$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: GsFECKPVAoiQjpqsVIGnHm3HedYto0LuA2KBP22GN2E= Subject key identifier: C7:BF:21:84:2E:CF:D6:4C:82:19:3B:DD:F5:6E:7D:66:A5:7F:9B:A0 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 09EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 09CE Signing time: Fri 22 Nov 2024 19:45:40 +0000 Manifest this update: Fri 22 Nov 2024 19:45:40 +0000 Manifest next update: Fri 29 Nov 2024 19:45:40 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: tRO8CGBy/MrCJELVlbsZstBZh66e0H7LJiUrQrybhvs=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: ZBqZrZzLa2IT8UIY6w09sQHwLL5zrRzqV4vns9/3wIc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: hSui0ebWc4lkxLtGfFPvwezZYPnLWYoUQ7IH9/TNQXs=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: RxQekEsAzfRoaXQlF9gfuPb3rEYz9GMB9M+EsFimH7E=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: t7QLTmlrwRSdzxwkZ3ICKVh+ifH3BRpvn3KoSgjF9OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Nov 22 19:45:40 2024 GMT Not After : Nov 29 19:45:40 2024 GMT Subject: CN=6740df64-7181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:d6:4a:4d:de:cf:82:0c:f1:70:fd:f4:25: d0:5e:79:cd:20:76:10:4b:ab:19:c7:ce:86:17:aa: 2d:47:a3:9a:7c:76:44:88:68:99:79:b1:cb:cc:b2: 12:d4:18:6b:c8:bc:87:db:00:d1:64:f6:ec:00:94: fd:3c:26:53:50:b7:de:df:8b:65:5b:e6:56:ca:31: e3:c1:f1:18:47:f3:27:1a:f8:b4:cb:66:ef:98:71: ff:08:06:5d:e6:ef:12:99:6b:2a:2e:64:82:c5:b1: b9:4d:22:6f:8a:15:ff:1c:43:38:27:e7:4e:80:ff: e9:0e:8a:6b:0e:91:f9:de:38:c2:11:51:3c:8f:9a: 6e:43:4d:99:66:b2:3d:8e:40:d7:78:95:d0:77:c7: cb:34:fc:33:2f:f5:24:a7:2b:e5:95:e0:63:74:0f: 74:ef:dc:c1:1f:3d:ad:c0:a5:42:df:ac:31:cd:1c: 55:a5:36:15:06:9f:26:86:4b:5d:4e:fb:fc:ca:75: 5c:cb:b5:cf:50:99:8a:96:40:0e:3d:2f:6f:3e:c0: 0d:14:82:16:ba:a5:1a:5c:14:31:c7:8e:2b:fd:1d: 92:2f:0a:b0:9c:bf:f4:c8:2a:34:e7:f5:e9:93:66: 38:8f:4c:47:39:08:86:40:a0:b4:f3:53:08:3e:d3: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BF:21:84:2E:CF:D6:4C:82:19:3B:DD:F5:6E:7D:66:A5:7F:9B:A0 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b9:9d:f9:44:cb:f2:d3:59:78:92:4f:72:ba:31:62:04:25: 94:a9:66:df:30:e3:db:c5:43:c2:ef:5e:fe:1a:6d:64:a9:f6: 54:df:55:61:3d:9a:ec:92:31:e8:f3:db:74:3c:c6:13:58:ad: 9e:e3:9f:f8:af:6c:6c:ea:cc:7d:11:4b:4f:01:23:5d:7a:00: 7f:a0:9e:46:c7:80:90:bb:54:ba:5b:05:98:7c:65:57:31:f6: 66:65:c6:55:ad:75:ef:02:d4:d7:58:b2:79:7d:41:88:20:80: 59:74:1d:c0:63:1a:54:e1:6c:24:de:c5:38:0c:f8:b2:e9:56: 20:22:27:92:13:8f:1e:e4:ea:1b:c8:34:1b:70:fe:b0:a1:96: 5c:b4:9b:11:df:55:f0:84:61:fc:a1:6e:08:26:e2:ef:26:d8: 86:92:29:6e:73:fa:1d:57:ff:cd:ce:11:0a:87:08:2d:7c:0e: 15:14:af:ed:98:aa:d8:ae:cd:5d:fc:ae:e3:a3:3e:89:a4:9b: 5a:de:fd:f2:40:8f:b7:01:bd:f9:8b:0c:b0:08:58:a6:dd:c0: 87:17:01:24:b4:3e:da:7b:c5:02:fb:57:6d:f8:95:ba:66:06: e3:eb:ab:36:ae:fc:67:83:f2:28:1a:65:e4:70:d7:db:29:ac: fa:35:93:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjQxMTIyMTk0NTQwWhcNMjQxMTI5MTk0NTQwWjAYMRYwFAYD VQQDEw02NzQwZGY2NC03MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNDWSk3ez4IM8XD99CXQXnnNIHYQS6sZx86GF6otR6OafHZEiGiZebHLzLIS 1BhryLyH2wDRZPbsAJT9PCZTULfe34tlW+ZWyjHjwfEYR/MnGvi0y2bvmHH/CAZd 5u8SmWsqLmSCxbG5TSJvihX/HEM4J+dOgP/pDoprDpH53jjCEVE8j5puQ02ZZrI9 jkDXeJXQd8fLNPwzL/UkpyvlleBjdA9079zBHz2twKVC36wxzRxVpTYVBp8mhktd Tvv8ynVcy7XPUJmKlkAOPS9vPsANFIIWuqUaXBQxx44r/R2SLwqwnL/0yCo05/Xp k2Y4j0xHOQiGQKC081MIPtPmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMe/IYQu z9ZMghk73fVufWalf5ugMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyuZ35RMvy01l4kk9yujFiBCWUqWbfMOPbxUPC717+Gm1kqfZU31Vh PZrskjHo89t0PMYTWK2e45/4r2xs6sx9EUtPASNdegB/oJ5Gx4CQu1S6WwWYfGVX MfZmZcZVrXXvAtTXWLJ5fUGIIIBZdB3AYxpU4Wwk3sU4DPiy6VYgIieSE48e5Oob yDQbcP6woZZctJsR31XwhGH8oW4IJuLvJtiGkiluc/odV//NzhEKhwgtfA4VFK/t mKrYrs1d/K7joz6JpJta3v3yQI+3Ab35iwywCFim3cCHFwEktD7ae8UC+1dt+JW6 Zgbj66s2rvxng/IoGmXkcNfbKaz6NZPl -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org