$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: /ZCHehMe3W04am4zH2JcqrnVRm6RqtIIgf2a89XElco= Subject key identifier: A8:9E:50:C8:EE:31:BB:51:8C:20:B3:BD:C2:2B:69:1B:4B:C4:46:F7 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: 17 Signing time: Wed 23 Oct 2024 06:41:09 +0000 Manifest this update: Wed 23 Oct 2024 06:41:09 +0000 Manifest next update: Wed 30 Oct 2024 06:41:09 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: udmy1QPIH5so3bsj43N0jFjnv8TphLaeqYdZhJNOBr4=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Oct 23 06:41:09 2024 GMT Not After : Oct 30 06:41:09 2024 GMT Subject: CN=67189a85-4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:5f:32:5e:e4:fb:ee:eb:c2:a9:c7:fb:67: 4e:fe:02:25:3e:f5:4b:d2:a0:e6:c3:ad:64:97:e0: 42:d0:95:72:d6:8c:b7:29:83:f5:e3:3d:19:66:6a: 5d:b6:cd:f5:a6:aa:a2:3e:1d:7f:1f:98:6a:4c:cf: 08:a0:30:9a:df:a6:c2:1c:56:d7:7b:92:da:11:31: f0:38:58:b7:4f:de:0f:f0:7b:01:82:3f:83:0e:03: 0e:a4:81:aa:c0:71:a2:c2:b0:c7:21:67:10:85:f1: 08:7b:7e:d8:0b:d0:73:6b:20:ef:47:59:9d:d3:7e: 32:e0:35:a6:4c:ff:64:b3:87:25:b9:81:35:8b:5b: b6:b9:d5:66:77:10:6f:31:52:3f:48:40:97:85:5f: 8f:ea:d0:d2:5c:7b:97:4d:56:75:bf:20:24:8d:93: c3:09:cb:88:fe:c9:0b:9e:ce:93:0b:5f:2a:da:40: f8:03:50:4e:0b:5a:6e:5d:ee:e4:d4:1a:e6:c5:15: a6:c7:d7:9c:c0:0e:97:b7:34:32:d0:96:ce:c9:ed: 7b:ff:8d:83:73:85:5b:6d:2c:6f:b2:35:b7:23:3f: 08:c5:fa:c6:ed:94:34:02:7b:9b:4c:cb:b3:e2:b3: 7f:7f:7e:70:e6:04:2a:e4:b8:34:82:16:8d:c8:2d: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:50:C8:EE:31:BB:51:8C:20:B3:BD:C2:2B:69:1B:4B:C4:46:F7 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:76:09:bd:75:fa:1f:7a:12:38:cb:7c:50:a1:4d:46:9a:73: 0a:a5:1a:8c:37:17:d4:2f:93:28:17:f1:53:12:62:83:9f:52: aa:5a:db:e7:e7:73:a4:38:d7:aa:9f:ff:ab:f9:4d:d3:22:a0: 55:0a:b2:70:d1:44:44:5c:0d:51:80:ad:8a:68:ab:ca:e5:d0: ed:16:6d:df:ae:03:13:b9:6c:dc:f7:40:33:65:2b:58:fe:25: 59:00:e9:d2:4f:42:81:5e:eb:a2:67:53:cd:b3:92:46:82:11: fd:13:ca:e9:16:df:9f:2a:f4:c0:8a:54:83:57:8d:21:30:6f: fe:72:16:bd:c8:a6:a4:5e:ab:05:12:aa:1f:15:30:e7:00:6e: 14:fb:8f:ef:91:28:8a:06:c1:71:f1:fa:c7:03:39:ae:3a:51: 8e:5c:c4:dc:5b:97:35:c3:44:a7:a8:ef:43:4a:e5:07:b6:12: f7:11:d1:ca:e2:ea:f2:44:54:cc:f6:07:8d:58:e2:58:25:b6: a7:c4:60:62:d9:14:a8:4e:d0:57:cb:30:36:2d:d3:c3:78:27: 90:c4:f8:73:1e:1e:f4:a6:6f:49:2c:ee:bf:9d:db:4b:a0:33: 25:50:c0:18:d2:5e:a0:de:ad:9e:28:e6:bf:88:12:a6:32:d4: 27:b7:ea:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzdCOTExMC8GA1UEBRMoOERENDE0NDg1OTE3Q0Q0QzgwMTY3QkRBMTlENzI0OTY0 NkIwNjcyNTAeFw0yNDEwMjMwNjQxMDlaFw0yNDEwMzAwNjQxMDlaMBgxFjAUBgNV BAMTDTY3MTg5YTg1LTRjYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ll8yXuT77uvCqcf7Z07+AiU+9UvSoObDrWSX4ELQlXLWjLcpg/XjPRlmal22 zfWmqqI+HX8fmGpMzwigMJrfpsIcVtd7ktoRMfA4WLdP3g/wewGCP4MOAw6kgarA caLCsMchZxCF8Qh7ftgL0HNrIO9HWZ3TfjLgNaZM/2SzhyW5gTWLW7a51WZ3EG8x Uj9IQJeFX4/q0NJce5dNVnW/ICSNk8MJy4j+yQuezpMLXyraQPgDUE4LWm5d7uTU GubFFabH15zADpe3NDLQls7J7Xv/jYNzhVttLG+yNbcjPwjF+sbtlDQCe5tMy7Pi s39/fnDmBCrkuDSCFo3ILWPvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqJ5QyO4x u1GMILO9witpG0vERvcwHwYDVR0jBBgwFoAUjdQUSFkXzUyAFnvaGdcklkawZyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3N0I5L0QyN0M5MTVDNzVC NjExRUZCOEUyMTUxNEM0RjlBRTAyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamRRVVNGa1h6VXlBRm52YUdkY2tsa2F3WnlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 N0I5L0QyN0M5MTVDNzVCNjExRUZCOEUyMTUxNEM0RjlBRTAyL2pkUVVTRmtYelV5 QUZudmFHZGNrbGthd1p5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABV2Cb11+h96EjjLfFChTUaacwqlGow3F9QvkygX8VMSYoOfUqpa2+fn c6Q416qf/6v5TdMioFUKsnDRRERcDVGArYpoq8rl0O0Wbd+uAxO5bNz3QDNlK1j+ JVkA6dJPQoFe66JnU82zkkaCEf0TyukW358q9MCKVINXjSEwb/5yFr3IpqReqwUS qh8VMOcAbhT7j++RKIoGwXHx+scDOa46UY5cxNxblzXDRKeo70NK5Qe2EvcR0cri 6vJEVMz2B41Y4lgltqfEYGLZFKhO0FfLMDYt08N4J5DE+HMeHvSmb0ks7r+d20ug MyVQwBjSXqDerZ4o5r+IEqYy1Ce36kk= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org