$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: xaoZHm8mpOtOGg57lRsXe9YkQoqVzqzwXItFjf4wbQs= Subject key identifier: 2D:E8:92:06:B1:08:67:33:84:E6:EC:8B:33:91:01:2A:84:AE:67:59 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 9F Signing time: Sat 23 Nov 2024 04:21:19 +0000 Manifest this update: Sat 23 Nov 2024 04:21:19 +0000 Manifest next update: Sat 30 Nov 2024 04:21:19 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: rmZFlzaIkA+6hiASMj5wGUN+GUSaEdhfpCBlnVTmrb8=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Nov 23 04:21:19 2024 GMT Not After : Nov 30 04:21:19 2024 GMT Subject: CN=6741583f-370f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:31:87:3a:e2:5b:1d:19:15:db:9a:78:f7: 9f:b9:15:ac:c9:d6:d3:64:4c:04:1f:7c:f0:ce:10: d4:91:e5:19:98:8a:07:64:aa:77:5d:c3:13:21:75: 95:03:9a:da:08:31:63:01:4d:ad:d7:ee:b5:26:53: ea:da:29:23:15:36:75:d9:58:4d:5a:6a:ef:15:d2: a4:41:45:05:77:f6:e5:d7:14:9c:0b:1d:26:87:86: 9d:94:47:ad:49:4f:e0:47:19:e2:b7:c9:5b:76:15: 61:f4:c5:dc:3c:4e:6e:ce:27:f1:03:2c:6c:f6:f2: cc:50:75:2c:6c:69:bb:8e:83:0b:40:26:93:e9:fd: 4c:30:56:a0:e5:e0:07:2b:5e:89:78:54:53:78:04: e0:76:90:6a:c3:e6:8b:9e:18:60:5d:cb:eb:e2:9e: 53:7e:af:9e:61:50:bc:a4:2a:ac:08:c0:1d:c5:64: 89:72:d2:9a:d4:b5:80:fe:44:86:6e:21:54:03:c5: 30:60:0a:94:2b:2c:ea:75:6e:e9:71:b6:07:0a:de: d2:b1:16:e3:42:53:c6:55:62:e4:d9:50:36:4b:29: b1:c6:08:22:dc:32:8f:e6:45:c4:d7:95:00:12:c4: 58:1f:7c:b0:4e:58:f8:cd:50:a1:4d:91:40:9d:e8: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:92:06:B1:08:67:33:84:E6:EC:8B:33:91:01:2A:84:AE:67:59 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:81:32:fb:25:e3:f9:e1:c9:dc:68:21:f0:4a:89:4e:29:52: f5:58:d7:75:88:e4:97:a1:84:92:f0:4b:31:f4:96:2f:67:44: 74:96:83:b0:a6:d8:ac:38:29:a4:7f:f2:d9:b6:5a:b2:2a:8c: d2:68:d7:9e:91:af:fa:e0:b8:bf:2e:d9:3e:f1:6b:3a:97:39: 27:c3:60:84:bf:1b:ec:d2:14:ec:c4:df:bc:4a:03:a7:cc:29: fa:d2:1f:e6:bf:0a:1e:30:60:81:2d:ab:67:ce:97:78:a0:49: 80:9a:16:5a:11:7c:11:54:7e:fe:18:50:a5:5a:a5:5a:a6:8c: 2b:ca:f0:d7:8c:ec:85:6f:cd:6a:40:5a:f3:61:42:d9:22:2b: e7:0d:14:d1:ff:0e:fb:d6:0d:17:b8:c1:3b:e3:f8:eb:62:c9: 25:ac:5e:91:b4:c9:f4:22:2a:dc:98:be:8b:d6:f8:ac:15:47: 5f:a3:50:26:b8:a5:8d:bd:34:bf:86:8d:4e:e6:27:d7:74:dc: ed:9a:1c:bc:4b:1a:df:59:22:3e:8b:09:11:79:7c:70:d2:bd: b8:1d:24:c7:77:89:b7:46:e5:16:72:0f:f2:5e:5f:3c:6f:71: c1:8e:91:04:0d:0f:f5:8a:c7:3e:1a:fe:b4:4f:36:26:1a:60: c8:0a:90:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjQxMTIzMDQyMTE5WhcNMjQxMTMwMDQyMTE5WjAYMRYwFAYD VQQDEw02NzQxNTgzZi0zNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtYxhzriWx0ZFduaePefuRWsydbTZEwEH3zwzhDUkeUZmIoHZKp3XcMTIXWV A5raCDFjAU2t1+61JlPq2ikjFTZ12VhNWmrvFdKkQUUFd/bl1xScCx0mh4adlEet SU/gRxnit8lbdhVh9MXcPE5uzifxAyxs9vLMUHUsbGm7joMLQCaT6f1MMFag5eAH K16JeFRTeATgdpBqw+aLnhhgXcvr4p5Tfq+eYVC8pCqsCMAdxWSJctKa1LWA/kSG biFUA8UwYAqUKyzqdW7pcbYHCt7SsRbjQlPGVWLk2VA2Symxxggi3DKP5kXE15UA EsRYH3ywTlj4zVChTZFAnej/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3okgax CGczhObsizORASqErmdZMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgTL7JeP54cncaCHwSolOKVL1WNd1iOSXoYSS8Esx9JYvZ0R0loOw ptisOCmkf/LZtlqyKozSaNeeka/64Li/Ltk+8Ws6lzknw2CEvxvs0hTsxN+8SgOn zCn60h/mvwoeMGCBLatnzpd4oEmAmhZaEXwRVH7+GFClWqVapowryvDXjOyFb81q QFrzYULZIivnDRTR/w771g0XuME74/jrYsklrF6RtMn0IircmL6L1visFUdfo1Am uKWNvTS/ho1O5ifXdNztmhy8SxrfWSI+iwkReXxw0r24HSTHd4m3RuUWcg/yXl88 b3HBjpEEDQ/1isc+Gv60TzYmGmDICpBs -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org