$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: Gh8kL9GGFaQxPm4kPI05JDDf6/rW0j+ZEDJgDs2HirI= Subject key identifier: 7B:D5:EE:60:E1:E8:5C:BF:4D:4B:F5:37:C9:1D:15:20:66:0B:60:1C Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 3450 Signing time: Fri 22 Nov 2024 14:18:09 +0000 Manifest this update: Fri 22 Nov 2024 14:18:08 +0000 Manifest next update: Fri 29 Nov 2024 14:18:08 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: 7xmlNPmNorAoXvmwG02lmdT3LMSRyP0rNG3Kdy4MiHA=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 4h7J78rlX+2vspK7F8UUEGHUI6kq314rWzgttdFWu+g=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 8FFLZzcqxB9olqH/wxHcdyGypFHaehu5WrrAFHlsuD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Nov 22 14:18:08 2024 GMT Not After : Nov 29 14:18:08 2024 GMT Subject: CN=674092a1-435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:c7:dc:ed:03:80:52:9c:b3:bf:29:52:96: 6d:5a:b6:4d:45:7b:67:58:3c:1b:10:40:f3:f0:b3: 72:ae:4e:0d:1b:10:35:fa:bb:bc:23:1e:0b:66:7c: 63:7f:11:d0:59:c8:d8:e8:37:a1:42:1b:0d:40:26: 05:d7:71:bd:5f:14:21:74:b1:3d:26:4a:b0:7d:91: ea:b3:b8:42:92:e8:47:44:4f:fc:35:23:e3:d7:87: 8e:0b:9a:f4:06:da:e6:1d:3e:6d:08:2c:1d:9f:ab: 3c:a6:1a:5d:3c:07:86:59:af:b5:19:10:ad:4c:93: aa:49:26:2a:cb:0a:ca:f3:2e:88:26:b9:16:52:5f: 41:de:7f:2e:d1:cd:77:f0:74:e1:04:ee:fa:6e:23: d6:dc:b2:1c:1d:36:af:06:af:a8:47:05:d0:23:a1: 01:65:e5:ef:9c:f1:ab:56:e1:46:e8:40:ec:16:18: fc:d7:d5:73:05:18:49:c3:92:cc:2c:a0:38:95:ae: b0:19:36:4a:54:4d:e4:91:fa:b8:e9:30:67:6e:53: 99:16:1c:bd:88:fa:fa:7d:ff:5f:2e:1f:f0:5d:1b: 04:79:f9:21:2b:83:7e:f7:9b:97:6a:8f:78:21:69: 04:7a:b3:3a:0e:5a:0a:e6:ed:83:02:12:60:f3:af: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D5:EE:60:E1:E8:5C:BF:4D:4B:F5:37:C9:1D:15:20:66:0B:60:1C X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:f6:c2:b3:fd:ca:f1:8d:75:5d:83:9b:19:ae:64:ab:3b:0e: 0b:f0:20:10:c0:83:3d:d4:9c:58:f9:63:ee:78:62:46:4c:e5: 4b:f9:b0:83:40:24:e3:d9:3e:35:fd:61:d3:24:71:5f:1d:7d: 9f:59:23:94:55:1f:f4:3c:6a:c5:7e:df:f5:cb:28:e1:4b:4f: ad:08:c0:d0:8d:8c:63:9c:dd:a2:27:ff:ea:23:4a:97:7e:b9: f8:85:8e:76:36:42:51:99:6f:01:9b:e8:c3:a9:0e:b7:d8:7d: e0:fa:df:60:9b:29:f8:6c:bc:ff:e9:c5:ea:a4:9a:d7:30:6f: 71:dd:ef:13:f5:5a:90:2c:8c:5e:64:f0:6d:08:79:70:af:67: 77:7e:25:d1:77:d3:43:0c:8c:dc:f8:ab:d7:f9:ad:6b:03:ca: 27:ff:6a:bd:02:28:23:87:34:16:f6:3f:8b:86:24:50:90:8a: d9:57:03:13:41:79:c1:23:0a:b9:f2:c0:d6:23:b3:c2:06:d6: 9c:b8:ce:24:a5:2a:a5:9d:97:aa:86:df:23:6e:41:7f:e9:d3: b9:dd:35:5d:ef:25:99:1a:81:d1:5b:3f:91:50:95:69:c5:6d: 19:b2:86:f0:64:d6:1e:99:c5:96:4e:32:cc:d0:33:a6:f1:18: c0:77:99:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjQxMTIyMTQxODA4WhcNMjQxMTI5MTQxODA4WjAYMRYwFAYD VQQDEw02NzQwOTJhMS00MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uvH3O0DgFKcs78pUpZtWrZNRXtnWDwbEEDz8LNyrk4NGxA1+ru8Ix4LZnxj fxHQWcjY6DehQhsNQCYF13G9XxQhdLE9JkqwfZHqs7hCkuhHRE/8NSPj14eOC5r0 BtrmHT5tCCwdn6s8phpdPAeGWa+1GRCtTJOqSSYqywrK8y6IJrkWUl9B3n8u0c13 8HThBO76biPW3LIcHTavBq+oRwXQI6EBZeXvnPGrVuFG6EDsFhj819VzBRhJw5LM LKA4la6wGTZKVE3kkfq46TBnblOZFhy9iPr6ff9fLh/wXRsEefkhK4N+95uXao94 IWkEerM6DloK5u2DAhJg8683YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvV7mDh 6Fy/TUv1N8kdFSBmC2AcMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD9sKz/crxjXVdg5sZrmSrOw4L8CAQwIM91JxY+WPueGJGTOVL+bCD QCTj2T41/WHTJHFfHX2fWSOUVR/0PGrFft/1yyjhS0+tCMDQjYxjnN2iJ//qI0qX frn4hY52NkJRmW8Bm+jDqQ632H3g+t9gmyn4bLz/6cXqpJrXMG9x3e8T9VqQLIxe ZPBtCHlwr2d3fiXRd9NDDIzc+KvX+a1rA8on/2q9AigjhzQW9j+LhiRQkIrZVwMT QXnBIwq58sDWI7PCBtacuM4kpSqlnZeqht8jbkF/6dO53TVd7yWZGoHRWz+RUJVp xW0ZsobwZNYemcWWTjLM0DOm8RjAd5ni -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org