$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft File: J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json) Hash identifier: xzJzgrKBqqgAojgjN/ZV56ov0Gj6hCMxwlEV7eQ0j2U= Subject key identifier: AE:53:0F:04:06:8A:D1:C3:7C:4A:B7:21:EB:4B:9D:CC:86:B4:D1:5B Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB Certificate issuer: /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft Manifest number: 05F4 Signing time: Fri 22 Nov 2024 22:21:33 +0000 Manifest this update: Fri 22 Nov 2024 22:21:32 +0000 Manifest next update: Fri 29 Nov 2024 22:21:32 +0000 Files and hashes: 1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: Pxf2NG/300o2cgcBBwnfYi/VBekr/aFXbrG//eNvir4=) 2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: +b74aWHLRD3nVFpEi7MMX8aEV8GBCMCU5F6fmVweFlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Validity Not Before: Nov 22 22:21:32 2024 GMT Not After : Nov 29 22:21:32 2024 GMT Subject: CN=674103ed-7a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:5e:e9:6d:f0:73:94:c9:45:28:79:9b:00: 80:bd:07:2b:ac:61:51:62:97:e2:a7:5c:b2:6f:25: f3:a5:bb:52:f8:42:67:a7:1f:2d:59:ac:cf:b7:ee: 55:27:11:9e:04:64:e9:04:44:68:de:55:56:e2:34: 0e:09:89:30:15:53:9a:c7:27:9e:a1:b1:c0:12:0d: 35:25:c8:6e:fb:1e:ff:7e:77:0d:cd:4e:53:66:61: c2:64:87:72:92:a4:37:ce:8f:cf:62:55:d4:e6:4c: ed:83:4b:76:19:e1:96:77:94:d2:fe:c3:02:11:da: e4:15:63:66:6e:31:8b:e8:67:bc:01:43:03:f2:5b: 58:7d:b1:e0:c6:26:b5:98:2f:ec:86:44:51:5a:f3: 2c:af:a8:e6:e4:a5:9b:ce:0d:ec:48:7f:d6:22:c0: 76:3b:ab:ea:09:ec:86:35:58:a6:c2:68:62:af:92: 5e:b3:12:25:28:ca:4c:d5:34:92:f5:29:86:cc:9e: 93:2b:80:6b:22:18:ac:66:66:e0:76:26:6f:b3:d8: 86:56:e6:42:f5:0c:16:0d:2e:c3:1a:e7:c7:ff:8b: ac:c9:a8:13:2f:f3:66:ce:5f:bd:7a:26:fb:fe:c8: d6:8c:f3:66:f0:43:fa:d5:41:22:e0:9a:cb:5a:7e: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:53:0F:04:06:8A:D1:C3:7C:4A:B7:21:EB:4B:9D:CC:86:B4:D1:5B X509v3 Authority Key Identifier: keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a9:ec:75:82:8c:fe:62:69:dd:01:af:9d:4b:32:a7:11:b9: a3:86:02:ad:d2:a2:e1:ef:ae:0b:4a:7c:24:3f:30:ff:2b:74: b9:46:fd:5b:21:33:69:86:2c:57:bd:fc:a2:85:d4:14:9b:dd: 97:b2:e0:0c:8a:9b:2c:82:e9:99:d7:48:43:8f:05:a9:ec:1c: 5b:6e:d6:34:61:5e:17:65:a0:b7:f2:a4:66:70:a1:b6:b6:ea: 18:96:ff:97:b7:e8:df:bc:42:c7:2f:43:8b:ef:32:e8:0c:f6: 62:00:62:c7:74:e3:24:3f:a9:58:a3:b6:06:37:93:30:4e:59: ee:8b:11:d7:6c:85:82:06:4d:ca:44:96:b7:2e:0c:d9:1b:b2: c1:94:bb:a8:06:24:fb:64:dd:41:48:c2:5b:fb:70:e9:aa:e4: c2:c0:46:61:ee:ed:81:7a:d1:d0:3e:d5:e6:de:13:8f:dc:fe: bb:59:65:2a:96:1f:79:9c:9f:3d:76:21:0b:b8:75:fd:cd:70: f0:d7:9e:3a:1b:c1:91:9b:ad:82:53:d7:85:53:1d:76:5d:8e: a3:d4:24:f8:7a:25:57:a2:0d:40:e8:88:53:09:58:a6:8d:f1: 6b:86:d4:ec:53:54:a0:1b:df:fd:d1:5b:f1:45:27:12:e6:00: 04:3a:48:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1 NzI2OTY5QUIwHhcNMjQxMTIyMjIyMTMyWhcNMjQxMTI5MjIyMTMyWjAYMRYwFAYD VQQDEw02NzQxMDNlZC03YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOle6W3wc5TJRSh5mwCAvQcrrGFRYpfip1yybyXzpbtS+EJnpx8tWazPt+5V JxGeBGTpBERo3lVW4jQOCYkwFVOaxyeeobHAEg01Jchu+x7/fncNzU5TZmHCZIdy kqQ3zo/PYlXU5kztg0t2GeGWd5TS/sMCEdrkFWNmbjGL6Ge8AUMD8ltYfbHgxia1 mC/shkRRWvMsr6jm5KWbzg3sSH/WIsB2O6vqCeyGNVimwmhir5JesxIlKMpM1TSS 9SmGzJ6TK4BrIhisZmbgdiZvs9iGVuZC9QwWDS7DGufH/4usyagTL/Nmzl+9eib7 /sjWjPNm8EP61UEi4JrLWn6DCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5TDwQG itHDfEq3IetLncyGtNFbMB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2 QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l dmNrem02bkgwMVZYSnBhYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWqex1goz+YmndAa+dSzKnEbmjhgKt0qLh764LSnwkPzD/K3S5Rv1b ITNphixXvfyihdQUm92XsuAMipssgumZ10hDjwWp7BxbbtY0YV4XZaC38qRmcKG2 tuoYlv+Xt+jfvELHL0OL7zLoDPZiAGLHdOMkP6lYo7YGN5MwTlnuixHXbIWCBk3K RJa3LgzZG7LBlLuoBiT7ZN1BSMJb+3DpquTCwEZh7u2BetHQPtXm3hOP3P67WWUq lh95nJ89diELuHX9zXDw1546G8GRm62CU9eFUx12XY6j1CT4eiVXog1A6IhTCVim jfFrhtTsU1SgG9/90VvxRScS5gAEOkgC -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org