$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: 8tuyzuUaQLL5siTbxLeSvvZykLYsK4JGiZMzm8Zrpuo= Subject key identifier: 2D:C3:86:99:21:EF:0C:91:1C:4B:77:86:5A:1D:8C:DC:BC:71:48:FD Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0F43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0F3C Signing time: Fri 22 Nov 2024 17:34:17 +0000 Manifest this update: Fri 22 Nov 2024 17:34:17 +0000 Manifest next update: Fri 29 Nov 2024 17:34:17 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: TmhFF9qIiq9PpwQZQwd7IO6iDyH1+QDrZXbmQxtBY9Y=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3907 (0xf43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Nov 22 17:34:17 2024 GMT Not After : Nov 29 17:34:17 2024 GMT Subject: CN=6740c099-94bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:1c:d1:c8:4f:0d:c8:a3:e2:2a:3e:34:d5: 20:37:b3:44:01:ff:7d:34:2c:78:f2:22:f6:e6:cd: b8:60:7e:c5:0c:6d:0e:d5:99:18:89:b0:12:a3:cc: b9:a9:b4:09:50:65:d8:1b:b4:36:75:eb:c4:e9:fe: 88:25:32:e7:31:39:e5:f6:f9:69:1e:0c:57:a5:b5: 0d:6c:56:d9:78:2e:d5:42:37:e8:e1:75:aa:0b:d3: c3:3d:00:aa:29:06:64:51:00:c2:f3:6e:73:a2:9d: 3e:06:43:61:6a:90:10:e3:d5:37:44:d3:0c:c2:1e: 36:4d:8b:b6:3a:a8:18:66:7c:03:c3:45:e7:5e:b3: cd:58:54:fd:5b:ac:a4:df:99:ff:3d:8c:7c:15:1b: f1:63:a6:d9:6b:df:fa:ef:49:1b:e2:62:bf:f4:7a: ab:8d:bc:3b:2f:36:ae:28:f1:81:d8:3a:8b:7d:8d: ce:89:33:6d:34:76:9e:e7:d1:58:b4:a0:fb:26:5e: 4c:38:2c:d6:b0:0d:97:5d:6c:29:13:df:42:c2:aa: 77:34:38:f0:24:be:55:db:c6:58:f4:de:48:5f:ba: 15:e6:2e:90:1c:b1:d7:02:ed:3b:3d:ab:67:14:5d: b7:59:e4:cf:54:01:08:0e:48:90:97:1c:c1:3a:54: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C3:86:99:21:EF:0C:91:1C:4B:77:86:5A:1D:8C:DC:BC:71:48:FD X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:47:62:13:9e:b5:c1:0e:a7:70:73:1b:f4:c2:bd:7d:38:f0: d5:d1:04:c2:ae:8b:82:37:f3:d4:f0:3f:08:c9:9c:76:19:39: 25:75:e4:89:2e:a3:0f:1e:27:77:ea:d5:c0:8d:15:47:ec:60: 7a:7c:7e:ea:07:e7:89:94:5d:82:36:af:7e:61:cf:9d:d7:96: c8:0a:49:f5:20:f7:c1:82:f4:70:2c:8e:99:24:73:7a:b8:e4: 97:1d:fa:88:da:4b:e4:29:04:8d:31:a3:7f:34:cb:b8:23:0f: 65:15:9e:1f:79:14:3c:82:84:38:31:c5:4a:fe:9d:d2:6c:7c: 5f:ae:83:61:7e:eb:da:6e:c3:48:4a:f4:ae:60:00:b2:8d:ea: db:12:38:ca:ae:f7:6d:2d:04:fa:4f:56:20:af:3f:6c:9c:52: 5e:ff:e9:e7:22:1c:03:69:82:5f:49:c9:09:ed:d0:55:2a:03: b4:6e:92:15:a6:23:ff:fe:4a:89:85:28:bd:8d:f1:0f:87:5c: ff:aa:92:5c:d9:60:d7:b0:4a:e1:39:2c:cd:f2:26:6a:ab:cf: 5b:54:88:4d:3f:e2:d5:f2:67:8e:4d:5d:92:39:17:a2:18:39: 75:39:a6:36:ab:17:bb:66:d1:22:e2:d3:b7:7c:81:d6:fd:64: 03:1d:a4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjQxMTIyMTczNDE3WhcNMjQxMTI5MTczNDE3WjAYMRYwFAYD VQQDEw02NzQwYzA5OS05NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZAc0chPDcij4io+NNUgN7NEAf99NCx48iL25s24YH7FDG0O1ZkYibASo8y5 qbQJUGXYG7Q2devE6f6IJTLnMTnl9vlpHgxXpbUNbFbZeC7VQjfo4XWqC9PDPQCq KQZkUQDC825zop0+BkNhapAQ49U3RNMMwh42TYu2OqgYZnwDw0XnXrPNWFT9W6yk 35n/PYx8FRvxY6bZa9/670kb4mK/9Hqrjbw7LzauKPGB2DqLfY3OiTNtNHae59FY tKD7Jl5MOCzWsA2XXWwpE99Cwqp3NDjwJL5V28ZY9N5IX7oV5i6QHLHXAu07Patn FF23WeTPVAEIDkiQlxzBOlR+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Dhpkh 7wyRHEt3hlodjNy8cUj9MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANR2ITnrXBDqdwcxv0wr19OPDV0QTCrouCN/PU8D8IyZx2GTkldeSJ LqMPHid36tXAjRVH7GB6fH7qB+eJlF2CNq9+Yc+d15bICkn1IPfBgvRwLI6ZJHN6 uOSXHfqI2kvkKQSNMaN/NMu4Iw9lFZ4feRQ8goQ4McVK/p3SbHxfroNhfuvabsNI SvSuYACyjerbEjjKrvdtLQT6T1Ygrz9snFJe/+nnIhwDaYJfSckJ7dBVKgO0bpIV piP//kqJhSi9jfEPh1z/qpJc2WDXsErhOSzN8iZqq89bVIhNP+LV8meOTV2SORei GDl1OaY2qxe7ZtEi4tO3fIHW/WQDHaSg -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org