$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: Od2yHwaFfcc8hYVRHjrQpmOTD05lbrgcaDP4Ad5mEv0= Subject key identifier: 96:9D:C8:91:78:A2:89:57:FC:7B:AC:8A:51:91:C1:3D:52:A9:56:DB Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0C96 Signing time: Fri 22 Nov 2024 18:06:01 +0000 Manifest this update: Fri 22 Nov 2024 18:06:00 +0000 Manifest next update: Fri 29 Nov 2024 18:06:00 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: QkLJNHW3SX5U4zHvKzya1++fF25iK+/FrMyNhvYGOgU=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: QrHwkCxaqX0D4CMUIb/gJ2hugEkme/UAAaAoVbq7U4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Nov 22 18:06:00 2024 GMT Not After : Nov 29 18:06:00 2024 GMT Subject: CN=6740c809-11ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fc:71:50:15:af:d5:01:ba:5b:ef:4a:d2:95: 27:39:de:6d:3f:4a:a4:0f:6b:dc:c0:7b:b6:83:63: 1d:ec:57:22:5d:f3:a4:8d:fe:80:f4:15:aa:cb:c1: db:e6:14:3b:d5:d7:42:17:34:64:43:03:63:09:9a: 46:6f:45:73:c6:73:04:30:43:c8:d5:6d:75:88:00: 1b:da:7d:4b:1a:17:77:31:de:c1:94:a6:87:fa:d1: c4:13:37:af:84:b5:32:5b:da:d0:eb:eb:49:5f:34: c3:90:0a:1a:9c:70:48:48:8a:ef:ee:8c:aa:6d:0f: 59:3a:49:b0:49:45:7c:78:59:6a:ed:56:2e:a7:62: 92:d9:be:fa:e8:c1:e1:8b:90:72:1f:b3:3f:89:18: 0a:d1:22:6f:ed:47:8f:20:b1:b9:38:fa:16:f0:b9: 17:30:ea:9c:b9:4d:1a:18:fc:9a:b8:5c:e7:85:ed: cb:4d:ed:2b:1c:34:6a:af:ff:d5:c2:c5:d8:aa:66: f8:c1:e6:c4:e6:db:fe:d2:9e:c6:f8:91:7a:f8:29: d1:f1:ac:5a:da:05:67:f9:10:05:72:85:8f:d1:ed: 4b:f3:e7:02:52:23:7f:77:49:68:a0:bd:56:ab:8a: 1d:d9:5f:98:87:07:16:b6:d2:35:fb:fc:63:2a:9d: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9D:C8:91:78:A2:89:57:FC:7B:AC:8A:51:91:C1:3D:52:A9:56:DB X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fc:20:25:01:87:81:96:a9:6a:a4:aa:95:8a:29:b1:cc:a1: c7:cc:aa:26:ab:1d:fd:d5:61:de:22:b7:21:2b:54:5a:32:80: fd:eb:c8:8e:14:35:41:4d:ed:e8:d7:ab:2e:8d:fc:6c:79:05: 93:5f:37:a0:45:e9:b7:76:7c:9b:de:d2:f2:70:35:1d:71:54: 73:5f:ca:2e:6a:82:cc:99:80:65:91:c5:50:75:0b:eb:f1:3c: 87:af:00:04:62:e5:2c:59:63:5b:39:5a:a4:c9:ab:60:13:31: 8d:d9:41:4c:e5:fc:9a:06:10:7e:3e:ee:ba:47:56:d0:15:7e: 5f:0c:b8:3d:6e:8f:72:71:bd:3b:e6:2b:6e:83:c2:5f:4a:38: 7b:52:d9:c6:4b:99:da:54:30:61:6d:65:7e:d4:84:8d:96:8a: 18:1d:8e:cc:1a:f0:db:2e:2a:80:e1:f3:4e:38:40:22:6c:ca: 2d:cf:9a:5c:49:14:94:69:40:d3:08:9c:6e:24:88:ab:c4:39: fa:05:0e:55:91:ee:cf:1a:ee:2a:4f:66:64:5f:ff:29:60:89: 0e:ee:76:2a:76:74:a6:71:ea:0e:2e:2a:ed:4d:66:8e:3e:e6: 43:6d:04:8d:6d:6e:a5:0b:bf:12:e7:65:31:4b:d1:71:61:48: 55:cf:80:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjQxMTIyMTgwNjAwWhcNMjQxMTI5MTgwNjAwWjAYMRYwFAYD VQQDEw02NzQwYzgwOS0xMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PxxUBWv1QG6W+9K0pUnOd5tP0qkD2vcwHu2g2Md7FciXfOkjf6A9BWqy8Hb 5hQ71ddCFzRkQwNjCZpGb0VzxnMEMEPI1W11iAAb2n1LGhd3Md7BlKaH+tHEEzev hLUyW9rQ6+tJXzTDkAoanHBISIrv7oyqbQ9ZOkmwSUV8eFlq7VYup2KS2b766MHh i5ByH7M/iRgK0SJv7UePILG5OPoW8LkXMOqcuU0aGPyauFznhe3LTe0rHDRqr//V wsXYqmb4webE5tv+0p7G+JF6+CnR8axa2gVn+RAFcoWP0e1L8+cCUiN/d0looL1W q4od2V+YhwcWttI1+/xjKp2OtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJadyJF4 oolX/HusilGRwT1SqVbbMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf/CAlAYeBlqlqpKqViimxzKHHzKomqx391WHeIrchK1RaMoD968iO FDVBTe3o16sujfxseQWTXzegRem3dnyb3tLycDUdcVRzX8ouaoLMmYBlkcVQdQvr 8TyHrwAEYuUsWWNbOVqkyatgEzGN2UFM5fyaBhB+Pu66R1bQFX5fDLg9bo9ycb07 5itug8JfSjh7UtnGS5naVDBhbWV+1ISNlooYHY7MGvDbLiqA4fNOOEAibMotz5pc SRSUaUDTCJxuJIirxDn6BQ5Vke7PGu4qT2ZkX/8pYIkO7nYqdnSmceoOLirtTWaO PuZDbQSNbW6lC78S52UxS9FxYUhVz4B3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org