$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: nEEk2nyp83qLrl5FIOlVt/XGkqlNqjzIbIeVboD6XG0= Subject key identifier: ED:95:BF:82:96:D8:07:DE:A7:FD:96:CD:68:A3:81:82:36:92:40:0C Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 0329 Signing time: Mon 25 Nov 2024 00:34:06 +0000 Manifest this update: Mon 25 Nov 2024 00:34:06 +0000 Manifest next update: Mon 02 Dec 2024 00:34:06 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: Jap18lu/3BOhQINTpd23e2Kb16ELAIl437M9YiQgrQI=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: L06G5zhFCO9MeNvA+zmysMr9Z+WhY3SxKgFZgoOfL9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: Nov 25 00:34:06 2024 GMT Not After : Dec 2 00:34:06 2024 GMT Subject: CN=6743c5fe-316a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:6e:ab:66:05:bc:a0:56:5c:3d:43:98:51: d5:c3:8e:17:a0:d5:6a:cd:67:a1:bd:86:5e:72:d6: af:4c:f8:c4:ff:dc:fd:2d:8e:34:ca:30:7c:07:18: 2d:02:2d:3b:73:f8:32:65:71:6d:d6:43:51:56:ba: 5b:7d:21:0c:22:e7:be:4d:ba:b6:33:27:57:9c:e4: e0:cf:d4:68:a5:15:82:53:5b:94:40:a3:4b:07:3b: b0:7a:d2:b9:bc:3f:d3:f2:e1:18:2d:48:3f:49:2c: 55:92:6a:14:e8:97:cf:37:ab:09:b4:9b:4d:8a:9e: 69:2c:e9:a9:88:79:c1:c2:a0:bd:ef:f4:ec:b0:ae: 3c:0f:6e:e5:42:cd:5e:9a:a1:c6:56:f3:ca:e0:25: 15:0f:1c:ea:3a:ca:32:10:87:eb:9f:d0:01:29:01: 14:22:1d:91:d7:4b:fc:ef:92:54:30:97:46:e8:ee: fc:8c:c1:86:2b:cf:69:b5:a6:fb:67:9b:e7:9e:70: 63:d1:b7:5c:2d:f8:be:c7:93:10:49:b5:f4:18:0c: 9b:76:a3:45:9a:0f:30:98:15:20:52:c2:37:38:86: 61:9d:df:24:b1:2a:7e:75:e0:76:bf:80:b0:b0:70: 5e:43:45:3b:ac:5f:d7:d2:53:fb:ff:a0:53:ff:0d: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:95:BF:82:96:D8:07:DE:A7:FD:96:CD:68:A3:81:82:36:92:40:0C X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:44:9a:0f:a3:4a:52:50:8c:53:c0:0b:b7:93:6b:14:cc: 13:30:67:3a:c1:16:ef:ba:30:12:bf:16:2c:c9:0f:f6:27:31: 64:cb:ef:43:e3:14:a5:90:2c:34:e5:47:1c:6f:05:a9:0d:e2: a5:f8:c0:27:f5:e1:d7:15:f9:d1:b1:34:b7:cd:60:09:a0:b0: 78:d9:75:cf:5d:05:25:f4:92:d2:f6:96:7f:24:db:52:8a:7f: f3:10:b8:45:51:c7:78:09:18:23:16:c0:a4:88:d2:ff:1e:d2: 43:ea:7a:b9:7f:2a:5b:34:66:76:86:98:99:3e:16:fd:55:01: ad:69:39:e2:8d:2f:02:04:67:65:93:b4:92:a3:65:94:83:b1: 5e:33:7a:70:40:f4:78:33:91:dd:fe:00:54:72:48:a3:8e:f8: 9b:94:b2:de:f4:28:55:93:cf:41:5a:ff:e6:0a:e4:ef:69:e2: 3c:22:ce:01:ea:8d:89:a7:83:35:83:f6:de:bf:9e:2e:f9:0c: f3:67:a7:c1:11:3e:4e:88:43:cf:6d:e8:75:ac:88:a9:3e:d7: b4:7a:ae:aa:fb:d9:15:2e:1d:86:f5:ff:d1:25:50:01:26:fb: e6:7c:2d:80:5c:ed:6b:fc:b5:0b:df:ee:50:7f:71:36:15:08: 7a:a1:34:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjQxMTI1MDAzNDA2WhcNMjQxMjAyMDAzNDA2WjAYMRYwFAYD VQQDEw02NzQzYzVmZS0zMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SRuq2YFvKBWXD1DmFHVw44XoNVqzWehvYZectavTPjE/9z9LY40yjB8Bxgt Ai07c/gyZXFt1kNRVrpbfSEMIue+Tbq2MydXnOTgz9RopRWCU1uUQKNLBzuwetK5 vD/T8uEYLUg/SSxVkmoU6JfPN6sJtJtNip5pLOmpiHnBwqC97/TssK48D27lQs1e mqHGVvPK4CUVDxzqOsoyEIfrn9ABKQEUIh2R10v875JUMJdG6O78jMGGK89ptab7 Z5vnnnBj0bdcLfi+x5MQSbX0GAybdqNFmg8wmBUgUsI3OIZhnd8ksSp+deB2v4Cw sHBeQ0U7rF/X0lP7/6BT/w10jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Vv4KW 2Afep/2WzWijgYI2kkAMMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA50SaD6NKUlCMU8ALt5NrFMwTMGc6wRbvujASvxYsyQ/2JzFky+9D 4xSlkCw05UccbwWpDeKl+MAn9eHXFfnRsTS3zWAJoLB42XXPXQUl9JLS9pZ/JNtS in/zELhFUcd4CRgjFsCkiNL/HtJD6nq5fypbNGZ2hpiZPhb9VQGtaTnijS8CBGdl k7SSo2WUg7FeM3pwQPR4M5Hd/gBUckijjviblLLe9ChVk89BWv/mCuTvaeI8Is4B 6o2Jp4M1g/bev54u+QzzZ6fBET5OiEPPbeh1rIipPte0eq6q+9kVLh2G9f/RJVAB JvvmfC2AXO1r/LUL3+5Qf3E2FQh6oTTy -----END CERTIFICATE-----Generated at Mon Nov 25 02:48:53 2024 by rpki-client on console-ams.rpki-client.org