$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: vTkk/pdI6NS4O4ZqMxFfumB+DQp5nEZIXaY7FSduZQ4= Subject key identifier: 6B:74:EF:96:7B:95:DE:C7:48:14:6E:26:D9:22:82:3E:97:AF:6C:09 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 14CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 14C2 Signing time: Fri 22 Nov 2024 16:51:01 +0000 Manifest this update: Fri 22 Nov 2024 16:51:00 +0000 Manifest next update: Fri 29 Nov 2024 16:51:00 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: j3m0y60LEhZ4qfYL0GuUwEbo+jwrIDvAUbKsnFGcCg8=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5322 (0x14ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Nov 22 16:51:00 2024 GMT Not After : Nov 29 16:51:00 2024 GMT Subject: CN=6740b675-77c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:39:ca:49:3e:a7:14:78:79:d1:59:38:49: 44:d6:34:4e:b4:d7:b6:c3:81:b8:94:81:b7:fe:a8: 9a:20:53:d3:ec:0c:7f:ff:0d:31:e7:64:50:6b:cb: 32:26:63:1a:77:35:7d:7b:ff:91:5e:3e:69:f7:a3: ca:ba:71:58:52:ee:d2:19:95:0f:95:a6:ff:a1:b2: 83:cb:58:69:a0:80:9d:de:2b:dc:59:64:6c:e4:69: 86:86:b2:ef:2f:9c:84:41:96:8e:a5:0b:3c:5b:5a: 49:06:8a:0a:35:b1:20:7b:6d:53:5b:2b:f1:b0:62: 9a:13:e0:a6:17:42:e3:af:3e:2d:22:50:26:20:09: 1b:25:51:82:da:13:9f:ff:00:13:eb:b4:52:8c:96: 98:64:ef:0c:21:8a:2f:53:7a:e7:b3:31:72:98:c0: 30:29:ee:b3:f1:eb:89:6d:3a:96:0f:f8:59:6d:bf: 4d:d6:f6:54:1f:2e:dd:d6:73:6a:67:55:7f:61:d4: 03:e6:d4:13:05:d8:c7:29:e8:99:5f:cc:dc:e3:20: 8b:d6:62:1a:1a:37:0f:fb:0c:df:a3:b9:a3:9e:97: a3:63:18:29:d5:2d:ce:cf:ab:32:d6:b8:e4:4d:d5: 20:e7:13:56:00:b2:55:6b:14:05:e4:23:88:ea:da: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:74:EF:96:7B:95:DE:C7:48:14:6E:26:D9:22:82:3E:97:AF:6C:09 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6a:0e:b6:e7:8f:fa:eb:99:e6:aa:b1:e7:df:77:67:d2:a2: cc:73:7b:0a:26:d2:35:25:c4:e5:b8:60:b5:3b:21:5c:d6:48: 38:75:b6:be:29:c7:55:b3:27:c3:11:c9:0e:1a:6d:21:b4:6e: 03:96:ad:dd:14:e0:99:2c:e8:f4:2c:25:d1:78:5f:0c:5f:cb: 68:7c:77:d1:05:6f:d9:4b:b2:67:69:75:d5:88:e9:53:32:9d: 39:ae:7c:b5:de:04:ec:ee:43:4a:50:9d:26:ac:b5:c0:dd:7b: 0c:11:ad:68:f5:44:55:f5:1e:ae:de:35:98:ba:04:59:ef:ac: 30:84:57:34:44:cc:c7:ff:1f:06:32:83:b5:5a:10:df:ff:1c: 04:2c:bb:7d:8d:10:1a:3b:82:49:0b:c3:b8:4e:66:2f:06:26: 9c:95:c4:e0:59:aa:62:3e:1d:cf:07:e6:52:e6:2b:9c:ad:8e: cb:17:88:f4:1b:63:43:bc:60:86:1c:d3:ab:9b:60:9e:13:d4: ca:41:29:5e:c8:57:f1:d4:ff:4e:7f:57:3f:54:53:34:c7:ed: 82:21:32:41:b2:fe:42:ba:30:8f:78:b3:cc:6a:34:5b:2b:97: 37:18:35:49:30:4b:c7:90:2f:d9:7a:6a:12:ae:d1:77:b7:9b: 86:fe:f3:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjQxMTIyMTY1MTAwWhcNMjQxMTI5MTY1MTAwWjAYMRYwFAYD VQQDEw02NzQwYjY3NS03N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdA5ykk+pxR4edFZOElE1jROtNe2w4G4lIG3/qiaIFPT7Ax//w0x52RQa8sy JmMadzV9e/+RXj5p96PKunFYUu7SGZUPlab/obKDy1hpoICd3ivcWWRs5GmGhrLv L5yEQZaOpQs8W1pJBooKNbEge21TWyvxsGKaE+CmF0Ljrz4tIlAmIAkbJVGC2hOf /wAT67RSjJaYZO8MIYovU3rnszFymMAwKe6z8euJbTqWD/hZbb9N1vZUHy7d1nNq Z1V/YdQD5tQTBdjHKeiZX8zc4yCL1mIaGjcP+wzfo7mjnpejYxgp1S3Oz6sy1rjk TdUg5xNWALJVaxQF5COI6tq8KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt075Z7 ld7HSBRuJtkigj6Xr2wJMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABag6254/665nmqrHn33dn0qLMc3sKJtI1JcTluGC1OyFc1kg4dba+ KcdVsyfDEckOGm0htG4Dlq3dFOCZLOj0LCXReF8MX8tofHfRBW/ZS7JnaXXViOlT Mp05rny13gTs7kNKUJ0mrLXA3XsMEa1o9URV9R6u3jWYugRZ76wwhFc0RMzH/x8G MoO1WhDf/xwELLt9jRAaO4JJC8O4TmYvBiaclcTgWapiPh3PB+ZS5iucrY7LF4j0 G2NDvGCGHNOrm2CeE9TKQSleyFfx1P9Of1c/VFM0x+2CITJBsv5CujCPeLPMajRb K5c3GDVJMEvHkC/ZemoSrtF3t5uG/vM0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org