$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft File: jIBwVSUDCAuWcjTt7IDAHT25bPY.mft (raw, json) Hash identifier: 98ffH8b+2vqxuQ2mU+GXGN7foYQc+4N6Zw811zM1Bj8= Subject key identifier: 4E:D7:8E:36:9F:9E:40:63:46:84:24:26:55:A6:C3:42:28:D2:AA:59 Authority key identifier: 8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 Certificate issuer: /CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft Manifest number: 04BF Signing time: Wed 20 Nov 2024 23:25:05 +0000 Manifest this update: Wed 20 Nov 2024 23:25:05 +0000 Manifest next update: Wed 27 Nov 2024 23:25:05 +0000 Files and hashes: 1: jIBwVSUDCAuWcjTt7IDAHT25bPY.crl (hash: TslZqzO4tzSTM5r4ufKs5sMFtqAGtvRUGz0UqU19oMo=) 2: DB5B36C600B511EC9A436071C4F9AE02.roa (hash: cKTNYx51Z3gLmWzIe/5RGmnrk/eCYtcRCpfvC99JSSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Validity Not Before: Nov 20 23:25:05 2024 GMT Not After : Nov 27 23:25:05 2024 GMT Subject: CN=673e6fd1-8f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:15:c4:c0:07:47:23:f4:cb:4a:67:f7:e9: 02:28:5f:2f:e8:a2:5e:69:b0:57:8d:fb:ec:21:dc: 01:e5:bf:c8:38:8d:77:f6:d0:97:36:d0:3a:5a:f1: 6f:6f:d6:fd:01:aa:72:2c:16:56:f5:8d:ee:b1:63: 84:17:4b:f6:e9:a9:c6:ef:44:c1:fb:ed:42:14:44: d1:95:95:93:31:fd:5a:00:c7:14:cd:33:10:cd:e3: bd:f4:e7:ec:31:17:c0:fb:c4:f5:e6:47:97:a9:a4: 42:62:cb:3b:36:e5:f7:0b:e6:15:85:df:d7:74:d5: c2:19:5b:19:a8:d9:72:90:55:19:cc:5d:68:a3:a5: e1:49:0c:a5:be:6d:cb:79:99:55:2a:0c:34:18:94: be:2b:d0:6c:ec:52:64:95:c1:17:02:6c:b3:50:20: 2d:bd:59:cb:ec:1b:70:aa:52:96:0a:d4:90:30:b6: 46:bc:1b:5b:79:72:12:d1:f5:2b:c6:31:b7:8a:70: 88:30:ed:41:33:ad:7e:9c:a9:b7:65:70:61:b7:c5: a2:f9:45:cb:2c:84:26:91:c5:ff:0f:7a:b7:58:3f: f6:4f:26:39:e0:65:f0:71:5b:c9:d3:e2:d0:d4:18: 29:ad:14:b4:c3:91:c4:c4:7a:ca:e8:71:3a:38:34: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:8E:36:9F:9E:40:63:46:84:24:26:55:A6:C3:42:28:D2:AA:59 X509v3 Authority Key Identifier: keyid:8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e6:2b:88:93:37:46:f0:42:8e:65:b1:67:0f:5a:b5:c9:9f: a5:57:6e:1f:5c:25:8e:2a:ec:5f:a3:e4:29:da:0c:fd:da:85: 6f:c5:84:c4:ae:e7:fb:24:90:76:8c:4e:92:10:9d:71:42:ea: 57:57:46:c0:9e:e7:fc:fe:b2:6e:33:d2:d2:bc:10:c4:d9:c2: 74:9f:5b:81:76:e3:c9:b7:00:ca:f7:9a:ad:8c:c9:45:2e:bc: 7d:11:44:11:21:7b:9d:31:ff:4a:d5:ab:0a:cb:1d:0c:19:8f: 2a:3b:05:03:ab:b1:2f:c4:5f:f8:e4:14:0e:27:91:a5:74:a7: 0a:f7:08:0f:5c:96:f4:b0:2a:c3:cd:78:be:77:cd:fa:34:28: 24:8e:63:9a:0e:58:d9:0c:e7:0f:a5:53:76:c9:07:25:eb:1e: 90:7b:b7:69:78:41:5d:d9:63:e0:05:c3:a7:11:2c:50:4b:fd: d1:91:e6:ea:fb:0d:86:58:04:ad:50:03:34:19:28:5c:a2:60: 54:ef:cb:ef:5a:63:7d:32:d7:11:ce:d2:98:0b:7b:b7:33:02: 9b:da:91:b7:a2:15:4f:cd:bd:82:ce:eb:6c:b1:d1:ae:d6:cb: 96:2c:cb:c4:35:9d:70:32:9e:ef:99:d1:d3:63:83:4a:f2:86: e0:80:37:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5QzExMTAvBgNVBAUTKDhDODA3MDU1MjUwMzA4MEI5NjcyMzRFREVDODBDMDFE M0RCOTZDRjYwHhcNMjQxMTIwMjMyNTA1WhcNMjQxMTI3MjMyNTA1WjAYMRYwFAYD VQQDEw02NzNlNmZkMS04ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAMVxMAHRyP0y0pn9+kCKF8v6KJeabBXjfvsIdwB5b/IOI139tCXNtA6WvFv b9b9AapyLBZW9Y3usWOEF0v26anG70TB++1CFETRlZWTMf1aAMcUzTMQzeO99Ofs MRfA+8T15keXqaRCYss7NuX3C+YVhd/XdNXCGVsZqNlykFUZzF1oo6XhSQylvm3L eZlVKgw0GJS+K9Bs7FJklcEXAmyzUCAtvVnL7BtwqlKWCtSQMLZGvBtbeXIS0fUr xjG3inCIMO1BM61+nKm3ZXBht8Wi+UXLLIQmkcX/D3q3WD/2TyY54GXwcVvJ0+LQ 1BgprRS0w5HExHrK6HE6ODTQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7Xjjaf nkBjRoQkJlWmw0Io0qpZMB8GA1UdIwQYMBaAFIyAcFUlAwgLlnI07eyAwB09uWz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlDMS9DNUU4Nzk3ODAw QjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENBdVdjalR0N0lEQUhUMjVi UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pJQndWU1VEQ0F1V2NqVHQ3SURBSFQyNWJQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTlDMS9DNUU4Nzk3ODAwQjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENB dVdjalR0N0lEQUhUMjViUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5iuIkzdG8EKOZbFnD1q1yZ+lV24fXCWOKuxfo+Qp2gz92oVvxYTE ruf7JJB2jE6SEJ1xQupXV0bAnuf8/rJuM9LSvBDE2cJ0n1uBduPJtwDK95qtjMlF Lrx9EUQRIXudMf9K1asKyx0MGY8qOwUDq7EvxF/45BQOJ5GldKcK9wgPXJb0sCrD zXi+d836NCgkjmOaDljZDOcPpVN2yQcl6x6Qe7dpeEFd2WPgBcOnESxQS/3Rkebq +w2GWAStUAM0GShcomBU78vvWmN9MtcRztKYC3u3MwKb2pG3ohVPzb2CzutssdGu 1suWLMvENZ1wMp7vmdHTY4NK8obggDdu -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org