e:6f:35:de:9d:10:51:f0:bd:66:63: 52:bf:93:0c:97:80:f5:18:07:4b:93:87:c0:b9:c2:d8:74:02: 5e:47:8b:fa:d9:ff:be:39:8a:c2:c5:f5:cb:8e:95:6e:c6:36: fd:77:61:ef:aa:d7:90:6c:cf:21:c3:77:fe:71:96:5f:2c:72: 6a:22:56:dd:47:d0:93:1b:66:62:08:c5:f8:9d:ab:fa:78:d1: 16:9d:84:86:eb:4b:25:c2:2a:38:14:2c:93:2d:2e:bd:e4:de: 77:0b:8d:01:7b:79:0a:1c:41:b8:67:be:4a:72:55:44:3c:32: 46:b8:ab:4c:e7:41:e5:87:73:db:e2:f1:ed:a3:f5:4f:b7:c2: 2f:1b:95:50:2b:92:90:12:c3:2d:a0:0f:3b:28:31:bf:9d:e4: 4f:9c:da:26:12:5f:9c:a3:1d:4c:f4:5f:77:ee:e6:92:3e:7c: cb:e4:2f:2c:55:16:4a:c4:d8:c3:ea:b5:89:8c:43:24:65:5b: 0f:6b:3b:50:e5:57:88:22:6c:de:7e:fd:24:5c:ac:a1:90:8e: e7:da:1a:c6:58:a1:d0:6c:ae:9b:cf:8f:1c:0d:10:8c:59:b9: 39:12:22:57:70:f3:61:95:01:c1:12:28:dd:7f:83:f8:07:aa: d5:80:11:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjQxMTIyMjI0MjE3WhcNMjQxMTI5MjI0MjE3WjAYMRYwFAYD VQQDEw02NzQxMDhjYS03ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusWCkf3Jj76s32mn22OoK6I4p1FyN7BRQJQcW7cBO2b1Ky8SgtbqG21smW7l QJ1OXJSycTFqhIxXSdhVdyArEA2nv0V2bJ0p3/6heFlNmwVV1fF8k5lxc4ugAShF eKMcYecqMNTo/CHdLOHMESh3JB6D9yE0Eofs6nv/zzzQufWIkdqg2BNaa1TQYGLZ ZkiQ86BbkIbfimWjhHWWo2vSEAhQ4l4XC8Ny/jHW5b6VnWgEFGWjqT4dNNj9P3wD pemXvoZ4M5ArAH2x4UEkAS9PfR+jQar7LnO0AEw6+SoxByUQ95DRKpfMAg6eJ8xm BdThYRoxbhw/aFnc911rc442FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhMHkLM huSsRncNnMlkUaSGCWlEMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2v0rpk+YqHm813p0QUfC9ZmNSv5MMl4D1GAdLk4fAucLYdAJeR4v6 2f++OYrCxfXLjpVuxjb9d2HvqteQbM8hw3f+cZZfLHJqIlbdR9CTG2ZiCMX4nav6 eNEWnYSG60slwio4FCyTLS695N53C40Be3kKHEG4Z75KclVEPDJGuKtM50Hlh3Pb 4vHto/VPt8IvG5VQK5KQEsMtoA87KDG/neRPnNomEl+cox1M9F937uaSPnzL5C8s VRZKxNjD6rWJjEMkZVsPaztQ5VeIImzefv0kXKyhkI7n2hrGWKHQbK6bz48cDRCM Wbk5EiJXcPNhlQHBEijdf4P4B6rVgBEU -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org