$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: SKe00LyN1kVqjDqW5cFI2rNrkLccezZn6bAmc41jZt4= Subject key identifier: B5:9C:63:30:89:24:FA:4D:10:2E:F5:99:B0:00:D2:71:89:AD:C9:C1 Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2311 Signing time: Fri 22 Nov 2024 16:22:25 +0000 Manifest this update: Fri 22 Nov 2024 16:22:25 +0000 Manifest next update: Fri 29 Nov 2024 16:22:25 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: gFAX2SogTd+5iydMUmsoMULtb+AMMh5/WU81PCEi+D8=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: YZRf5ygqs6yZScbkx1VpIvx3DqExks4rVOBFuDw10NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: Nov 22 16:22:25 2024 GMT Not After : Nov 29 16:22:25 2024 GMT Subject: CN=6740afc1-2034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:1d:d4:06:e1:c3:2a:6c:1c:a5:8f:32:0f: 0e:f2:f5:0d:5e:7a:55:c4:bf:64:87:cd:60:57:0f: cb:bd:84:23:a4:92:ab:3f:cc:71:85:90:0f:9d:25: 18:7e:f5:e4:37:be:38:0d:c1:b9:49:19:26:6b:cf: 70:5e:51:60:36:d6:2a:1a:9f:f6:52:00:5b:14:02: 42:e9:85:22:dd:de:cb:69:9c:2d:9b:69:b9:05:38: 7d:80:02:64:66:7d:69:90:92:e2:68:db:88:a5:14: 98:b6:46:b5:86:d8:0b:41:b4:db:f1:d9:db:a0:24: 08:cf:18:ab:d6:09:fa:07:78:c9:e1:9e:84:90:09: 01:9b:6d:f6:e3:30:40:7b:09:42:63:3d:12:c7:6b: 7a:6b:54:99:a2:48:a0:c7:00:fc:f2:b1:2e:76:c2: 90:66:6a:81:52:cb:c7:a1:67:f6:e0:07:6e:26:18: 9d:f5:6c:94:2e:ce:b3:18:00:d4:c6:46:7f:25:36: 30:ea:31:e3:e9:4e:16:a7:1f:d7:cd:a9:d1:d0:f4: 3a:da:7b:2d:5d:76:f2:99:0f:62:1f:f1:83:64:d3: b3:40:fe:6b:cf:fd:01:f5:ec:8b:e3:e9:33:2e:3d: 77:a2:58:a2:04:bc:ad:72:cd:f6:66:ed:5b:e9:5c: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:63:30:89:24:FA:4D:10:2E:F5:99:B0:00:D2:71:89:AD:C9:C1 X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3d:a6:b0:5c:17:41:54:1f:27:cd:8f:50:9d:25:46:90:17: f2:55:b0:a9:0f:49:7d:01:58:9d:38:50:b4:74:77:68:6d:0a: 41:2a:21:81:31:62:21:7f:8f:92:27:70:5d:7d:47:d7:5e:35: a7:21:49:30:70:ef:eb:a2:16:c3:61:1d:fc:c5:ef:fb:d8:50: a4:8f:3a:a6:30:8b:0f:1a:46:07:67:b9:61:e8:ea:2f:4a:f6: d6:5d:4f:5f:06:0c:35:8d:02:c3:65:6d:8e:64:5b:dc:9c:ae: 75:62:4e:91:a4:28:9c:bd:8a:7a:3b:7a:9b:1a:10:7e:42:9f: 0a:9f:ad:cd:12:3c:70:84:1b:4e:b6:6e:d8:b5:39:66:b4:03: 6f:14:63:15:90:bf:6a:99:b5:a9:4a:ee:f4:9c:26:1e:33:db: 87:68:77:ad:e6:d6:40:39:fe:c7:e9:b1:e2:66:0b:0c:ba:e2: 74:1f:a4:1a:8c:0c:be:1f:1d:b9:a2:f8:f9:0f:71:3d:a5:45: 73:1d:30:65:e6:f6:2c:10:f4:5b:32:25:a3:7e:8b:26:83:ab: 8f:e9:65:7a:3d:54:dc:d3:b2:9b:6e:a2:d0:43:e1:d5:35:f1: 7f:c8:aa:b5:42:db:ca:3c:1e:23:d5:69:cf:01:ff:68:93:ac: 4d:9e:14:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNDExMjIxNjIyMjVaFw0yNDExMjkxNjIyMjVaMBgxFjAUBgNV BAMTDTY3NDBhZmMxLTIwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUHR3UBuHDKmwcpY8yDw7y9Q1eelXEv2SHzWBXD8u9hCOkkqs/zHGFkA+dJRh+ 9eQ3vjgNwblJGSZrz3BeUWA21ioan/ZSAFsUAkLphSLd3stpnC2babkFOH2AAmRm fWmQkuJo24ilFJi2RrWG2AtBtNvx2dugJAjPGKvWCfoHeMnhnoSQCQGbbfbjMEB7 CUJjPRLHa3prVJmiSKDHAPzysS52wpBmaoFSy8ehZ/bgB24mGJ31bJQuzrMYANTG Rn8lNjDqMePpThanH9fNqdHQ9Draey1ddvKZD2If8YNk07NA/mvP/QH17Ivj6TMu PXeiWKIEvK1yzfZm7VvpXPDzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtZxjMIkk +k0QLvWZsADScYmtycEwHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQ9prBcF0FUHyfNj1CdJUaQF/JVsKkPSX0BWJ04ULR0d2htCkEqIYEx YiF/j5IncF19R9deNachSTBw7+uiFsNhHfzF7/vYUKSPOqYwiw8aRgdnuWHo6i9K 9tZdT18GDDWNAsNlbY5kW9ycrnViTpGkKJy9ino7epsaEH5Cnwqfrc0SPHCEG062 bti1OWa0A28UYxWQv2qZtalK7vScJh4z24dod63m1kA5/sfpseJmCwy64nQfpBqM DL4fHbmi+PkPcT2lRXMdMGXm9iwQ9FsyJaN+iyaDq4/pZXo9VNzTsptuotBD4dU1 8X/IqrVC28o8HiPVac8B/2iTrE2eFHc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org