$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: vNFskCiPWMfB+/m/GDE81m+fmwHbA9mZ5z9W1MD8vYU= Subject key identifier: 5C:10:C9:43:B7:BF:AB:6E:DC:40:CD:BE:27:82:B1:7D:11:2B:50:3B Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1E0B Signing time: Sun 24 Nov 2024 16:19:42 +0000 Manifest this update: Sun 24 Nov 2024 16:19:42 +0000 Manifest next update: Sun 01 Dec 2024 16:19:42 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: pXzwlcM0ISZsTeGI0apf4jwOuId2YhJpCIW/JutseFo=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: SPdQWEUHMC7nCEbP5s9qYvLHBtKrci4CcO2zKn4HOiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Nov 24 16:19:42 2024 GMT Not After : Dec 1 16:19:42 2024 GMT Subject: CN=6743521e-8fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:ed:86:ad:7b:6d:47:b0:08:2b:f9:03:a5: 16:56:4d:2d:48:0f:8f:af:67:95:48:a1:d4:71:dc: 1f:57:2d:38:d2:17:a3:5b:21:62:db:ba:90:a6:eb: 51:b5:dd:e5:25:2f:ac:7f:12:a9:b7:be:7e:6c:5f: 97:dc:41:80:bd:33:a2:c8:64:92:2f:ab:9b:0c:81: a5:63:88:99:70:4b:da:c9:b1:3d:70:cb:3c:57:7f: fc:93:81:5f:d5:47:2a:5b:da:2a:cc:84:6d:55:41: bd:b6:95:74:a7:91:8e:c5:fe:76:42:5d:98:ea:03: d5:7a:4f:47:7c:d1:73:95:ed:ee:12:ed:cd:13:93: 75:bf:58:d8:4c:4f:b1:e4:be:f2:fe:bc:38:57:5a: 9c:3f:32:7f:f7:8c:cb:91:61:c9:32:f7:c3:69:d7: 0b:57:a6:4c:85:44:22:29:64:64:ce:5a:cf:35:6b: 50:27:a4:36:cc:d5:be:dc:15:96:b2:83:06:3d:86: 7a:d3:6b:c1:00:15:16:27:5c:28:40:85:85:f0:1a: e3:81:02:cd:22:ca:63:0d:55:62:c1:99:f1:45:ad: 33:8c:1a:ee:c8:14:4e:e7:96:08:bc:53:df:42:e4: 11:b4:d6:c7:3b:33:16:ca:f2:7b:03:d8:38:36:44: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:10:C9:43:B7:BF:AB:6E:DC:40:CD:BE:27:82:B1:7D:11:2B:50:3B X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:74:d4:6e:23:6a:71:fc:69:7e:6d:60:9c:d3:25:60:0d:03: 16:e5:bd:12:83:92:3c:1b:b8:83:f6:89:77:e8:9a:c1:86:f0: 4b:18:13:cb:5a:4e:6b:59:64:14:fd:0f:7c:03:67:91:e4:aa: 01:26:54:b9:aa:b5:3b:1e:14:f1:dd:25:11:8c:b9:fc:ca:e8: 69:fd:25:63:07:4f:51:3b:00:e5:df:39:0f:21:bc:97:41:9c: 1a:03:a6:e4:0b:b3:5a:c9:ab:fd:95:98:00:ee:7c:e4:e8:e7: 0d:8c:5b:b7:4c:ee:4e:c5:2a:c4:cd:15:ac:df:a9:af:14:48: 0b:3e:fd:57:3e:98:8e:56:6e:8e:cd:f3:2a:ad:22:c7:a6:f4: 82:a9:1a:35:7c:2d:fb:d4:1a:a7:87:66:f3:d2:e5:10:0e:6b: df:bb:d7:7b:34:42:45:b5:87:77:fc:78:9a:57:ee:79:91:ef: 09:ea:c2:6e:84:9a:1c:75:2b:f7:80:02:e9:b6:0c:86:80:46: 28:79:e2:4b:c2:1e:c7:1b:d6:66:82:74:1d:66:b9:93:54:38: c7:0b:ed:81:9d:ce:82:34:61:6e:7c:4d:bb:fd:c6:18:96:2d: 42:94:64:82:8b:6b:68:3d:83:6d:14:7a:01:27:ae:e1:ff:ca: 9f:5b:c5:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjQxMTI0MTYxOTQyWhcNMjQxMjAxMTYxOTQyWjAYMRYwFAYD VQQDEw02NzQzNTIxZS04ZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshHthq17bUewCCv5A6UWVk0tSA+Pr2eVSKHUcdwfVy040hejWyFi27qQputR td3lJS+sfxKpt75+bF+X3EGAvTOiyGSSL6ubDIGlY4iZcEvaybE9cMs8V3/8k4Ff 1UcqW9oqzIRtVUG9tpV0p5GOxf52Ql2Y6gPVek9HfNFzle3uEu3NE5N1v1jYTE+x 5L7y/rw4V1qcPzJ/94zLkWHJMvfDadcLV6ZMhUQiKWRkzlrPNWtQJ6Q2zNW+3BWW soMGPYZ602vBABUWJ1woQIWF8BrjgQLNIspjDVViwZnxRa0zjBruyBRO55YIvFPf QuQRtNbHOzMWyvJ7A9g4NkTluwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwQyUO3 v6tu3EDNvieCsX0RK1A7MB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPdNRuI2px/Gl+bWCc0yVgDQMW5b0Sg5I8G7iD9ol36JrBhvBLGBPL Wk5rWWQU/Q98A2eR5KoBJlS5qrU7HhTx3SURjLn8yuhp/SVjB09ROwDl3zkPIbyX QZwaA6bkC7Nayav9lZgA7nzk6OcNjFu3TO5OxSrEzRWs36mvFEgLPv1XPpiOVm6O zfMqrSLHpvSCqRo1fC371Bqnh2bz0uUQDmvfu9d7NEJFtYd3/HiaV+55ke8J6sJu hJocdSv3gALptgyGgEYoeeJLwh7HG9ZmgnQdZrmTVDjHC+2Bnc6CNGFufE27/cYY li1ClGSCi2toPYNtFHoBJ67h/8qfW8Xx -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org