$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: yxb80tQAPreTVc/gY8v99g+uKR2kgB7xwL3EuVL/bUc= Subject key identifier: 25:E2:0B:CB:12:E4:37:03:4A:0B:28:6C:FB:CF:B7:B3:4C:AA:A9:76 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 15F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 15D2 Signing time: Wed 20 Nov 2024 16:43:44 +0000 Manifest this update: Wed 20 Nov 2024 16:43:43 +0000 Manifest next update: Wed 27 Nov 2024 16:43:43 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: ho2de6/flvduaz6mqFuUiQZeBi2ZDILWk+cRP6D5CLk=) 2: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: Q2kZN7QvQgBqoWWAZ0d5JV7Ik/xKOmBtwv1GiK5L6BY=) 3: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: gYsoSmLyEmfNsV6SexFxZ+i2l3QJSOLw2j/lALUlIrI=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: HRxLdFHU7v9ktQmRHzKA7IbwxRL+QI1P77qnL5kGPjQ=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: kaCh08b2Mg8Eik2IuIhloga+8nnEdGyPNQCWzUmLk58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5625 (0x15f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Nov 20 16:43:43 2024 GMT Not After : Nov 27 16:43:43 2024 GMT Subject: CN=673e11c0-9713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:5f:09:52:16:0c:b3:3a:d2:03:b5:e7:72: 85:ab:14:30:d8:11:b2:43:6f:de:36:f8:64:0e:de: d4:da:42:b7:1b:aa:d8:b0:58:b1:95:f0:73:19:db: a9:bc:67:b5:e0:fb:5e:2d:39:21:84:0e:f4:06:9e: 3f:dd:71:2f:c4:1b:e9:32:8d:b6:d0:12:ad:09:f5: 02:8e:1f:74:68:ad:01:bf:0c:9e:50:bb:78:5e:0d: 96:dc:58:56:5c:fe:0a:6d:d3:4a:a2:fc:c8:8c:f5: d0:8d:43:c4:49:ec:85:5f:b7:c0:34:8e:46:cf:26: bd:e5:0b:43:0a:c2:9f:3c:a0:66:36:97:2d:70:88: 71:9d:14:dd:62:e4:73:86:f3:d4:20:9d:a0:11:c1: 59:8c:68:b4:0d:39:dd:e9:d1:c9:82:e4:7c:7d:24: d1:3d:8a:88:99:dc:17:18:60:37:96:70:f5:d9:14: ff:b9:d4:4f:11:b4:e5:28:d0:3f:65:cc:2e:97:ed: c7:2d:3e:56:31:0d:c1:3b:b3:8c:1f:42:68:92:fc: e3:79:cc:f1:06:a9:6a:51:36:fa:a2:0c:e4:1f:6c: 0c:38:dd:d4:81:bc:ee:89:a1:4c:6e:15:92:36:ad: 3c:42:78:ae:ae:4d:0d:9d:e9:c3:1c:9a:2c:bb:db: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E2:0B:CB:12:E4:37:03:4A:0B:28:6C:FB:CF:B7:B3:4C:AA:A9:76 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2c:9c:60:ce:6f:dc:77:3f:ed:0d:a2:9e:30:7d:7a:8c:15: 91:5d:fe:1f:52:f5:86:0e:1f:75:d7:ab:d6:89:4b:32:02:24: 39:af:f0:fa:9a:b5:4a:c4:52:83:36:27:e3:7f:b1:2b:83:ed: 40:43:c4:54:32:43:17:1b:94:ef:97:75:e2:44:e6:15:16:1b: 80:e8:b1:69:bb:19:c9:16:1b:bd:eb:12:51:36:4b:87:37:b7: 67:58:38:90:57:bc:7b:00:10:78:33:23:cd:4f:67:dd:30:53: d0:ac:c8:b9:f4:ed:c9:32:e9:68:1d:0a:8d:c5:50:ad:5f:b4: e2:c9:7c:7a:2c:28:67:69:1d:c8:5f:50:02:ab:eb:ce:81:8a: f0:5c:18:e9:58:28:64:73:44:87:62:3a:5a:d2:1d:84:fd:25: 13:44:00:3d:1e:17:2d:67:74:bc:c1:25:c6:fe:dc:08:dc:73: 47:e1:b5:d3:3d:e2:de:1d:de:39:c0:50:5a:cd:0c:4e:d6:00: 81:45:b3:2a:85:20:8e:7b:b9:43:44:c1:a1:9c:96:88:bf:5d: 6c:b0:ce:16:15:bb:03:a0:11:b8:89:df:ea:54:34:e7:c4:10: ea:e9:bc:bc:51:32:67:7c:48:90:a4:ae:72:66:cc:21:57:37: 9e:be:88:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjQxMTIwMTY0MzQzWhcNMjQxMTI3MTY0MzQzWjAYMRYwFAYD VQQDEw02NzNlMTFjMC05NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIJfCVIWDLM60gO153KFqxQw2BGyQ2/eNvhkDt7U2kK3G6rYsFixlfBzGdup vGe14PteLTkhhA70Bp4/3XEvxBvpMo220BKtCfUCjh90aK0BvwyeULt4Xg2W3FhW XP4KbdNKovzIjPXQjUPESeyFX7fANI5Gzya95QtDCsKfPKBmNpctcIhxnRTdYuRz hvPUIJ2gEcFZjGi0DTnd6dHJguR8fSTRPYqImdwXGGA3lnD12RT/udRPEbTlKNA/ Zcwul+3HLT5WMQ3BO7OMH0JokvzjeczxBqlqUTb6ogzkH2wMON3UgbzuiaFMbhWS Nq08Qniurk0NnenDHJosu9tBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXiC8sS 5DcDSgsobPvPt7NMqql2MB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdLJxgzm/cdz/tDaKeMH16jBWRXf4fUvWGDh9116vWiUsyAiQ5r/D6 mrVKxFKDNifjf7Erg+1AQ8RUMkMXG5Tvl3XiROYVFhuA6LFpuxnJFhu96xJRNkuH N7dnWDiQV7x7ABB4MyPNT2fdMFPQrMi59O3JMuloHQqNxVCtX7TiyXx6LChnaR3I X1ACq+vOgYrwXBjpWChkc0SHYjpa0h2E/SUTRAA9HhctZ3S8wSXG/twI3HNH4bXT PeLeHd45wFBazQxO1gCBRbMqhSCOe7lDRMGhnJaIv11ssM4WFbsDoBG4id/qVDTn xBDq6by8UTJnfEiQpK5yZswhVzeevoi7 -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:05 2024 by rpki-client on console-ams.rpki-client.org