$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: KhcYo0ZSw5HAzAQAQdCYvJ+CkQsBOAO/ro/3ILwXbcU= Subject key identifier: C9:22:CD:E4:98:BD:04:64:CE:E4:3B:42:6B:FC:0D:97:09:C6:CC:8B Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0AA3 Signing time: Fri 22 Nov 2024 19:18:38 +0000 Manifest this update: Fri 22 Nov 2024 19:18:37 +0000 Manifest next update: Fri 29 Nov 2024 19:18:37 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: UQQFNdWG6mxnBR/3vXUCEDClc5i59udX14LgCvOCxlM=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: 4wuttNTcs2A1WMxfkljPXuhlrhcB6lESJJyM3JIzH0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Nov 22 19:18:37 2024 GMT Not After : Nov 29 19:18:37 2024 GMT Subject: CN=6740d90d-ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:99:1f:a0:12:a6:db:55:0d:d3:2d:64:9e: 8d:2e:5a:25:d7:27:95:92:9c:7e:57:12:f6:23:49: 55:84:6f:83:16:58:a1:98:ee:14:af:f0:1e:a5:e0: 5a:ba:c5:1a:77:41:c9:75:5c:c4:6c:83:dc:43:dc: 1c:20:b4:32:a8:0b:f4:bd:df:27:52:c2:1a:78:fe: da:8f:1c:fe:f9:5e:be:ab:cd:11:63:00:7a:2e:fa: 0b:4e:99:19:29:b3:a2:f0:88:f3:4d:02:b7:cd:6e: f3:65:88:34:11:81:86:e5:3a:3e:b8:c2:ca:06:b2: 45:e5:fb:be:0a:a8:5f:b3:ae:bb:70:d8:d7:77:4c: a8:ff:08:ff:cf:1b:d7:d9:17:b3:7a:df:e3:29:f5: 21:a3:9a:df:5f:4d:f7:62:c2:bd:c4:7d:a6:c0:b2: 79:98:dc:86:d4:63:f0:49:23:af:5d:67:14:b0:df: 65:73:5a:43:94:67:37:e3:d2:78:05:b0:b4:a7:13: ea:c4:5f:2a:f4:71:0e:55:d1:2d:b1:06:4d:4b:c4: cf:2e:1b:cf:0b:bb:fe:4e:f9:cc:ed:c3:d9:eb:75: ad:ac:de:c4:d5:95:82:4c:db:02:55:0c:8f:55:19: 69:eb:b0:64:10:f2:cb:1a:ae:5f:f9:44:33:e2:fe: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:CD:E4:98:BD:04:64:CE:E4:3B:42:6B:FC:0D:97:09:C6:CC:8B X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:63:05:ad:93:a2:78:18:8c:06:3e:7d:33:8c:fe:04:ce: 12:99:0f:1c:6e:67:d7:ef:11:ae:00:dc:d6:e5:77:b0:97:78: d1:c1:9a:ec:bd:87:ad:76:b1:13:62:11:0c:6c:18:fe:97:cf: c4:c9:56:97:3f:c3:bd:5a:1f:33:0d:41:33:ac:a5:9a:8a:96: 79:ce:02:7a:d5:e0:91:f6:77:0f:fa:21:85:cf:7c:f9:5b:b7: 30:95:54:cd:08:b1:5f:bd:50:2f:03:27:f7:12:1c:77:c7:0a: 24:61:c8:6f:4c:86:bd:20:64:17:22:a1:f1:68:9d:21:69:ea: dd:e1:95:7d:2d:e8:5b:91:71:1b:99:0e:36:9c:cd:a7:bc:fe: 37:61:1a:20:8c:b5:fa:a4:08:d5:cd:d4:0c:6c:c1:5b:99:6c: f8:ab:36:7c:1a:f8:00:e6:93:f9:e9:f6:72:e2:a1:f7:2e:ad: d1:b8:b1:22:3e:d6:55:42:73:31:4a:ae:a7:f5:24:0d:c6:ab: ff:e4:e4:89:43:e4:f5:b2:94:d5:3e:77:ce:f8:40:1d:bb:c0: 4d:55:ef:c4:a6:3a:0e:22:82:80:5a:2c:22:f3:53:d1:a2:b0: ac:28:e9:74:c0:39:2a:70:4f:08:5c:5c:95:1a:62:f2:25:a9: 20:37:5b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjQxMTIyMTkxODM3WhcNMjQxMTI5MTkxODM3WjAYMRYwFAYD VQQDEw02NzQwZDkwZC1lY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iWZH6ASpttVDdMtZJ6NLlol1yeVkpx+VxL2I0lVhG+DFlihmO4Ur/AepeBa usUad0HJdVzEbIPcQ9wcILQyqAv0vd8nUsIaeP7ajxz++V6+q80RYwB6LvoLTpkZ KbOi8IjzTQK3zW7zZYg0EYGG5To+uMLKBrJF5fu+Cqhfs667cNjXd0yo/wj/zxvX 2Rezet/jKfUho5rfX033YsK9xH2mwLJ5mNyG1GPwSSOvXWcUsN9lc1pDlGc349J4 BbC0pxPqxF8q9HEOVdEtsQZNS8TPLhvPC7v+TvnM7cPZ63WtrN7E1ZWCTNsCVQyP VRlp67BkEPLLGq5f+UQz4v4TlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkizeSY vQRkzuQ7Qmv8DZcJxsyLMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoVGMFrZOieBiMBj59M4z+BM4SmQ8cbmfX7xGuANzW5Xewl3jRwZrs vYetdrETYhEMbBj+l8/EyVaXP8O9Wh8zDUEzrKWaipZ5zgJ61eCR9ncP+iGFz3z5 W7cwlVTNCLFfvVAvAyf3Ehx3xwokYchvTIa9IGQXIqHxaJ0haerd4ZV9LehbkXEb mQ42nM2nvP43YRogjLX6pAjVzdQMbMFbmWz4qzZ8GvgA5pP56fZy4qH3Lq3RuLEi PtZVQnMxSq6n9SQNxqv/5OSJQ+T1spTVPnfO+EAdu8BNVe/EpjoOIoKAWiwi81PR orCsKOl0wDkqcE8IXFyVGmLyJakgN1uR -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org