$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: oRMg5BLaw2MQ8M3ojLkXIURL8+19H0A7GYvI/m34zC4= Subject key identifier: 06:09:A6:26:2F:2D:11:1F:9D:B1:BF:DC:E1:0C:C3:4C:4E:82:90:DB Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 0243 Signing time: Sat 23 Nov 2024 01:20:21 +0000 Manifest this update: Sat 23 Nov 2024 01:20:21 +0000 Manifest next update: Sat 30 Nov 2024 01:20:21 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: QTKehfKs8tl3+lrQexKRwT2r/yheczYXF+pIUm9WFZA=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: Bg1GhaBWG9ZnbioiTw4VxZi4hDCzIRIbJ2r9iNJxCVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: Nov 23 01:20:21 2024 GMT Not After : Nov 30 01:20:21 2024 GMT Subject: CN=67412dd5-e244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:5a:22:e7:6d:12:ac:fb:ad:61:dd:b2:7f: 13:ac:aa:a1:d2:30:cf:51:f4:c4:36:8d:68:04:f1: ca:b4:ca:b9:2f:59:5f:45:9a:a7:ef:4c:c5:6a:5c: 92:db:72:89:15:e3:7c:5e:ff:78:be:bf:51:89:51: 96:df:22:68:50:c5:4d:17:fd:6e:57:a4:c2:c4:35: d4:1d:6b:35:7e:83:1f:7a:bb:9e:da:0c:49:0b:5e: 90:52:fe:8a:d8:ae:99:4d:7b:29:18:1f:c4:2c:17: bd:5c:27:8a:ba:22:aa:3a:54:0b:49:d5:50:83:fc: d2:5d:f5:1e:20:ac:9f:74:68:66:d0:ec:de:cc:b5: 60:3c:40:f2:87:f0:a2:66:47:9c:a5:b6:f9:d0:18: 5d:d4:ff:47:c6:36:22:57:1e:d5:33:ea:b8:ad:50: 36:6a:87:2b:dd:58:93:ee:4d:28:28:b0:e2:b0:84: 35:06:d2:8b:93:2e:83:69:1a:bb:8a:ea:32:93:f8: 37:3b:d8:d4:19:18:fa:d8:d1:98:db:c2:e2:92:3a: a0:b2:cb:4d:67:7c:a9:1c:52:ec:46:ad:1a:43:d9: 5f:f4:26:d6:7b:2b:10:0a:ea:49:e3:89:aa:38:98: 4e:33:6d:75:c0:4e:9e:ad:8e:43:3d:f5:30:db:66: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:A6:26:2F:2D:11:1F:9D:B1:BF:DC:E1:0C:C3:4C:4E:82:90:DB X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5d:9e:e8:a3:ad:6b:63:6f:39:f6:e1:0e:2e:35:e0:c7:a7: e1:b6:7e:fd:4e:90:00:24:88:7c:2a:37:fb:62:46:07:3a:f6: 28:f5:8b:6c:36:aa:73:f1:83:35:5f:ae:c4:f6:ac:0c:9c:de: 36:ab:87:ef:03:87:46:cb:77:b6:21:a6:ff:b4:ba:cf:ff:0d: eb:1c:35:31:2c:8e:ba:39:1e:46:cc:7f:a7:c7:76:ab:e1:b3: 97:cd:03:3e:4e:4c:fd:a0:23:3d:19:b7:9e:1b:a3:49:e3:b6: 43:05:4f:fe:a5:b7:9e:0a:8a:54:3e:61:7b:ef:b5:15:39:a7: a8:0e:08:3f:e4:84:ef:33:ad:71:ee:b9:3a:ff:7b:32:92:69: 74:cb:1d:a6:f8:77:26:28:71:18:c7:d2:8c:3b:cd:5c:f6:af: 1d:ef:7b:26:d9:68:4f:80:d6:ca:d5:e5:cc:68:a4:36:e4:19: 4f:57:71:f6:01:34:38:45:6a:04:06:03:45:85:ee:ae:9e:f0: 97:35:f9:98:2c:02:63:06:83:db:d1:b5:9b:75:5c:51:42:53: 8c:22:16:bc:22:42:69:50:dd:e4:29:00:d4:88:c1:f1:43:f1: e3:e9:f0:2f:2d:2b:29:a2:84:39:25:78:79:43:08:62:ca:ce: 9c:ee:a3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjQxMTIzMDEyMDIxWhcNMjQxMTMwMDEyMDIxWjAYMRYwFAYD VQQDEw02NzQxMmRkNS1lMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv5aIudtEqz7rWHdsn8TrKqh0jDPUfTENo1oBPHKtMq5L1lfRZqn70zFalyS 23KJFeN8Xv94vr9RiVGW3yJoUMVNF/1uV6TCxDXUHWs1foMferue2gxJC16QUv6K 2K6ZTXspGB/ELBe9XCeKuiKqOlQLSdVQg/zSXfUeIKyfdGhm0OzezLVgPEDyh/Ci Zkecpbb50Bhd1P9HxjYiVx7VM+q4rVA2aocr3ViT7k0oKLDisIQ1BtKLky6DaRq7 iuoyk/g3O9jUGRj62NGY28LikjqgsstNZ3ypHFLsRq0aQ9lf9CbWeysQCupJ44mq OJhOM211wE6erY5DPfUw22YktQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYJpiYv LREfnbG/3OEMw0xOgpDbMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfXZ7oo61rY2859uEOLjXgx6fhtn79TpAAJIh8Kjf7YkYHOvYo9Yts Nqpz8YM1X67E9qwMnN42q4fvA4dGy3e2Iab/tLrP/w3rHDUxLI66OR5GzH+nx3ar 4bOXzQM+Tkz9oCM9GbeeG6NJ47ZDBU/+pbeeCopUPmF777UVOaeoDgg/5ITvM61x 7rk6/3sykml0yx2m+HcmKHEYx9KMO81c9q8d73sm2WhPgNbK1eXMaKQ25BlPV3H2 ATQ4RWoEBgNFhe6unvCXNfmYLAJjBoPb0bWbdVxRQlOMIha8IkJpUN3kKQDUiMHx Q/Hj6fAvLSspooQ5JXh5Qwhiys6c7qMd -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org