$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: cNgxIld7abclG4GVC8L41y3M51JR8BYipozns6FPwFY= Subject key identifier: 18:02:52:EA:85:DA:DF:89:D0:91:A9:F5:A3:CD:C8:2C:0B:40:14:40 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 043A Signing time: Wed 20 Nov 2024 23:49:34 +0000 Manifest this update: Wed 20 Nov 2024 23:49:33 +0000 Manifest next update: Wed 27 Nov 2024 23:49:33 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: 9IhzU+qjqg6Igce9jAGRYYlU+txHiRZBzSu0p3EwOGA=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Nov 20 23:49:33 2024 GMT Not After : Nov 27 23:49:33 2024 GMT Subject: CN=673e758d-bd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:b8:80:6d:11:cb:4b:04:96:2b:14:2f:a3: e1:5c:82:ad:fa:6d:1c:0b:cf:17:6b:71:0b:5a:4e: f5:d8:ac:d0:46:bb:c7:21:43:12:53:cb:7c:df:38: 0e:38:53:1f:d9:aa:af:55:23:99:63:f8:f4:db:78: 0b:b4:ca:24:56:8a:16:46:8c:cd:3d:73:4d:29:2e: 33:3f:cc:15:cf:1a:d1:ee:52:04:69:02:14:19:9d: 40:4c:bc:b9:3e:c6:16:a1:ae:f1:2f:fc:53:b1:d3: df:59:a5:7e:47:96:45:8f:5a:a4:18:1f:a5:c2:29: 37:f1:7f:a4:37:af:00:fe:3f:37:0b:27:4a:ba:00: 85:d2:2f:37:3e:cf:53:46:9f:2f:9e:4b:04:53:10: e5:23:8d:9a:95:4d:64:d7:ec:d2:bf:c9:56:12:01: 15:d0:31:fd:bc:76:b4:66:4e:1b:b7:68:97:00:02: 7c:9c:c3:50:53:65:71:31:a8:0b:93:88:d8:1f:c7: 17:35:9c:34:58:3b:e3:e7:9c:95:bb:3c:86:72:0b: 40:18:ea:25:cd:9f:21:92:b6:ec:de:de:59:55:63: 75:07:bd:e8:09:d0:28:0b:90:58:af:5a:5d:48:8a: 25:93:06:de:e2:9c:05:94:5d:b7:4c:e1:56:7d:6e: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:02:52:EA:85:DA:DF:89:D0:91:A9:F5:A3:CD:C8:2C:0B:40:14:40 X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:25:72:81:5f:83:0b:c0:ae:95:8e:64:55:9e:88:90:b9:0e: 3e:24:71:43:59:d3:11:27:ab:f3:7a:ea:68:42:bc:d1:03:bb: 75:45:b3:f5:81:fd:22:08:17:c8:0a:ae:14:2c:41:75:dc:b5: b9:e3:c6:de:a5:60:f3:6b:5a:22:f5:66:29:1e:a0:d4:d4:9b: 16:4f:0b:5f:c3:1a:75:30:d9:03:bd:8f:13:6e:7f:d1:14:3b: b7:b6:2a:b9:02:49:45:91:7c:19:b9:26:34:66:f1:5b:b0:cd: fb:9e:58:78:6c:f1:ff:6f:6e:e1:11:64:76:9e:22:63:07:e5: 63:00:63:31:54:4d:31:3a:8e:55:de:fa:17:00:de:37:f3:33: 74:bf:5c:27:03:86:4e:70:59:34:28:44:67:f1:97:38:a9:dc: 20:6d:13:5b:4f:2d:b8:9f:b9:dc:9b:0f:90:3b:0e:46:98:dc: f5:9b:52:05:0f:aa:53:36:8b:39:b0:f6:38:2d:02:af:7a:33: 4c:d3:dd:55:a8:1c:22:8e:d0:d6:71:46:55:31:87:e1:68:42: 81:92:00:d9:f4:06:f5:53:4c:d9:f8:2f:fb:47:9c:52:55:0e: fa:e7:7b:38:35:55:01:8e:c3:3b:58:26:2f:8d:4d:80:0f:f9: 69:bc:14:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjQxMTIwMjM0OTMzWhcNMjQxMTI3MjM0OTMzWjAYMRYwFAYD VQQDEw02NzNlNzU4ZC1iZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojC4gG0Ry0sElisUL6PhXIKt+m0cC88Xa3ELWk712KzQRrvHIUMSU8t83zgO OFMf2aqvVSOZY/j023gLtMokVooWRozNPXNNKS4zP8wVzxrR7lIEaQIUGZ1ATLy5 PsYWoa7xL/xTsdPfWaV+R5ZFj1qkGB+lwik38X+kN68A/j83CydKugCF0i83Ps9T Rp8vnksEUxDlI42alU1k1+zSv8lWEgEV0DH9vHa0Zk4bt2iXAAJ8nMNQU2VxMagL k4jYH8cXNZw0WDvj55yVuzyGcgtAGOolzZ8hkrbs3t5ZVWN1B73oCdAoC5BYr1pd SIolkwbe4pwFlF23TOFWfW4dqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgCUuqF 2t+J0JGp9aPNyCwLQBRAMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvJXKBX4MLwK6VjmRVnoiQuQ4+JHFDWdMRJ6vzeupoQrzRA7t1RbP1 gf0iCBfICq4ULEF13LW548bepWDza1oi9WYpHqDU1JsWTwtfwxp1MNkDvY8Tbn/R FDu3tiq5AklFkXwZuSY0ZvFbsM37nlh4bPH/b27hEWR2niJjB+VjAGMxVE0xOo5V 3voXAN438zN0v1wnA4ZOcFk0KERn8Zc4qdwgbRNbTy24n7ncmw+QOw5GmNz1m1IF D6pTNos5sPY4LQKvejNM091VqBwijtDWcUZVMYfhaEKBkgDZ9Ab1U0zZ+C/7R5xS VQ7653s4NVUBjsM7WCYvjU2AD/lpvBTY -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org