$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: prK1vokAuIQ7NTq2ZjtlWX8s5gD9vxvTTAqcW+KqJuw= Subject key identifier: 3B:8E:E3:F1:EC:AE:60:6E:FF:13:DD:8F:B9:63:20:5A:7A:0B:2C:EA Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0BF0 Signing time: Wed 20 Nov 2024 18:24:08 +0000 Manifest this update: Wed 20 Nov 2024 18:24:08 +0000 Manifest next update: Wed 27 Nov 2024 18:24:08 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: DBanSG5X8rZU9lkcx8CKKKsregN8G0KgPCvLScB+CZw=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: JQNpQ6gxCAzbnnH9Yf0p2LfKBc2ucCX716tqFsvKS60=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: cs9csxclLbT2VZkBXhivKDsv1cu/tEkHFvTr8v3XfJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Nov 20 18:24:08 2024 GMT Not After : Nov 27 18:24:08 2024 GMT Subject: CN=673e2948-cfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:38:b4:cd:48:10:4e:e4:dc:28:2c:cc:41: 39:c5:bd:78:aa:14:b5:6b:53:25:85:37:e0:09:bb: 4e:33:60:99:52:1c:76:dd:de:b5:67:94:8d:2a:d9: 66:6e:c9:ab:fe:de:6d:4e:7b:31:b7:dc:5e:7d:a7: 92:d5:eb:6e:af:b6:f1:04:19:f9:6f:7d:6f:45:26: 96:47:f1:fc:82:19:7d:e9:e3:e6:b4:32:ef:69:48: c5:b1:d0:6c:2d:9c:ee:db:a7:84:33:06:cb:cc:32: 1a:f8:50:07:63:c5:f3:31:d1:22:ee:73:1c:48:cb: 4f:f5:34:f1:9f:cd:49:09:bd:a3:13:fe:9c:e5:d9: 22:ea:f9:3b:62:50:d7:33:bc:48:63:24:07:ac:2e: 22:07:89:6a:74:34:fc:6c:84:31:0e:a0:e5:d9:71: d7:2e:f3:dd:66:d2:56:72:de:ae:b5:6e:e3:11:09: 3e:0d:76:ed:46:82:2e:52:6a:46:30:9e:99:84:1f: 31:68:1f:e0:66:a0:5e:27:ec:2c:2f:6d:50:0f:6e: ca:74:2c:5c:a6:a9:85:56:fa:97:e9:08:f5:ff:a7: c6:62:7c:13:18:e3:f1:2c:9e:26:75:f1:90:9a:21: 3a:0f:5f:75:b3:e6:e7:80:1f:5e:f1:53:bc:13:aa: 49:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8E:E3:F1:EC:AE:60:6E:FF:13:DD:8F:B9:63:20:5A:7A:0B:2C:EA X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:c1:f2:30:9e:0b:fa:f6:76:b8:f7:07:a4:df:65:0b:41: b1:90:e3:bd:12:d1:21:22:1f:81:d3:c4:7a:35:43:36:d4:f5: a6:83:67:09:f3:01:60:3f:9f:6c:33:c6:1f:9d:7e:1d:31:ff: 9d:d5:5f:d2:8d:dc:b1:39:25:c1:f6:59:39:f7:ad:f7:aa:2d: b7:56:37:b3:10:a5:6d:30:6c:cb:c4:82:f1:cb:8e:05:c0:e7: 05:f1:e1:bc:a5:61:6b:70:17:4e:66:fd:13:55:9b:8f:82:64: 20:99:07:0c:68:9c:07:56:ac:a7:45:fc:b7:2b:e8:4d:e0:ce: 95:71:f6:d0:11:d4:cf:08:fa:ed:16:52:95:1b:df:46:da:d6: 8a:27:0d:6f:a3:ff:df:2f:b8:af:16:cc:29:4e:e0:8f:61:0a: ab:5d:03:b6:c5:4e:0d:13:1a:2d:35:42:62:68:81:f8:68:8d: 9b:53:2b:df:4a:12:6f:7f:64:13:b4:08:f8:df:1d:0d:fc:7c: e8:94:c2:c1:e7:5a:44:71:3c:5b:82:33:32:70:d0:50:a4:ae: 23:1c:ca:32:9a:ed:59:69:3a:8d:cb:ed:49:76:69:71:27:8d: 95:1f:2b:12:20:21:84:74:1f:3e:a9:7e:5d:e7:09:d0:20:6e: 9a:86:cd:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjQxMTIwMTgyNDA4WhcNMjQxMTI3MTgyNDA4WjAYMRYwFAYD VQQDEw02NzNlMjk0OC1jZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt44tM1IEE7k3CgszEE5xb14qhS1a1MlhTfgCbtOM2CZUhx23d61Z5SNKtlm bsmr/t5tTnsxt9xefaeS1etur7bxBBn5b31vRSaWR/H8ghl96ePmtDLvaUjFsdBs LZzu26eEMwbLzDIa+FAHY8XzMdEi7nMcSMtP9TTxn81JCb2jE/6c5dki6vk7YlDX M7xIYyQHrC4iB4lqdDT8bIQxDqDl2XHXLvPdZtJWct6utW7jEQk+DXbtRoIuUmpG MJ6ZhB8xaB/gZqBeJ+wsL21QD27KdCxcpqmFVvqX6Qj1/6fGYnwTGOPxLJ4mdfGQ miE6D191s+bngB9e8VO8E6pJjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuO4/Hs rmBu/xPdj7ljIFp6CyzqMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNrcHyMJ4L+vZ2uPcHpN9lC0GxkOO9EtEhIh+B08R6NUM21PWmg2cJ 8wFgP59sM8YfnX4dMf+d1V/SjdyxOSXB9lk59633qi23VjezEKVtMGzLxILxy44F wOcF8eG8pWFrcBdOZv0TVZuPgmQgmQcMaJwHVqynRfy3K+hN4M6VcfbQEdTPCPrt FlKVG99G2taKJw1vo//fL7ivFswpTuCPYQqrXQO2xU4NExotNUJiaIH4aI2bUyvf ShJvf2QTtAj43x0N/HzolMLB51pEcTxbgjMycNBQpK4jHMoymu1ZaTqNy+1Jdmlx J42VHysSICGEdB8+qX5d5wnQIG6ahs0q -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org