$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: 2UPtrgT7G+rw7xI68c2vadJJx+aGVjxE9iw7Zfes434= Subject key identifier: 01:49:3D:0B:F9:42:A4:CB:E2:4C:2F:EF:78:2B:A6:95:07:34:40:04 Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0AAA Signing time: Fri 22 Nov 2024 19:15:13 +0000 Manifest this update: Fri 22 Nov 2024 19:15:12 +0000 Manifest next update: Fri 29 Nov 2024 19:15:12 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: D0pwGM+IdeGT2cEnXz2+pWMqzeNLgKhKKjKI6q88oWA=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: WrNvje3c+z7lsqTQqXn/sqPriUfd4/uYt7v0A72LhYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: Nov 22 19:15:12 2024 GMT Not After : Nov 29 19:15:12 2024 GMT Subject: CN=6740d841-5414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:28:05:fc:33:65:7f:b9:e3:e0:c3:3f:7d: f3:91:c6:4a:76:0f:78:bf:2a:4a:44:db:37:77:12: c1:0b:8b:27:d4:3e:4f:23:8e:77:dc:0f:19:7e:a8: a3:da:94:ea:b0:d8:ba:71:9b:40:86:de:1d:b1:e8: f8:5e:fc:42:40:aa:60:ac:5f:0a:cf:15:a2:29:c6: 5b:a6:b8:54:94:42:48:dd:ec:2e:8b:90:96:18:46: e2:92:64:14:1a:40:a3:36:06:b1:37:22:36:8f:08: b6:c3:15:01:ad:65:ce:dd:59:9f:51:ca:5d:98:8b: 22:0e:9b:f3:21:aa:ba:64:bd:60:5f:c5:77:8c:d0: 8b:4d:85:d1:4e:ac:88:76:ae:a1:2c:ca:d8:f7:e9: 43:ca:f2:a8:d0:e1:ca:1c:80:7a:2c:52:e7:f5:85: 8a:c8:19:ef:65:bf:9b:bb:35:da:61:31:17:3e:78: 29:12:91:4b:f1:b4:d1:b7:3e:b4:9e:28:bb:18:30: 34:6f:73:db:46:8e:09:7c:6b:1a:aa:41:7e:ce:23: 79:9e:42:41:e9:c5:93:13:07:00:78:63:d1:b0:10: e8:0a:b6:88:91:0e:73:dc:88:0d:c9:f2:ed:69:b9: fc:4b:19:32:5a:0a:ed:e4:44:09:cd:2e:05:55:0a: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:3D:0B:F9:42:A4:CB:E2:4C:2F:EF:78:2B:A6:95:07:34:40:04 X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3a:f5:63:d3:82:03:79:48:3f:c5:e3:07:1c:1f:e6:67:b8: 72:57:0b:5d:c4:79:7b:3d:77:91:ff:d9:30:7c:db:8e:39:d0: 03:5a:fa:e7:3e:8e:5f:20:ab:d5:8f:9c:11:ca:fd:63:22:12: c1:cd:9c:c1:ca:53:78:04:4f:ad:c8:5c:a4:82:c2:30:29:8e: 69:c4:bd:e0:91:9b:6e:9e:69:78:bd:54:bf:24:8e:fc:ee:7f: 3a:62:f8:a6:bb:e8:b0:19:0c:33:05:fa:c1:b1:86:d4:ec:c0: 4f:15:ed:00:29:d5:cf:a3:94:be:95:7e:d1:4a:03:c0:67:90: 48:32:94:b6:b7:02:96:71:d6:b5:fe:cc:61:7c:c9:c3:16:b5: 39:ae:b3:2b:1a:33:fb:0e:27:88:9e:8d:60:b8:ff:2b:1c:9d: 47:bc:05:28:de:b8:94:85:06:30:30:49:6d:04:4d:3f:37:bc: df:67:a0:3c:21:67:80:23:a4:20:f5:2c:ee:e3:e6:ac:9f:39: 00:64:d3:65:64:23:b2:da:6e:e8:e5:83:c4:42:8a:d8:b5:37: 20:ff:52:73:c7:ef:21:09:a5:77:5a:3c:ff:7a:b1:2b:6d:0e: ef:b1:54:6c:52:31:1c:a3:f1:d2:f7:6b:f3:39:27:0d:33:cd: 93:3d:5e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjQxMTIyMTkxNTEyWhcNMjQxMTI5MTkxNTEyWjAYMRYwFAYD VQQDEw02NzQwZDg0MS01NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv74oBfwzZX+54+DDP33zkcZKdg94vypKRNs3dxLBC4sn1D5PI4533A8Zfqij 2pTqsNi6cZtAht4dsej4XvxCQKpgrF8KzxWiKcZbprhUlEJI3ewui5CWGEbikmQU GkCjNgaxNyI2jwi2wxUBrWXO3VmfUcpdmIsiDpvzIaq6ZL1gX8V3jNCLTYXRTqyI dq6hLMrY9+lDyvKo0OHKHIB6LFLn9YWKyBnvZb+buzXaYTEXPngpEpFL8bTRtz60 nii7GDA0b3PbRo4JfGsaqkF+ziN5nkJB6cWTEwcAeGPRsBDoCraIkQ5z3IgNyfLt abn8SxkyWgrt5EQJzS4FVQp1xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFJPQv5 QqTL4kwv73grppUHNEAEMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkOvVj04IDeUg/xeMHHB/mZ7hyVwtdxHl7PXeR/9kwfNuOOdADWvrn Po5fIKvVj5wRyv1jIhLBzZzBylN4BE+tyFykgsIwKY5pxL3gkZtunml4vVS/JI78 7n86Yvimu+iwGQwzBfrBsYbU7MBPFe0AKdXPo5S+lX7RSgPAZ5BIMpS2twKWcda1 /sxhfMnDFrU5rrMrGjP7DieIno1guP8rHJ1HvAUo3riUhQYwMEltBE0/N7zfZ6A8 IWeAI6Qg9Szu4+asnzkAZNNlZCOy2m7o5YPEQorYtTcg/1Jzx+8hCaV3Wjz/erEr bQ7vsVRsUjEco/HS92vzOScNM82TPV4W -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org