$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: INjRWDwHXd8bsoXP4PAAOlnnqdVQUFaYjW8mzJPob38= Subject key identifier: 17:82:89:BE:55:E2:10:9F:16:E2:A8:71:A7:1A:D4:E7:D5:25:22:30 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: BD Signing time: Sat 23 Nov 2024 04:03:22 +0000 Manifest this update: Sat 23 Nov 2024 04:03:21 +0000 Manifest next update: Sat 30 Nov 2024 04:03:21 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: XyLzWeWxt4K1QOz8pbrS9ROzVtJ+pg43/dX5AhzCU+A=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: t9AWerdFoSlx8BlZhPHhMpsds8XRNwYqNkMr3i+O4XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Nov 23 04:03:21 2024 GMT Not After : Nov 30 04:03:21 2024 GMT Subject: CN=6741540a-62eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:d1:81:49:b5:c0:d5:b5:92:2d:04:ce:3b: ca:40:46:12:e4:64:43:59:5d:80:89:b9:77:18:cc: 94:10:89:b4:eb:57:eb:02:27:84:d9:6d:dc:a7:f6: 1d:60:a8:d3:b7:c2:b5:c9:79:05:6c:4c:89:fd:2f: f5:0c:08:7d:dc:22:c9:0d:85:ce:93:c3:67:d4:95: 6f:53:3d:71:f0:4d:55:1c:24:35:51:75:4c:fc:22: 58:ef:4e:26:d0:a6:96:40:e7:09:26:53:53:21:dc: 29:13:e4:fb:c1:4a:8f:03:83:74:f2:0d:75:fb:93: 75:47:f1:ce:0f:22:f1:a4:16:77:95:19:95:ab:e5: 39:95:7a:79:88:a7:7d:d3:1b:33:66:f9:d9:65:90: 95:62:bb:2c:5a:c8:46:08:18:9b:79:cf:72:68:69: 01:95:24:01:a5:95:93:9e:42:4f:81:84:17:d9:33: fc:d8:a8:ec:06:80:70:74:2e:13:09:0c:39:c2:3a: b3:74:79:b2:d4:1f:5c:6c:a7:4f:43:0e:df:17:24: d1:3f:b0:bb:08:16:16:79:10:05:bc:6e:88:22:22: d0:9e:b4:aa:c2:88:e3:8c:5d:3b:8b:e8:04:a5:27: 63:d6:ca:0d:d9:99:fa:41:38:7b:35:ad:2b:cb:8f: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:89:BE:55:E2:10:9F:16:E2:A8:71:A7:1A:D4:E7:D5:25:22:30 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:f1:21:be:b0:70:a5:ae:3a:0f:26:73:f1:e8:63:fe:37: 7c:33:68:21:b8:2f:c3:5b:f0:a9:27:1e:90:24:02:c8:10:f5: 0c:77:08:f6:12:f1:23:38:8b:ac:e7:7b:1c:c5:ef:df:ae:ff: b6:a7:30:27:b6:be:87:fa:bd:19:bd:83:d4:05:5c:b1:9f:01: fa:af:c0:35:de:52:e2:55:1e:d3:0e:c8:22:f1:c4:0b:df:59: aa:9b:a3:3b:f8:46:fa:3f:10:b1:9d:38:9f:1f:2a:01:ad:63: 0f:97:83:25:b2:be:72:96:a4:ee:2d:35:61:00:c9:d2:0f:cb: 5e:08:0f:2d:bb:b5:84:c0:9c:5f:65:07:a9:69:c9:c7:59:c7: 55:66:9f:bf:26:c7:02:f3:a4:57:f6:ea:1a:10:69:f6:2e:ba: 8a:17:fc:df:ef:3f:57:ee:bd:9d:d0:fe:d0:4e:47:73:3a:33: 66:82:ec:f9:e9:c1:04:27:27:a8:47:87:f1:15:04:44:c4:3e: e1:56:a7:61:e5:17:53:aa:61:3c:26:3b:71:b8:06:35:dd:d3: d1:4d:69:6b:13:c5:d3:c7:31:d5:95:e0:02:c1:99:81:ca:c3: 2d:7b:87:67:44:d8:db:5e:5c:25:45:53:5e:76:aa:5f:cd:84: 5b:e5:a1:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjQxMTIzMDQwMzIxWhcNMjQxMTMwMDQwMzIxWjAYMRYwFAYD VQQDEw02NzQxNTQwYS02MmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VTRgUm1wNW1ki0EzjvKQEYS5GRDWV2Aibl3GMyUEIm061frAieE2W3cp/Yd YKjTt8K1yXkFbEyJ/S/1DAh93CLJDYXOk8Nn1JVvUz1x8E1VHCQ1UXVM/CJY704m 0KaWQOcJJlNTIdwpE+T7wUqPA4N08g11+5N1R/HODyLxpBZ3lRmVq+U5lXp5iKd9 0xszZvnZZZCVYrssWshGCBibec9yaGkBlSQBpZWTnkJPgYQX2TP82KjsBoBwdC4T CQw5wjqzdHmy1B9cbKdPQw7fFyTRP7C7CBYWeRAFvG6IIiLQnrSqwojjjF07i+gE pSdj1soN2Zn6QTh7Na0ry4+HzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeCib5V 4hCfFuKocaca1OfVJSIwMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXfEhvrBwpa46DyZz8ehj/jd8M2ghuC/DW/CpJx6QJALIEPUMdwj2 EvEjOIus53scxe/frv+2pzAntr6H+r0ZvYPUBVyxnwH6r8A13lLiVR7TDsgi8cQL 31mqm6M7+Eb6PxCxnTifHyoBrWMPl4Mlsr5ylqTuLTVhAMnSD8teCA8tu7WEwJxf ZQepacnHWcdVZp+/JscC86RX9uoaEGn2LrqKF/zf7z9X7r2d0P7QTkdzOjNmguz5 6cEEJyeoR4fxFQRExD7hVqdh5RdTqmE8JjtxuAY13dPRTWlrE8XTxzHVleACwZmB ysMte4dnRNjbXlwlRVNedqpfzYRb5aHm -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org