$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: ixVhDXqhTwLAtlGo1xFgj4lhl4pOK0FdeYfUAVtRnPY= Subject key identifier: CD:3F:AC:0E:DE:1F:00:E5:AA:65:80:7D:BF:BA:AE:03:3C:74:EE:E2 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 015C Signing time: Sat 23 Nov 2024 02:22:45 +0000 Manifest this update: Sat 23 Nov 2024 02:22:44 +0000 Manifest next update: Sat 30 Nov 2024 02:22:44 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: o9AraERMQ3DVKCBB1byGIkYqlhDr8Obtn+VEyjXS4kE=) 2: 5CBBCAEA90B211EDB7A3471FC4F9AE02.roa (hash: 3QVoPynRLM5/JWYrC/nr9ZnhrZhvaYNCtt2d4cwNET0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Nov 23 02:22:44 2024 GMT Not After : Nov 30 02:22:44 2024 GMT Subject: CN=67413c74-b3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:71:b3:ae:72:75:4a:84:1c:48:a7:bd:71: 68:f4:a1:b4:f1:61:64:1b:8b:84:c3:09:32:75:c8: cb:d1:87:fc:14:f4:e9:59:1d:1e:b5:6a:7e:bc:e2: a9:65:8b:42:59:89:1a:7c:72:b7:65:56:da:c2:30: e7:99:32:2c:a7:46:85:4c:f7:ef:46:38:e8:35:9b: 29:3f:cc:2f:a8:4e:a0:2e:bb:db:ab:3e:ef:82:03: 04:aa:87:7b:e9:67:f0:8a:49:9e:4d:f4:cd:30:2a: 5b:5e:e8:13:46:24:dc:01:a6:70:45:3d:6b:e8:80: 9f:92:97:a7:7d:45:87:67:68:ba:ec:af:f1:e5:af: 7b:38:66:46:a5:03:b3:ba:f5:cd:91:fe:a8:eb:83: 91:fa:d3:4a:b8:67:39:6b:59:ef:d2:23:82:ad:ad: 4c:cb:38:e7:07:eb:fe:10:d7:e4:09:40:88:e2:04: 94:0d:7e:17:ca:71:09:a3:e7:79:2f:10:59:ca:f9: 43:60:d2:c6:af:36:84:f0:36:00:9b:c5:49:86:f5: f0:d7:f8:7d:06:ba:da:e4:c5:72:df:5f:60:88:55: 54:90:92:65:23:b9:8a:70:76:61:8d:94:df:77:ac: 0f:e9:95:d2:03:f1:e4:d9:ea:17:51:13:81:00:95: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:AC:0E:DE:1F:00:E5:AA:65:80:7D:BF:BA:AE:03:3C:74:EE:E2 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:7f:46:3b:ef:61:54:f2:a2:72:f7:4d:42:1a:f9:27:8b: 07:f9:fa:81:20:03:b8:60:a0:e7:51:81:43:a4:ac:49:e7:a9: cc:89:78:c3:98:29:e9:ea:39:e2:a8:ef:62:f6:91:00:e9:c8: 6d:10:3b:d6:87:69:aa:13:80:cb:13:7a:e0:1a:5a:b0:4f:a0: 74:29:22:27:5d:d2:93:0e:31:72:17:2d:5c:43:e8:d7:d7:9f: 57:1e:36:3c:fc:7d:f0:67:c4:65:a0:c0:d3:96:b0:5c:e6:d6: 26:ad:b8:f4:d0:98:db:a7:ec:10:1d:e6:78:39:ad:4d:5a:c1: c3:85:8a:c8:79:fb:bf:a5:70:fe:3a:d1:11:01:2b:b3:ee:06: 8b:8d:44:1e:b9:d6:9f:e8:49:f2:50:65:3b:a8:66:47:33:db: ec:4c:c1:73:83:53:cf:14:a4:81:b2:75:db:fa:a5:b5:23:96: 1a:ac:35:f2:35:12:2e:0e:0d:35:3a:95:16:55:35:8c:86:aa: 7c:5b:05:88:58:4b:c3:5b:dd:14:2b:fa:10:ec:95:21:47:0c: fc:f3:c4:62:ab:fe:dc:6c:e8:0e:4a:db:ef:fe:b5:b3:72:99: 3b:9b:85:26:75:20:20:55:11:d8:4b:0e:81:80:08:ba:ef:e2: 0c:e3:c8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjQxMTIzMDIyMjQ0WhcNMjQxMTMwMDIyMjQ0WjAYMRYwFAYD VQQDEw02NzQxM2M3NC1iM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBhxs65ydUqEHEinvXFo9KG08WFkG4uEwwkydcjL0Yf8FPTpWR0etWp+vOKp ZYtCWYkafHK3ZVbawjDnmTIsp0aFTPfvRjjoNZspP8wvqE6gLrvbqz7vggMEqod7 6WfwikmeTfTNMCpbXugTRiTcAaZwRT1r6ICfkpenfUWHZ2i67K/x5a97OGZGpQOz uvXNkf6o64OR+tNKuGc5a1nv0iOCra1MyzjnB+v+ENfkCUCI4gSUDX4XynEJo+d5 LxBZyvlDYNLGrzaE8DYAm8VJhvXw1/h9Brra5MVy319giFVUkJJlI7mKcHZhjZTf d6wP6ZXSA/Hk2eoXUROBAJVOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0/rA7e HwDlqmWAfb+6rgM8dO7iMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVqn9GO+9hVPKicvdNQhr5J4sH+fqBIAO4YKDnUYFDpKxJ56nMiXjD mCnp6jniqO9i9pEA6chtEDvWh2mqE4DLE3rgGlqwT6B0KSInXdKTDjFyFy1cQ+jX 159XHjY8/H3wZ8RloMDTlrBc5tYmrbj00Jjbp+wQHeZ4Oa1NWsHDhYrIefu/pXD+ OtERASuz7gaLjUQeudaf6EnyUGU7qGZHM9vsTMFzg1PPFKSBsnXb+qW1I5YarDXy NRIuDg01OpUWVTWMhqp8WwWIWEvDW90UK/oQ7JUhRwz888Riq/7cbOgOStvv/rWz cpk7m4UmdSAgVRHYSw6BgAi67+IM48jQ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org