$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: fyVJ5iKa6aWUe92k9eMzj2is8Lox4TxL8ZB1eNhFvuc= Subject key identifier: 74:54:93:9F:DA:08:18:98:37:4D:1E:3F:E3:C7:66:37:3E:A3:07:67 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 3439 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 3432 Signing time: Wed 20 Nov 2024 14:22:06 +0000 Manifest this update: Wed 20 Nov 2024 14:22:06 +0000 Manifest next update: Wed 27 Nov 2024 14:22:06 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: EgfsjkzXzvjqg5QX04Y0yfiTQbHmOLJbK0mW5BWed9c=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13369 (0x3439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Nov 20 14:22:06 2024 GMT Not After : Nov 27 14:22:06 2024 GMT Subject: CN=673df08e-1c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:1b:37:39:7f:cc:d2:cb:22:8b:c9:ff:00: 5b:2c:66:1b:74:e1:39:5f:09:4e:27:e1:ec:80:fc: d1:0d:79:cd:b2:51:c6:5a:db:31:e9:e3:12:81:74: 17:20:c8:01:5f:2d:b9:a7:19:55:22:55:b1:0a:a4: 7b:84:09:7a:8b:6a:d6:41:7f:1c:e4:59:e7:d5:7b: a6:1f:63:70:4b:b0:76:8f:11:cf:5d:58:b8:c5:b8: 08:42:35:b0:15:64:b4:0c:32:72:3b:da:14:7c:4d: 28:f5:75:43:59:62:57:80:50:dd:3a:01:8f:05:0c: af:dc:ef:d1:2e:50:1f:72:e6:d3:11:2d:3a:85:6b: a0:20:d2:68:0c:7d:bb:7d:9a:ff:4d:bf:4c:18:76: 49:07:5d:24:df:bc:19:9e:bd:54:b0:17:3a:dc:a1: 64:bf:d0:f3:73:2b:fc:46:0b:f2:19:db:72:6d:4f: f4:c3:ab:7f:7c:44:e6:0f:c0:01:f5:80:3c:77:ef: 69:0b:90:4f:0b:69:57:75:fb:83:a7:5d:51:c3:c5: d1:7b:1c:f2:5f:1b:c3:83:be:7f:bd:b7:49:e3:96: 4a:d5:9f:69:6b:43:6f:c8:1d:e8:0b:d4:70:99:ff: df:48:29:85:9c:d8:40:a7:a0:45:58:5d:00:0b:ab: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:93:9F:DA:08:18:98:37:4D:1E:3F:E3:C7:66:37:3E:A3:07:67 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:b0:71:4e:f0:da:c6:df:d6:da:a8:8d:a1:85:08:5b:b3: 7a:d0:22:b2:22:cc:fd:0a:b2:fa:36:02:c7:ba:82:4f:00:a7: 8d:d9:4c:bf:76:76:17:53:6b:48:27:eb:b1:ff:65:08:12:e0: 6b:30:c3:96:42:df:13:b5:1f:c4:13:1d:3c:f5:b1:83:ff:8a: ed:ba:1a:a2:aa:01:ed:2a:f5:b5:7b:6c:40:5a:b5:f8:d3:f2: d6:31:e6:df:30:7c:a8:c4:36:b1:bc:73:b2:92:9e:47:df:6f: 5e:88:72:2f:44:4a:ec:30:61:f9:27:73:b4:6c:50:37:e3:4b: 6c:f0:d1:f1:10:d4:5a:3c:e8:05:7b:62:6a:74:47:03:41:4f: 06:23:3c:38:5d:12:af:b9:6a:b7:de:f9:89:85:b9:2b:50:53: 6c:14:74:fd:ef:b5:7a:0a:51:81:42:8c:17:f1:d9:4a:d2:fd: 0e:52:75:86:49:de:5c:b8:86:a6:1d:ea:fc:0d:f6:32:b1:60: d1:f4:dc:01:a8:3a:55:ce:6c:36:37:8c:3a:74:b2:3f:bd:93: b1:94:04:59:44:87:a1:b6:a8:6a:dd:88:e1:b3:4e:bf:33:16: 2e:3d:56:65:d3:0a:ff:de:a4:07:cb:21:91:b1:9a:78:d9:3c: 68:fc:f5:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjQxMTIwMTQyMjA2WhcNMjQxMTI3MTQyMjA2WjAYMRYwFAYD VQQDEw02NzNkZjA4ZS0xYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuokbNzl/zNLLIovJ/wBbLGYbdOE5XwlOJ+HsgPzRDXnNslHGWtsx6eMSgXQX IMgBXy25pxlVIlWxCqR7hAl6i2rWQX8c5Fnn1XumH2NwS7B2jxHPXVi4xbgIQjWw FWS0DDJyO9oUfE0o9XVDWWJXgFDdOgGPBQyv3O/RLlAfcubTES06hWugINJoDH27 fZr/Tb9MGHZJB10k37wZnr1UsBc63KFkv9Dzcyv8RgvyGdtybU/0w6t/fETmD8AB 9YA8d+9pC5BPC2lXdfuDp11Rw8XRexzyXxvDg75/vbdJ45ZK1Z9pa0NvyB3oC9Rw mf/fSCmFnNhAp6BFWF0AC6tGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRUk5/a CBiYN00eP+PHZjc+owdnMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCLBxTvDaxt/W2qiNoYUIW7N60CKyIsz9CrL6NgLHuoJPAKeN2Uy/ dnYXU2tIJ+ux/2UIEuBrMMOWQt8TtR/EEx089bGD/4rtuhqiqgHtKvW1e2xAWrX4 0/LWMebfMHyoxDaxvHOykp5H329eiHIvRErsMGH5J3O0bFA340ts8NHxENRaPOgF e2JqdEcDQU8GIzw4XRKvuWq33vmJhbkrUFNsFHT977V6ClGBQowX8dlK0v0OUnWG Sd5cuIamHer8DfYysWDR9NwBqDpVzmw2N4w6dLI/vZOxlARZRIehtqhq3Yjhs06/ MxYuPVZl0wr/3qQHyyGRsZp42Txo/PUg -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:27 2024 by rpki-client on console-fra.rpki-client.org