$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: LHQPdsTJAjnhGn8nEuzZzRXtuoAAyZ2HD+Wfsyb/sho= Subject key identifier: 38:81:F3:16:E9:B9:E2:52:C0:BA:2D:83:0F:2A:49:E9:46:78:7A:B3 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 06FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 06F5 Signing time: Fri 22 Nov 2024 21:29:40 +0000 Manifest this update: Fri 22 Nov 2024 21:29:39 +0000 Manifest next update: Fri 29 Nov 2024 21:29:39 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: Txk9nfgLnkUnv7/orY3mdEN9Tj4m+EsNxL+r7bJnaX0=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: Nov 22 21:29:39 2024 GMT Not After : Nov 29 21:29:39 2024 GMT Subject: CN=6740f7c3-a016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:1a:d9:45:89:43:d8:4e:f6:79:67:11:25: 02:8e:c6:6b:c1:12:ca:3b:1c:37:15:9d:53:12:e2: 17:7d:b7:29:fa:9e:5d:7c:86:f7:f4:b6:a8:2d:22: 3a:e4:79:55:5a:96:36:b1:4f:de:18:c6:60:0b:78: bc:75:83:5d:e5:e4:01:8c:19:c2:49:09:c6:02:92: d7:ee:be:da:d0:fe:fa:42:07:d7:c6:a1:9e:d7:3b: 75:44:15:02:63:dd:74:ab:c1:74:4f:3b:3f:26:06: 16:ae:71:f9:b5:e7:7a:f6:fe:4a:97:f3:89:1d:a9: bf:0e:af:11:d0:43:31:e8:2f:04:ae:ad:86:e8:62: 8b:37:6c:69:35:26:e8:82:86:e5:a1:b7:a0:31:9f: 24:72:4e:13:e0:3b:fe:d9:68:06:92:26:88:63:e7: c5:07:77:24:ba:e6:2f:86:77:f3:64:cb:28:0b:00: 16:dd:f7:58:14:76:5d:a8:91:4b:36:6b:c7:90:3c: 61:d1:7e:57:b1:fa:c3:86:34:30:69:30:9a:5f:e4: be:e0:02:a7:2a:eb:d5:b4:2a:5d:8b:7a:75:57:97: c1:d4:13:3f:db:1f:01:52:ee:f7:f0:89:71:0a:6d: a2:82:07:a0:d7:0f:bd:a3:4c:87:1a:b5:f7:dd:3b: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:F3:16:E9:B9:E2:52:C0:BA:2D:83:0F:2A:49:E9:46:78:7A:B3 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7e:45:fe:ff:29:3c:bd:76:9a:25:76:87:bd:cb:4f:08:c6: 0e:f4:6b:d5:ab:4f:9b:ba:4a:5c:0e:98:9b:26:fe:77:d0:2b: 69:07:56:3d:4d:27:e5:ef:25:24:32:48:ff:12:34:c1:a5:52: ae:68:c2:da:8d:93:b7:cd:74:04:ef:96:86:74:64:a5:a9:19: 47:23:a2:2d:5b:5d:fb:93:bc:47:de:8f:59:00:49:d2:cf:42: 43:5b:f6:17:da:a9:42:b1:8f:2e:a9:46:94:38:ab:06:63:ec: 7e:9d:1d:c5:60:35:a4:ce:7e:e0:f6:22:60:25:9a:ef:21:bf: dc:2d:84:ab:a6:ef:51:d2:f3:f8:b2:bd:ee:72:a1:85:94:92: dc:6e:1a:5a:84:b8:6f:1e:74:46:8e:c7:14:fa:a8:fc:b4:28: 3a:45:07:af:5a:22:e3:51:63:5c:08:11:ff:3a:82:ab:8e:56: dc:90:b0:c8:c3:3b:67:e9:15:d8:7f:2a:70:bb:2b:f0:ed:4d: 43:c4:c3:ed:3f:fd:56:9b:07:32:22:e8:70:cd:d3:b1:0d:2f: 32:b1:3a:80:5b:e9:82:2b:65:ce:83:e9:6a:59:49:8d:74:ba: f5:0b:1d:58:00:16:e8:25:31:06:0b:50:76:86:4f:2e:fd:4a: b9:70:b3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjQxMTIyMjEyOTM5WhcNMjQxMTI5MjEyOTM5WjAYMRYwFAYD VQQDEw02NzQwZjdjMy1hMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Noa2UWJQ9hO9nlnESUCjsZrwRLKOxw3FZ1TEuIXfbcp+p5dfIb39LaoLSI6 5HlVWpY2sU/eGMZgC3i8dYNd5eQBjBnCSQnGApLX7r7a0P76QgfXxqGe1zt1RBUC Y910q8F0Tzs/JgYWrnH5ted69v5Kl/OJHam/Dq8R0EMx6C8Erq2G6GKLN2xpNSbo goblobegMZ8kck4T4Dv+2WgGkiaIY+fFB3ckuuYvhnfzZMsoCwAW3fdYFHZdqJFL NmvHkDxh0X5XsfrDhjQwaTCaX+S+4AKnKuvVtCpdi3p1V5fB1BM/2x8BUu738Ilx Cm2iggeg1w+9o0yHGrX33TtrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiB8xbp ueJSwLotgw8qSelGeHqzMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fkX+/yk8vXaaJXaHvctPCMYO9GvVq0+bukpcDpibJv530CtpB1Y9 TSfl7yUkMkj/EjTBpVKuaMLajZO3zXQE75aGdGSlqRlHI6ItW137k7xH3o9ZAEnS z0JDW/YX2qlCsY8uqUaUOKsGY+x+nR3FYDWkzn7g9iJgJZrvIb/cLYSrpu9R0vP4 sr3ucqGFlJLcbhpahLhvHnRGjscU+qj8tCg6RQevWiLjUWNcCBH/OoKrjlbckLDI wztn6RXYfypwuyvw7U1DxMPtP/1WmwcyIuhwzdOxDS8ysTqAW+mCK2XOg+lqWUmN dLr1Cx1YABboJTEGC1B2hk8u/Uq5cLON -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org