$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: Gm+Zc6dzdQ8bGZvRm9InhlEzcHv8cVc99hQ5CGlEcFc= Subject key identifier: F1:D4:4F:60:A9:EC:F8:6A:8B:A4:E2:70:02:B4:43:AB:68:40:EA:08 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 1F Signing time: Wed 23 Oct 2024 06:31:56 +0000 Manifest this update: Wed 23 Oct 2024 06:31:56 +0000 Manifest next update: Wed 30 Oct 2024 06:31:56 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: xAoSvhKDNrO/i490pS21Ni8E6LKXJwQc36pto7KVrZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Oct 23 06:31:56 2024 GMT Not After : Oct 30 06:31:56 2024 GMT Subject: CN=6718985c-3e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:79:1f:8b:34:8b:ed:1b:20:d1:32:77:d0: 96:aa:b9:38:93:c7:59:de:fa:f9:46:e4:d8:e1:85: 75:de:8d:b6:83:b0:6e:e1:52:9c:86:df:7e:c7:84: 44:45:b3:25:e1:85:ff:44:1b:0f:f6:70:3c:74:64: 29:94:c8:63:c9:27:89:84:df:4f:45:e4:d9:97:1e: 15:38:b0:ea:c4:a2:3a:5a:41:2d:50:c9:e2:ef:8d: 7b:42:b8:49:06:90:0d:af:96:64:c6:ce:25:38:d8: 5d:33:72:98:ba:32:37:b9:a6:84:0a:fd:ee:76:e3: 8e:be:b5:b9:67:74:24:7c:30:d4:1c:dd:b5:f6:80: 78:d1:a0:09:0d:3d:d7:f6:0b:9b:88:66:17:e1:4a: 2b:ef:bf:74:17:02:05:e6:a0:85:df:63:bb:c0:2a: 7c:c4:95:bd:7e:65:ab:e8:75:b2:fb:ea:e2:52:85: 5e:37:1a:0d:00:9f:f9:b5:ad:21:b6:5a:9e:85:25: 63:39:f5:02:77:a3:5c:2d:d6:a6:30:b0:93:d1:99: db:63:e1:b2:b3:be:b1:86:1a:f7:07:61:d9:60:f1: 9d:a3:93:cd:4c:57:f1:6b:ca:48:0b:c6:24:7d:e3: 05:9a:bf:6a:c3:e7:f3:7c:6b:2d:fe:fc:2e:be:4b: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D4:4F:60:A9:EC:F8:6A:8B:A4:E2:70:02:B4:43:AB:68:40:EA:08 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:58:5c:68:ff:1a:db:f7:e3:b9:a7:fd:41:dc:d7:ed:f4:59: ff:3f:e7:f6:01:9a:6c:c0:cd:e9:3c:4d:a0:43:c4:87:81:4f: f9:08:6d:6c:85:ab:09:f3:09:a2:95:fe:04:0c:ef:5c:eb:0e: 1e:2e:3f:20:1d:19:f9:bd:dc:da:04:47:60:39:e5:af:d0:4b: 8b:18:c4:14:dc:bf:74:2c:38:1e:0b:8a:8d:5d:e5:56:db:a6: dc:32:5d:94:2e:d7:28:50:9c:8a:bb:95:94:f7:da:12:1b:aa: f3:de:91:55:64:15:19:3a:40:b2:25:d4:bf:97:09:1f:1b:95: 61:00:ba:c3:cc:bf:cc:77:d9:ef:d3:e1:8c:9a:2b:77:e2:d0: c8:cb:11:c8:c5:e2:05:07:95:71:24:b0:9c:52:e5:ca:11:f4: 79:8c:27:fe:98:6b:2b:04:24:bd:ae:98:67:ca:79:57:ef:fc: 71:c4:7a:ca:7b:5d:af:b5:b1:78:33:59:5a:ec:48:39:9a:e6: 16:f6:5a:01:00:fb:c2:66:35:88:74:67:bd:2c:2d:fe:c8:f0: 76:bf:56:69:5a:8c:94:1e:bc:90:e5:7c:73:65:2d:11:e4:74: a2:e9:3b:b0:b1:5a:8f:d3:39:2a:c8:d5:ff:6a:f4:51:85:ca: ae:7d:53:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEMxQjExMC8GA1UEBRMoOEU4QjM0NjM5RUE1NERGODEwQjkyQkNCQTc0MjcwNEU0 Qzg4NDJDMjAeFw0yNDEwMjMwNjMxNTZaFw0yNDEwMzAwNjMxNTZaMBgxFjAUBgNV BAMTDTY3MTg5ODVjLTNlNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0WnkfizSL7Rsg0TJ30JaquTiTx1ne+vlG5NjhhXXejbaDsG7hUpyG337HhERF syXhhf9EGw/2cDx0ZCmUyGPJJ4mE309F5NmXHhU4sOrEojpaQS1QyeLvjXtCuEkG kA2vlmTGziU42F0zcpi6Mje5poQK/e52446+tblndCR8MNQc3bX2gHjRoAkNPdf2 C5uIZhfhSivvv3QXAgXmoIXfY7vAKnzElb1+ZavodbL76uJShV43Gg0An/m1rSG2 Wp6FJWM59QJ3o1wt1qYwsJPRmdtj4bKzvrGGGvcHYdlg8Z2jk81MV/FrykgLxiR9 4wWav2rD5/N8ay3+/C6+S9q9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8dRPYKns +GqLpOJwArRDq2hA6ggwHwYDVR0jBBgwFoAUjos0Y56lTfgQuSvLp0JwTkyIQsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0QzFCL0Q5NjVCQTQwNjQx QjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam9zMFk1NmxUZmdRdVN2THAwSndUa3lJUXNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 QzFCL0Q5NjVCQTQwNjQxQjExRUY5ODkxNTQ3RkM0RjlBRTAyL2pvczBZNTZsVGZn UXVTdkxwMEp3VGt5SVFzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxYXGj/Gtv347mn/UHc1+30Wf8/5/YBmmzAzek8TaBDxIeBT/kIbWyF qwnzCaKV/gQM71zrDh4uPyAdGfm93NoER2A55a/QS4sYxBTcv3QsOB4Lio1d5Vbb ptwyXZQu1yhQnIq7lZT32hIbqvPekVVkFRk6QLIl1L+XCR8blWEAusPMv8x32e/T 4YyaK3fi0MjLEcjF4gUHlXEksJxS5coR9HmMJ/6YaysEJL2umGfKeVfv/HHEesp7 Xa+1sXgzWVrsSDma5hb2WgEA+8JmNYh0Z70sLf7I8Ha/VmlajJQevJDlfHNlLRHk dKLpO7CxWo/TOSrI1f9q9FGFyq59U9Y= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org