$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft File: J8W-Ben8MLMSoGkQLf6vjqde90Q.mft (raw, json) Hash identifier: gQ0LCycwZI+mU4u9XPTPuHffHH7w1C/WtYdALZP8h7A= Subject key identifier: F2:CC:C0:14:AC:65:0C:BE:44:8C:66:7D:26:BB:A6:7D:F2:53:1C:46 Authority key identifier: 27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44 Certificate issuer: /CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft Manifest number: 0673 Signing time: Fri 22 Nov 2024 21:53:40 +0000 Manifest this update: Fri 22 Nov 2024 21:53:39 +0000 Manifest next update: Fri 29 Nov 2024 21:53:39 +0000 Files and hashes: 1: J8W-Ben8MLMSoGkQLf6vjqde90Q.crl (hash: oiNsotZyLmtWUaZeHfWdMZVv/pwAtjLe1ajNgoBD+eE=) 2: C45188B8554D11EBA9D33130C4F9AE02.roa (hash: oaZwV6VdiAWhU8LpCHEa1Wy0xGXTkB3v4AFCD4GLNIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB31B/serialNumber=27C5BE05E9FC30B312A069102DFEAF8EA75EF744 Validity Not Before: Nov 22 21:53:39 2024 GMT Not After : Nov 29 21:53:39 2024 GMT Subject: CN=6740fd64-de36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6e:85:0d:fb:7b:18:30:fe:d5:29:46:eb:c0: 35:e8:ce:48:d9:df:72:24:3e:5c:8c:c8:61:d6:21: 57:45:95:0a:91:8e:04:58:86:b3:2d:9d:f3:8b:44: 75:55:b0:fb:f5:b1:90:fa:d2:86:1b:f2:80:a3:0e: 90:ce:8b:03:db:00:08:d1:c2:e7:69:92:41:62:86: 99:38:8b:cd:4d:a1:d1:d3:07:1c:9b:9b:79:fb:85: a4:b6:e3:94:e6:f2:92:a9:90:8a:36:ae:54:7e:b3: ce:2d:5e:46:a4:58:03:a9:fb:88:24:91:35:f9:65: 21:b6:25:83:24:3e:a9:34:56:01:91:47:4c:be:c7: 73:45:bc:fd:fa:8a:a3:48:bb:19:df:9d:13:c4:cb: 4c:4e:d7:05:ca:0e:34:26:07:d4:56:65:db:e0:fa: 8f:8d:eb:fa:cd:f0:83:e7:4f:be:0b:7e:5d:be:bf: 02:b9:83:ad:18:11:ee:b7:4c:76:41:c7:f4:64:96: 3a:a3:42:5a:b8:11:9d:d0:e7:2a:db:1d:e8:9c:41: 0a:40:94:9c:af:ab:f8:76:91:3a:8d:2f:78:ba:bf: df:50:a7:44:70:f7:0b:2c:9c:f7:ef:49:5c:2b:1b: 0e:3e:6a:40:45:ac:06:8f:6b:72:4e:09:93:13:15: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:C0:14:AC:65:0C:BE:44:8C:66:7D:26:BB:A6:7D:F2:53:1C:46 X509v3 Authority Key Identifier: keyid:27:C5:BE:05:E9:FC:30:B3:12:A0:69:10:2D:FE:AF:8E:A7:5E:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8W-Ben8MLMSoGkQLf6vjqde90Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB31B/755208DC553E11EB9187F478C4F9AE02/J8W-Ben8MLMSoGkQLf6vjqde90Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:7e:9b:0d:cd:6b:91:af:e4:66:46:f7:41:7a:e0:1d:1c: f4:0d:ab:cd:f7:86:b8:3c:88:a6:c8:93:28:df:dd:26:65:3d: cd:e0:73:4c:c6:b0:bc:a9:df:88:45:1d:88:62:47:32:e0:6f: 80:02:57:3f:4a:eb:24:19:12:f6:27:66:57:f2:07:5c:fb:8f: 27:81:9e:f9:c1:a4:25:c5:0d:e0:9a:5d:cb:80:54:c4:44:d0: e0:17:cb:a7:82:3c:4d:f4:c7:62:d6:78:72:3b:ca:7c:8b:59: 13:85:a2:c9:7c:19:d1:03:13:fc:72:09:fe:d4:dc:87:62:63: 5f:74:90:ac:c7:ef:fd:b2:b4:bc:9d:3c:54:31:12:3c:2b:86: b4:cd:3e:c4:2f:06:33:6e:1d:60:f5:59:57:29:06:5e:2b:57: 58:6e:72:5b:98:52:33:30:76:d1:0b:0f:45:6d:47:e3:a9:b6: bc:80:2a:14:f6:02:bd:9b:40:60:b4:71:af:ec:a6:92:02:8d: 3c:cc:0e:c9:8d:d1:0a:8c:0f:ba:7a:fa:eb:d8:60:59:48:19: b3:6c:17:78:33:5c:b7:2f:09:08:51:56:53:a9:88:f5:4c:fa: 0f:2b:20:5a:73:9f:c6:0c:87:1c:a1:c3:c2:6a:53:d6:38:8f: 88:8f:6b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIzMUIxMTAvBgNVBAUTKDI3QzVCRTA1RTlGQzMwQjMxMkEwNjkxMDJERkVBRjhF QTc1RUY3NDQwHhcNMjQxMTIyMjE1MzM5WhcNMjQxMTI5MjE1MzM5WjAYMRYwFAYD VQQDEw02NzQwZmQ2NC1kZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk26FDft7GDD+1SlG68A16M5I2d9yJD5cjMhh1iFXRZUKkY4EWIazLZ3zi0R1 VbD79bGQ+tKGG/KAow6QzosD2wAI0cLnaZJBYoaZOIvNTaHR0wccm5t5+4WktuOU 5vKSqZCKNq5UfrPOLV5GpFgDqfuIJJE1+WUhtiWDJD6pNFYBkUdMvsdzRbz9+oqj SLsZ350TxMtMTtcFyg40JgfUVmXb4PqPjev6zfCD50++C35dvr8CuYOtGBHut0x2 Qcf0ZJY6o0JauBGd0Ocq2x3onEEKQJScr6v4dpE6jS94ur/fUKdEcPcLLJz370lc KxsOPmpARawGj2tyTgmTExViHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLMwBSs ZQy+RIxmfSa7pn3yUxxGMB8GA1UdIwQYMBaAFCfFvgXp/DCzEqBpEC3+r46nXvdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjMxQi83NTUyMDhEQzU1 M0UxMUVCOTE4N0Y0NzhDNEY5QUUwMi9KOFctQmVuOE1MTVNvR2tRTGY2dmpxZGU5 MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4Vy1CZW44TUxNU29Ha1FMZjZ2anFkZTkwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjMxQi83NTUyMDhEQzU1M0UxMUVCOTE4N0Y0NzhDNEY5QUUwMi9KOFctQmVuOE1M TVNvR2tRTGY2dmpxZGU5MFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWiH6bDc1rka/kZkb3QXrgHRz0DavN94a4PIimyJMo390mZT3N4HNM xrC8qd+IRR2IYkcy4G+AAlc/SuskGRL2J2ZX8gdc+48ngZ75waQlxQ3gml3LgFTE RNDgF8ungjxN9Mdi1nhyO8p8i1kThaLJfBnRAxP8cgn+1NyHYmNfdJCsx+/9srS8 nTxUMRI8K4a0zT7ELwYzbh1g9VlXKQZeK1dYbnJbmFIzMHbRCw9FbUfjqba8gCoU 9gK9m0BgtHGv7KaSAo08zA7JjdEKjA+6evrr2GBZSBmzbBd4M1y3LwkIUVZTqYj1 TPoPKyBac5/GDIccocPCalPWOI+Ij2sV -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org