$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: 0rxUwtUoGAfhJ0ZYXDik4xNAku3Ac1kg8DZ1IjweNdc= Subject key identifier: 2B:EE:52:C1:D8:3D:84:DE:92:29:E8:96:BA:1F:C9:DC:B4:A5:9A:21 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 0250 Signing time: Sat 23 Nov 2024 01:17:41 +0000 Manifest this update: Sat 23 Nov 2024 01:17:41 +0000 Manifest next update: Sat 30 Nov 2024 01:17:41 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: 2JY/wLpA1APsjvcvGgmQOSgb4ZvsBfdMz7W0x+ewyq8=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: OalalDzVyKhIKt/8JFaNCLlPQG9aL6loK7h8qfIQsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Nov 23 01:17:41 2024 GMT Not After : Nov 30 01:17:41 2024 GMT Subject: CN=67412d35-b7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:b7:f1:b5:58:c5:93:fa:22:d7:59:d0:ae: b5:eb:c2:04:f5:fb:8b:10:b2:0e:7a:89:4b:bf:6b: a0:12:53:ca:25:f7:72:23:ac:a0:4e:a1:c2:6b:f7: ff:3d:61:10:97:24:8a:15:c4:d3:1a:44:59:56:6a: 66:da:7d:9d:3a:bc:31:3d:2c:d9:62:4d:f2:e1:69: 1a:f1:2f:c3:94:89:63:1e:7d:7b:da:20:d2:a1:6c: 9e:e2:9b:42:74:fd:2f:a1:bc:e9:df:cc:3a:6f:4e: 96:a5:4e:6d:ae:ea:a3:8e:01:32:35:8a:4d:3b:53: bb:9d:b8:b8:48:9a:93:67:f4:43:8e:4f:66:b2:b6: 88:df:46:ea:35:df:fa:89:fd:3d:c9:b8:14:ff:93: 13:03:aa:ba:40:e6:9c:04:4f:92:1e:88:af:b7:d5: f3:3c:7e:70:39:4e:a4:41:9a:a1:f6:96:c4:a4:75: a8:8a:0b:cc:1a:66:f9:ba:f9:f9:ee:0a:54:86:d8: d4:c1:6e:dc:f3:32:9e:85:e6:1e:8c:d1:39:8b:ab: 18:93:b4:3c:12:d4:8c:d5:a1:a6:c4:a7:c3:b5:8d: 2c:6d:39:bc:f6:5b:a8:19:b6:6f:38:8d:2a:23:ce: 54:d5:ff:60:7c:cc:68:2b:e7:9c:a3:8c:28:d4:e9: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EE:52:C1:D8:3D:84:DE:92:29:E8:96:BA:1F:C9:DC:B4:A5:9A:21 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:b1:b9:46:9c:fb:af:9d:6b:c0:a9:db:e7:ad:0c:21:c8: cd:5a:df:0a:bc:db:e4:41:42:f0:ae:39:40:52:f0:d9:e2:7a: ab:a7:99:07:44:12:f0:0b:cc:6b:2d:9b:49:e2:2c:9d:85:00: 75:93:13:64:98:11:2f:ae:5a:be:46:b2:c3:65:4a:41:ef:d9: e2:74:e3:be:bf:10:cc:25:b9:e2:a0:c4:d4:d6:d1:83:14:26: 83:5e:63:8d:d0:f5:90:c4:8e:9e:1f:9f:23:a5:3f:fe:94:3b: e3:9c:c3:36:0c:e2:14:8c:56:55:3e:79:c3:ba:16:3e:b2:32: 85:9f:98:39:dd:17:95:50:32:1a:46:eb:a6:1d:34:a4:f5:1e: d4:e3:e2:a3:87:e2:77:6b:c3:43:46:95:7a:f0:66:af:d6:81: cc:ea:df:89:73:72:32:ce:c2:1c:36:5b:dd:08:e4:fc:c0:e1: 70:fe:94:90:a0:01:cc:79:e4:c1:99:fb:ce:58:68:4c:e3:24: bb:e0:c3:3f:fa:e1:45:62:23:9f:02:2a:b9:aa:ae:64:0f:ec: cc:4a:e8:3d:c1:03:ab:b0:00:67:16:6c:13:53:d9:32:96:a3: 6b:ac:c0:1d:06:e0:f3:26:3b:f1:c2:d0:7f:14:c8:51:f7:b9: 8f:56:23:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjQxMTIzMDExNzQxWhcNMjQxMTMwMDExNzQxWjAYMRYwFAYD VQQDEw02NzQxMmQzNS1iN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+S38bVYxZP6ItdZ0K6168IE9fuLELIOeolLv2ugElPKJfdyI6ygTqHCa/f/ PWEQlySKFcTTGkRZVmpm2n2dOrwxPSzZYk3y4Wka8S/DlIljHn172iDSoWye4ptC dP0vobzp38w6b06WpU5truqjjgEyNYpNO1O7nbi4SJqTZ/RDjk9msraI30bqNd/6 if09ybgU/5MTA6q6QOacBE+SHoivt9XzPH5wOU6kQZqh9pbEpHWoigvMGmb5uvn5 7gpUhtjUwW7c8zKeheYejNE5i6sYk7Q8EtSM1aGmxKfDtY0sbTm89luoGbZvOI0q I85U1f9gfMxoK+eco4wo1OlUGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvuUsHY PYTekinolrofydy0pZohMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApNbG5Rpz7r51rwKnb560MIcjNWt8KvNvkQULwrjlAUvDZ4nqrp5kH RBLwC8xrLZtJ4iydhQB1kxNkmBEvrlq+RrLDZUpB79nidOO+vxDMJbnioMTU1tGD FCaDXmON0PWQxI6eH58jpT/+lDvjnMM2DOIUjFZVPnnDuhY+sjKFn5g53ReVUDIa RuumHTSk9R7U4+Kjh+J3a8NDRpV68Gav1oHM6t+Jc3IyzsIcNlvdCOT8wOFw/pSQ oAHMeeTBmfvOWGhM4yS74MM/+uFFYiOfAiq5qq5kD+zMSug9wQOrsABnFmwTU9ky lqNrrMAdBuDzJjvxwtB/FMhR97mPViNs -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org