$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: q2bEHVCQ7rVBqa0ireONrL4Mn400vnM6hVzgb+Y6HGY= Subject key identifier: 7B:2E:8A:95:57:D6:4E:7E:F4:EE:34:98:FB:82:AB:1E:FC:62:D5:0A Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0D79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0D5A Signing time: Fri 22 Nov 2024 17:27:30 +0000 Manifest this update: Fri 22 Nov 2024 17:27:30 +0000 Manifest next update: Fri 29 Nov 2024 17:27:30 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: 7hJvwIQViZH0SmYLFlr4AmlxjDe6ys2rRLecJrCA7oc=) 2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: nRolTUvoM2oc72g6r8F/q9mfZ5QbRgoufZDaHbYWS14=) 3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: bGy4c/mxWImIv0YqS2vs9eOAtgoEFpWUBcGJektAPIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3449 (0xd79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Nov 22 17:27:30 2024 GMT Not After : Nov 29 17:27:30 2024 GMT Subject: CN=6740bf02-6946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:db:df:9f:dc:77:3a:be:e1:b9:d0:ed:9a: bf:61:20:28:19:47:63:ca:43:2f:02:ee:2a:b8:ab: 2f:8f:e4:fc:de:e1:13:0f:74:d8:ba:fa:d2:9d:83: 39:b4:01:08:88:06:ee:52:53:b4:be:93:c7:ed:0a: bc:e7:b5:54:e0:98:3c:cb:92:3d:44:8e:85:62:bd: 57:f9:b9:fe:fe:94:31:5d:6f:e4:e9:e2:d8:03:59: 2a:ae:a2:75:3d:a7:bb:2b:05:4d:87:89:a6:c5:03: 02:94:81:f6:d2:e5:fd:d4:5b:81:ae:54:a0:80:cb: b0:b9:e1:b2:8f:5e:f2:8f:26:23:93:d5:34:8e:eb: 43:e0:43:ba:5c:1d:55:aa:81:95:dc:b3:0d:e7:5f: 76:17:ef:cc:bc:ce:2f:71:72:63:f5:1f:54:13:0f: e1:33:bb:78:2e:04:b6:2c:93:38:72:b0:84:ed:81: 84:d0:23:d4:71:2b:4c:46:0a:c3:22:76:d1:a4:56: 92:03:57:2d:f1:98:d7:27:ec:8b:59:d7:09:7c:22: 5b:41:dd:87:a1:64:b9:2e:fe:2a:e6:20:2c:1c:41: ad:69:59:5f:a6:ba:11:59:71:7d:91:b3:f9:ec:59: de:0d:b9:40:c5:82:4b:3b:9b:62:a0:27:35:fa:93: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2E:8A:95:57:D6:4E:7E:F4:EE:34:98:FB:82:AB:1E:FC:62:D5:0A X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c9:ed:38:47:cd:23:ef:e9:e9:3b:55:41:36:80:03:ab:f2: c3:76:48:b6:59:3b:82:6f:06:2f:92:fc:e3:8b:06:0a:5d:ea: 00:f2:e7:39:74:e7:34:e8:6d:16:6a:0d:46:b7:e5:92:d4:9e: ea:13:85:0f:29:44:8e:cf:d1:96:9a:66:e2:00:ab:0f:67:9d: 12:da:3e:2d:54:91:80:97:2f:ff:4a:ce:16:77:8d:93:3f:8c: 38:ba:4f:36:a4:cf:e4:be:69:02:92:01:96:c3:22:61:40:50: ea:db:bc:17:09:d6:2b:0b:df:70:27:76:ce:80:f3:61:d4:c1: c5:4b:db:2d:ba:d7:d1:9c:bf:3a:03:81:a9:e2:57:cf:e0:10: 6d:4f:a9:29:30:1d:25:4d:32:c5:0d:be:fd:bd:9b:65:f2:f3: ca:f1:2e:29:bb:74:3b:bc:f7:aa:c5:9f:e3:90:c2:81:1b:71: e0:9a:b1:83:8f:2b:1d:39:87:d1:ca:dc:53:b1:07:2d:5e:dc: 4f:3b:f9:4d:bb:f0:99:b6:02:13:22:30:b4:96:11:98:7c:34: cc:cc:c1:14:c9:16:3d:24:09:cb:b1:92:79:15:1b:d9:64:7b: cc:5a:6b:78:62:28:35:2b:3a:3d:83:3a:2c:6b:32:6a:12:ee: 6e:8a:85:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjQxMTIyMTcyNzMwWhcNMjQxMTI5MTcyNzMwWjAYMRYwFAYD VQQDEw02NzQwYmYwMi02OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArofb35/cdzq+4bnQ7Zq/YSAoGUdjykMvAu4quKsvj+T83uETD3TYuvrSnYM5 tAEIiAbuUlO0vpPH7Qq857VU4Jg8y5I9RI6FYr1X+bn+/pQxXW/k6eLYA1kqrqJ1 Pae7KwVNh4mmxQMClIH20uX91FuBrlSggMuwueGyj17yjyYjk9U0jutD4EO6XB1V qoGV3LMN5192F+/MvM4vcXJj9R9UEw/hM7t4LgS2LJM4crCE7YGE0CPUcStMRgrD InbRpFaSA1ct8ZjXJ+yLWdcJfCJbQd2HoWS5Lv4q5iAsHEGtaVlfproRWXF9kbP5 7FneDblAxYJLO5tioCc1+pNLBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsuipVX 1k5+9O40mPuCqx78YtUKMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPye04R80j7+npO1VBNoADq/LDdki2WTuCbwYvkvzjiwYKXeoA8uc5 dOc06G0Wag1Gt+WS1J7qE4UPKUSOz9GWmmbiAKsPZ50S2j4tVJGAly//Ss4Wd42T P4w4uk82pM/kvmkCkgGWwyJhQFDq27wXCdYrC99wJ3bOgPNh1MHFS9stutfRnL86 A4Gp4lfP4BBtT6kpMB0lTTLFDb79vZtl8vPK8S4pu3Q7vPeqxZ/jkMKBG3HgmrGD jysdOYfRytxTsQctXtxPO/lNu/CZtgITIjC0lhGYfDTMzMEUyRY9JAnLsZJ5FRvZ ZHvMWmt4Yig1Kzo9gzosazJqEu5uioVX -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org