$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: 5W/IhwsSYzcaXS8y6CHOtH82rHa/BwMXrSvHj7avlDY= Subject key identifier: E5:56:27:B1:EE:1C:75:84:28:9F:13:64:F0:95:96:19:18:F1:46:C8 Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 34EE Signing time: Fri 22 Nov 2024 16:00:07 +0000 Manifest this update: Fri 22 Nov 2024 16:00:06 +0000 Manifest next update: Fri 29 Nov 2024 16:00:06 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: FKqu6OFHqC5EhrOKFFY+YbD7gFwBZFCDxWtdb5StmH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Validity Not Before: Nov 22 16:00:06 2024 GMT Not After : Nov 29 16:00:06 2024 GMT Subject: CN=6740aa87-58fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:54:bd:09:3a:9a:17:3b:0f:fb:8f:e5:60: 8b:58:ae:4b:cd:b3:d3:c3:6e:27:ad:65:ea:fd:03: 70:33:99:a9:43:87:26:16:96:88:a0:50:1c:de:55: c3:5e:e9:ed:4a:c4:6b:9e:22:8d:4b:ef:f8:e6:09: b4:55:01:23:44:4e:3b:d3:44:64:95:ba:06:3c:a1: 11:ee:93:90:2e:1e:ae:13:a8:bf:6d:c4:50:9e:66: a8:bd:da:89:a9:df:65:d6:ea:a8:ad:43:2b:f2:c4: 26:c6:74:7b:e7:e8:f6:d2:5a:de:5f:31:67:a8:45: f1:60:02:ab:b2:0b:d1:2c:10:85:b5:b4:2d:ef:09: 9a:b4:05:ab:95:c2:83:70:07:1a:a3:b1:e7:b1:92: e3:6e:9a:d6:2e:f9:09:f1:ca:a4:6c:6b:c2:f4:1a: 5c:63:92:80:4b:d9:db:78:6e:4f:51:22:ec:1a:f2: d8:7b:87:a6:67:03:e2:41:9a:d6:b7:11:fe:16:fe: 15:5a:3f:20:e3:3b:00:ce:83:f8:9e:2a:a0:c4:bc: 38:2c:9f:a9:29:e4:3e:b4:28:ae:49:91:60:b2:00: 8a:67:66:05:dc:e7:17:07:64:a5:db:91:2f:a0:58: 9a:8a:3d:52:a5:71:80:af:de:fc:ac:35:d8:2d:49: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:56:27:B1:EE:1C:75:84:28:9F:13:64:F0:95:96:19:18:F1:46:C8 X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:32:7a:45:4f:26:ae:09:1a:cb:68:d7:28:03:42:1b:4a:ca: f2:dc:a8:c0:1d:96:c9:e2:d5:4d:e1:59:a5:78:35:28:64:4e: fb:79:5e:29:04:46:ee:3b:7b:57:4a:6c:78:bb:34:bf:5c:26: bb:0a:a9:e0:de:da:a1:d2:49:24:04:eb:03:de:93:6c:4e:1c: 00:f6:77:3d:36:a7:7b:09:38:d7:37:1c:50:e7:5e:11:d7:32: 30:e0:ec:ee:28:d8:6e:35:40:86:68:4f:f8:2d:80:52:a1:77: a7:29:a3:71:cc:47:4b:7c:f4:48:ad:20:7e:79:5b:ee:f7:c2: c4:c9:b4:eb:de:b7:1d:96:b9:84:44:7c:16:a4:29:28:ae:32: 5b:dc:4f:47:08:5d:a1:36:43:c5:44:63:7f:14:c8:dd:38:21: 5e:36:b1:63:90:db:2a:73:83:b5:62:d7:99:e5:0e:76:a1:da: f5:21:df:17:cd:91:ce:2b:9e:aa:d8:ad:28:f9:f7:f9:fd:e1: 42:22:98:e4:0a:e6:20:24:fb:4a:31:88:57:e6:bb:4e:40:1b: d2:e7:93:4b:83:e4:22:59:01:ba:cd:b3:f5:ce:3c:02:24:6c: 25:ff:2a:c7:3e:6c:fe:b9:2a:6f:fe:da:41:fe:5b:18:99:62: 3d:26:90:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjQxMTIyMTYwMDA2WhcNMjQxMTI5MTYwMDA2WjAYMRYwFAYD VQQDEw02NzQwYWE4Ny01OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA761UvQk6mhc7D/uP5WCLWK5LzbPTw24nrWXq/QNwM5mpQ4cmFpaIoFAc3lXD XuntSsRrniKNS+/45gm0VQEjRE4700RklboGPKER7pOQLh6uE6i/bcRQnmaovdqJ qd9l1uqorUMr8sQmxnR75+j20lreXzFnqEXxYAKrsgvRLBCFtbQt7wmatAWrlcKD cAcao7HnsZLjbprWLvkJ8cqkbGvC9BpcY5KAS9nbeG5PUSLsGvLYe4emZwPiQZrW txH+Fv4VWj8g4zsAzoP4niqgxLw4LJ+pKeQ+tCiuSZFgsgCKZ2YF3OcXB2Sl25Ev oFiaij1SpXGAr978rDXYLUk8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVWJ7Hu HHWEKJ8TZPCVlhkY8UbIMB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOMnpFTyauCRrLaNcoA0IbSsry3KjAHZbJ4tVN4VmleDUoZE77eV4p BEbuO3tXSmx4uzS/XCa7Cqng3tqh0kkkBOsD3pNsThwA9nc9Nqd7CTjXNxxQ514R 1zIw4OzuKNhuNUCGaE/4LYBSoXenKaNxzEdLfPRIrSB+eVvu98LEybTr3rcdlrmE RHwWpCkorjJb3E9HCF2hNkPFRGN/FMjdOCFeNrFjkNsqc4O1YteZ5Q52odr1Id8X zZHOK56q2K0o+ff5/eFCIpjkCuYgJPtKMYhX5rtOQBvS55NLg+QiWQG6zbP1zjwC JGwl/yrHPmz+uSpv/tpB/lsYmWI9JpAO -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org