$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: 78OzS7SUXCaro0WjC1mhIUnE18E+ufKuUhHXuTMRSKc= Subject key identifier: D7:CC:58:2B:5A:B5:DE:F7:24:30:F7:C8:BF:33:A7:89:2B:41:C7:47 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 0FFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 0FF3 Signing time: Fri 22 Nov 2024 17:25:47 +0000 Manifest this update: Fri 22 Nov 2024 17:25:46 +0000 Manifest next update: Fri 29 Nov 2024 17:25:46 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: LjPaMjdlKct3ceGX1Ww+DbqYNN0unX++oKZXBfKHdDM=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: /nFahrd1eN8YwTr3PzXHtKOv1+LamBJVN45AsjnPQ5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4090 (0xffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Nov 22 17:25:46 2024 GMT Not After : Nov 29 17:25:46 2024 GMT Subject: CN=6740be9a-c684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:94:52:2d:b3:eb:a5:91:6a:5c:30:8c:e3: f4:74:90:a2:69:7c:fa:5f:40:19:b8:9b:d1:58:d7: d2:74:dc:2b:d2:af:b8:dc:93:c7:14:30:13:cb:a9: a6:3b:c0:56:73:49:d8:3b:05:85:ab:89:22:79:b6: 16:7e:7b:d5:f4:24:b9:2f:5b:f9:1c:7c:17:9a:e7: 65:4d:12:3c:d0:80:8f:64:b5:6b:8a:eb:47:57:b9: aa:96:13:f4:98:ff:31:63:03:4d:c0:d9:8f:a0:3f: f2:28:85:ac:73:93:f1:f7:70:fa:c6:23:92:25:6e: 96:bd:9b:ee:35:6c:f6:ce:d0:35:25:87:a5:e8:53: 8d:b0:66:94:aa:0d:b5:5f:e2:02:0a:d0:c7:a5:e7: b0:6c:ff:e8:1a:59:94:b0:0c:8d:07:e7:80:5b:1c: 11:eb:d7:ae:db:d9:d0:51:44:0a:ad:e6:51:b8:8b: 76:50:8a:d7:32:d3:6c:84:ee:dd:6b:f1:04:ac:0e: e7:0a:79:66:b6:8b:b6:de:bf:43:e7:ae:bd:72:d3: a6:dc:bb:4c:63:a9:7d:14:34:9e:b0:53:f7:89:3b: dc:f6:47:c7:ff:9d:75:ca:22:d9:53:4e:e5:69:37: 26:93:2c:12:ba:2b:32:b6:12:13:5f:c7:e6:a7:88: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CC:58:2B:5A:B5:DE:F7:24:30:F7:C8:BF:33:A7:89:2B:41:C7:47 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:a3:4a:88:4d:73:04:3d:55:3e:44:dd:51:5d:11:a1:c0: f5:82:2e:99:43:88:fd:07:54:68:7f:7a:12:eb:1f:5e:87:61: ad:85:6d:e1:bd:a4:a1:34:03:b3:b7:f2:41:21:c4:d8:60:63: 3c:de:7f:a8:dd:af:ed:10:6b:5f:84:1b:c9:5d:f4:e9:46:19: 6a:52:48:8b:e4:86:fd:9c:77:21:58:10:50:8f:ad:a3:23:fe: 49:10:5f:22:01:5d:48:5c:97:49:82:78:6f:10:cd:d0:04:17: 7f:0f:67:3b:e2:8c:22:4a:2c:dc:c3:b3:24:5b:c0:a8:2a:b8: c6:52:d1:65:15:c0:79:a1:7f:df:99:6e:5c:97:76:60:6a:46: 5e:8d:a1:6b:77:f1:ee:f9:4d:8d:f2:ca:45:4e:55:a8:06:61: 37:e5:91:28:0b:8b:3c:34:db:1f:31:59:6c:b3:5e:c3:4c:d2: 62:55:0b:b4:f8:3b:da:8d:c1:2c:0b:a2:fa:cf:d0:5d:66:08: 80:35:3f:5e:4e:4d:84:03:ba:88:54:4d:15:0d:cc:89:8c:97: 0e:3e:1f:6b:bd:44:99:41:b9:5f:41:2a:2f:63:88:e7:cd:1f: a4:69:9c:70:7d:84:6a:0c:8a:0e:05:71:66:79:61:7e:4a:db: 05:48:48:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjQxMTIyMTcyNTQ2WhcNMjQxMTI5MTcyNTQ2WjAYMRYwFAYD VQQDEw02NzQwYmU5YS1jNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e2UUi2z66WRalwwjOP0dJCiaXz6X0AZuJvRWNfSdNwr0q+43JPHFDATy6mm O8BWc0nYOwWFq4kiebYWfnvV9CS5L1v5HHwXmudlTRI80ICPZLVriutHV7mqlhP0 mP8xYwNNwNmPoD/yKIWsc5Px93D6xiOSJW6WvZvuNWz2ztA1JYel6FONsGaUqg21 X+ICCtDHpeewbP/oGlmUsAyNB+eAWxwR69eu29nQUUQKreZRuIt2UIrXMtNshO7d a/EErA7nCnlmtou23r9D5669ctOm3LtMY6l9FDSesFP3iTvc9kfH/511yiLZU07l aTcmkywSuisythITX8fmp4ijqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfMWCta td73JDD3yL8zp4krQcdHMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCltqNKiE1zBD1VPkTdUV0RocD1gi6ZQ4j9B1Rof3oS6x9eh2GthW3h vaShNAOzt/JBIcTYYGM83n+o3a/tEGtfhBvJXfTpRhlqUkiL5Ib9nHchWBBQj62j I/5JEF8iAV1IXJdJgnhvEM3QBBd/D2c74owiSizcw7MkW8CoKrjGUtFlFcB5oX/f mW5cl3ZgakZejaFrd/Hu+U2N8spFTlWoBmE35ZEoC4s8NNsfMVlss17DTNJiVQu0 +DvajcEsC6L6z9BdZgiANT9eTk2EA7qIVE0VDcyJjJcOPh9rvUSZQblfQSovY4jn zR+kaZxwfYRqDIoOBXFmeWF+StsFSEgv -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org