$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: ekgq1beUMzxHV4G9SYqADENJ3dWEyDXRaeMgmGfMDaU= Subject key identifier: 09:A9:FA:ED:AD:1B:07:75:E0:C3:D0:88:95:7B:92:45:CA:3F:82:31 Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0B04 Signing time: Fri 22 Nov 2024 19:08:33 +0000 Manifest this update: Fri 22 Nov 2024 19:08:32 +0000 Manifest next update: Fri 29 Nov 2024 19:08:32 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: lkp6nWNU9Pu8Y7lz5zkAF1CqSAT/UJrjg9eYgWZLwfY=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: wqMWiXdgCu3cScL0mYpc0UCwGRMk2VdkUHOf3iWaHHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: Nov 22 19:08:32 2024 GMT Not After : Nov 29 19:08:32 2024 GMT Subject: CN=6740d6b0-5d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:9c:06:f7:52:dc:9f:2e:58:db:ae:04:6e: 05:ae:3d:27:e5:6d:0e:b2:c5:c7:81:d3:88:69:5f: 75:c3:59:20:16:0f:34:5a:3f:83:3a:c8:72:ae:d2: 55:4a:65:67:d8:be:64:63:82:7d:2e:75:da:d1:de: dd:07:27:0c:e7:d2:1e:5d:60:83:e6:67:d1:f0:a9: f0:63:f1:36:52:4b:87:32:da:43:7f:3a:09:cf:0d: 5d:e5:2a:f0:73:24:51:7a:00:07:70:28:a8:57:54: 51:96:7f:7e:f0:0a:5d:83:25:30:9e:2e:9c:80:d6: 96:53:45:46:5e:bd:85:d2:80:3d:b6:22:22:60:4a: aa:e6:d1:af:60:b0:2a:fc:29:1c:26:b1:40:c3:c2: 93:cf:67:69:99:62:fa:63:fc:26:b7:de:32:b1:e9: ac:0e:25:f3:1b:52:59:e1:8c:c5:92:49:0d:3b:a7: 2b:da:8f:09:e4:60:af:5f:c6:d0:15:82:dc:33:59: 87:16:5f:fc:18:53:ee:fb:4e:0c:d0:0e:16:d9:b5: 5e:cb:d4:c6:1f:94:73:9a:da:42:8b:8a:e0:a1:e1: c9:d4:a1:6d:8c:43:df:2b:8a:75:0b:b0:86:e2:3f: 45:96:7a:47:9a:98:2f:e9:8b:c1:7e:d8:f0:21:06: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A9:FA:ED:AD:1B:07:75:E0:C3:D0:88:95:7B:92:45:CA:3F:82:31 X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e0:c7:48:be:31:d9:0a:5e:b6:77:7b:74:05:c9:3f:0a:f1: 52:95:8e:10:29:92:24:15:d2:28:e7:f1:b7:1b:5e:80:06:fd: 12:85:9d:b8:8d:20:c7:a3:55:9e:40:95:1d:22:d6:1b:b6:45: c3:dc:13:f0:f8:75:b0:06:e8:43:9f:a1:98:88:76:be:62:32: e1:a1:fb:43:78:2d:7b:75:16:56:c7:89:40:ff:1f:f3:ef:83: 93:8c:fb:b4:27:10:db:ac:be:9e:44:92:77:72:ad:b7:20:3f: ce:72:b3:e5:fb:6e:80:45:25:7e:69:9f:07:63:34:97:3c:08: 13:b4:45:41:d6:a5:d3:f1:f5:62:20:3b:bf:65:c2:b2:00:b3: c5:41:93:79:d0:01:47:a9:1a:0e:ba:39:8a:d4:c7:d5:1b:d6: 39:ac:31:8f:96:b4:ee:b8:f9:ec:2d:a2:5b:96:47:0c:ff:c3: 8c:93:f2:84:e0:6a:cc:2d:5c:58:09:97:0c:ad:db:fc:4c:6d: 37:4c:5a:b4:ef:5f:69:b8:ef:9c:77:ab:63:19:92:0d:8b:26: ca:70:66:1d:d0:da:24:58:04:d1:f8:69:86:c7:b3:55:6d:ca: f4:b5:ff:e4:9d:62:8c:64:5d:c9:a3:8b:4b:af:cb:d5:56:ed: d3:78:2c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjQxMTIyMTkwODMyWhcNMjQxMTI5MTkwODMyWjAYMRYwFAYD VQQDEw02NzQwZDZiMC01ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeucBvdS3J8uWNuuBG4Frj0n5W0OssXHgdOIaV91w1kgFg80Wj+DOshyrtJV SmVn2L5kY4J9LnXa0d7dBycM59IeXWCD5mfR8KnwY/E2UkuHMtpDfzoJzw1d5Srw cyRRegAHcCioV1RRln9+8ApdgyUwni6cgNaWU0VGXr2F0oA9tiIiYEqq5tGvYLAq /CkcJrFAw8KTz2dpmWL6Y/wmt94ysemsDiXzG1JZ4YzFkkkNO6cr2o8J5GCvX8bQ FYLcM1mHFl/8GFPu+04M0A4W2bVey9TGH5RzmtpCi4rgoeHJ1KFtjEPfK4p1C7CG 4j9FlnpHmpgv6YvBftjwIQZJTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmp+u2t Gwd14MPQiJV7kkXKP4IxMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi4MdIvjHZCl62d3t0Bck/CvFSlY4QKZIkFdIo5/G3G16ABv0ShZ24 jSDHo1WeQJUdItYbtkXD3BPw+HWwBuhDn6GYiHa+YjLhoftDeC17dRZWx4lA/x/z 74OTjPu0JxDbrL6eRJJ3cq23ID/OcrPl+26ARSV+aZ8HYzSXPAgTtEVB1qXT8fVi IDu/ZcKyALPFQZN50AFHqRoOujmK1MfVG9Y5rDGPlrTuuPnsLaJblkcM/8OMk/KE 4GrMLVxYCZcMrdv8TG03TFq0719puO+cd6tjGZINiybKcGYd0NokWATR+GmGx7NV bcr0tf/knWKMZF3Jo4tLr8vVVu3TeCyF -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org