$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: w3GzsXdSlij6fhklZ2YOi3CH7yglF+gNBMMAjfEXYkA= Subject key identifier: 7B:80:8B:24:E5:58:07:7B:97:D2:6B:FF:EA:FC:B7:2E:D9:5E:F2:D7 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 0120 Signing time: Sat 23 Nov 2024 02:57:14 +0000 Manifest this update: Sat 23 Nov 2024 02:57:14 +0000 Manifest next update: Sat 30 Nov 2024 02:57:14 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: mDim90jTxPet71MYwVzmIDfiimtpTznZXTstNRMZ6kw=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: IuA38A6PtfZ45s5efy6Fg7R/ojs8GeETi8rs0c/o4+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Nov 23 02:57:14 2024 GMT Not After : Nov 30 02:57:14 2024 GMT Subject: CN=6741448a-720b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:21:17:d8:ae:93:86:91:5f:8c:58:75:01: 1e:75:04:81:5c:da:84:15:b6:92:3c:84:bd:3e:da: 76:0b:eb:40:93:32:e4:cf:77:0a:5c:35:fc:9c:c2: 4a:ea:a7:ae:c1:38:3d:d8:f8:e9:e3:b0:9d:82:c8: cf:e5:ab:8f:b9:1c:4d:44:53:7f:2b:6e:83:06:1d: 24:64:55:c2:c4:4d:0a:19:ef:30:1c:b4:a1:79:1d: 49:e4:3b:d6:28:02:7b:3b:7c:a5:fb:f9:2d:64:32: d4:10:b5:e3:5c:1e:58:94:8d:c3:02:a6:79:c6:c4: 64:92:cb:d4:d1:27:0f:1f:c1:68:df:84:a7:62:e6: af:dd:dc:f1:09:2e:df:09:d9:ac:44:c4:b4:87:ef: f3:1b:42:5b:b3:ff:5a:7a:f8:f4:94:97:ec:54:4f: 39:05:ff:6b:3c:b9:d3:67:48:a3:1e:39:60:ea:c0: 21:22:e2:d5:17:9b:74:6c:58:c9:06:ac:35:18:b3: 6f:83:b7:1a:85:3b:d9:2e:cb:e4:70:80:4c:ec:14: 4c:c0:18:55:a0:ac:13:77:04:79:6e:d9:ea:70:e5: 16:81:42:df:9c:28:2b:71:8e:d5:33:09:00:52:fd: 5d:19:a2:45:c3:99:7e:e1:1e:1c:aa:75:67:8e:fb: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:80:8B:24:E5:58:07:7B:97:D2:6B:FF:EA:FC:B7:2E:D9:5E:F2:D7 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bc:60:e2:f5:69:ec:1d:49:f4:8e:e6:2b:8b:19:de:9e:75: 0e:c0:75:da:97:a8:e5:cf:b5:a9:56:63:cb:4c:d8:94:12:95: 38:1e:b4:8c:72:f3:7f:34:8e:d2:c3:1e:5c:b7:f9:cb:b3:0c: b2:10:a2:96:63:be:5b:94:5f:9d:f7:50:17:f3:ce:ab:dc:f5: 29:eb:f2:24:17:0f:04:c5:15:65:13:01:7a:cd:df:1a:51:e3: 07:e3:fd:4e:2c:ff:14:92:1a:0d:2a:18:de:a7:e4:28:6b:84: 6a:13:e1:5b:9b:1a:f1:03:2c:c9:7b:9d:d7:29:f1:22:95:c6: 08:09:56:4d:4f:23:0e:20:56:49:97:ad:fd:6b:47:17:67:b1: 32:7e:cd:79:29:16:b9:68:11:a0:08:6f:0b:74:b5:a8:3e:3e: 74:d9:30:85:14:f3:ac:29:49:05:e8:ed:9c:87:e8:51:53:50: 17:9d:08:92:aa:88:1c:4b:0e:56:18:e8:f4:7d:2e:a0:9d:a5: 8b:44:79:59:04:63:c5:2d:d3:41:64:3a:2d:b5:ff:d1:20:2c: f5:4a:ab:82:5f:ea:48:c3:6b:38:9c:4c:d0:ae:54:1e:ae:22: 31:fc:a5:35:9f:7f:75:51:c0:0d:b3:8a:ab:fa:ae:e7:48:2e: f7:fa:4d:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjQxMTIzMDI1NzE0WhcNMjQxMTMwMDI1NzE0WjAYMRYwFAYD VQQDEw02NzQxNDQ4YS03MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP4hF9iuk4aRX4xYdQEedQSBXNqEFbaSPIS9Ptp2C+tAkzLkz3cKXDX8nMJK 6qeuwTg92Pjp47CdgsjP5auPuRxNRFN/K26DBh0kZFXCxE0KGe8wHLSheR1J5DvW KAJ7O3yl+/ktZDLUELXjXB5YlI3DAqZ5xsRkksvU0ScPH8Fo34SnYuav3dzxCS7f CdmsRMS0h+/zG0Jbs/9aevj0lJfsVE85Bf9rPLnTZ0ijHjlg6sAhIuLVF5t0bFjJ Bqw1GLNvg7cahTvZLsvkcIBM7BRMwBhVoKwTdwR5btnqcOUWgULfnCgrcY7VMwkA Uv1dGaJFw5l+4R4cqnVnjvuBawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuAiyTl WAd7l9Jr/+r8ty7ZXvLXMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzvGDi9WnsHUn0juYrixnennUOwHXal6jlz7WpVmPLTNiUEpU4HrSM cvN/NI7Swx5ct/nLswyyEKKWY75blF+d91AX886r3PUp6/IkFw8ExRVlEwF6zd8a UeMH4/1OLP8UkhoNKhjep+Qoa4RqE+FbmxrxAyzJe53XKfEilcYICVZNTyMOIFZJ l639a0cXZ7Eyfs15KRa5aBGgCG8LdLWoPj502TCFFPOsKUkF6O2ch+hRU1AXnQiS qogcSw5WGOj0fS6gnaWLRHlZBGPFLdNBZDottf/RICz1SquCX+pIw2s4nEzQrlQe riIx/KU1n391UcANs4qr+q7nSC73+k3u -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org