$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: DTAEDI+yqXzdN69valxj8qi6A2mdNnNbXz/i6r4sE3Q= Subject key identifier: 6F:5D:23:83:B1:DA:A5:F5:3A:71:62:C9:FE:72:75:35:41:DA:DE:76 Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 0818 Signing time: Fri 22 Nov 2024 20:33:46 +0000 Manifest this update: Fri 22 Nov 2024 20:33:45 +0000 Manifest next update: Fri 29 Nov 2024 20:33:45 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: x61+/AoTctn+rtjQi/w0btLqjTRISEGWSpvVfXvApbQ=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: 2JmA3PkYqpUMmOVyVV5dhFWFglZf8xMS4jIUqW1KOUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Nov 22 20:33:45 2024 GMT Not After : Nov 29 20:33:45 2024 GMT Subject: CN=6740eaa9-f9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:e0:4d:6f:bd:0a:81:6f:cb:3b:c5:37:c8: e4:08:23:52:74:fe:94:b2:cc:48:bf:d3:3d:52:66: 5d:82:92:0b:83:e4:c9:b0:01:1c:d9:ac:4a:ce:68: ad:1a:1c:d9:c6:0a:90:d4:45:3e:28:3e:30:10:06: 86:7a:6e:a5:56:c4:4f:a9:94:89:7f:89:d8:70:66: 48:51:b3:17:85:b0:ab:36:df:34:3c:3f:a8:be:00: 10:81:fe:19:f1:67:c6:0b:99:fd:98:02:b9:81:54: 79:e4:a4:ec:f0:8a:bb:1e:77:b1:6e:23:24:fe:59: 78:1f:72:ed:d4:16:cf:3f:11:9a:09:e0:a5:54:05: 82:2d:de:59:f4:a6:48:19:d8:37:4d:e1:b3:69:41: 99:16:7d:f0:2b:0b:72:30:3e:39:f8:44:6f:0c:f1: d2:53:a4:da:7b:dc:75:10:48:9b:68:33:81:1d:ea: 3f:d6:a9:95:41:5f:b1:33:d7:54:fb:6c:89:6d:54: 7f:d5:ee:e7:b7:f8:c3:f8:86:40:7a:74:93:80:0a: a3:16:94:15:9e:0c:85:82:bc:49:c7:e3:90:8e:e8: fb:ea:4c:ff:09:a3:9e:ae:d9:ba:af:ec:1e:56:ea: 95:72:f1:3c:61:55:85:a9:68:1d:7b:95:1f:bc:9e: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:23:83:B1:DA:A5:F5:3A:71:62:C9:FE:72:75:35:41:DA:DE:76 X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3a:bf:97:c3:1f:cd:46:df:92:1f:50:62:0e:61:dc:78:7a: a2:1b:5c:03:69:f3:6a:5c:d5:44:81:95:32:d6:4a:70:ea:e0: aa:78:00:ff:3c:d5:26:eb:75:40:70:c6:cc:6a:a2:ab:53:e0: 6f:e9:40:78:34:4c:4f:6f:af:61:9e:69:0b:e1:95:f5:a4:42: 2b:14:a0:cc:4b:cc:a5:02:1f:b8:50:6d:73:b4:52:1b:cb:06: 97:a5:3c:9f:6b:e7:0c:fe:52:8f:16:fb:39:ae:40:37:6c:b0: fe:9a:d9:c9:44:de:64:ad:fb:b8:68:b5:38:34:9e:54:85:43: f8:15:d7:db:0d:71:c4:ef:35:84:69:b1:89:24:d6:28:0b:60: 40:fc:6a:cf:e0:5e:12:a4:3d:3a:e9:76:e4:28:b3:29:1d:9a: 6a:f1:9f:69:a1:2f:2b:a3:c0:91:e9:da:d5:08:64:ac:ec:bd: d6:1a:38:46:62:f7:7a:bf:df:3a:0e:e5:9c:41:d6:cc:8d:00: d8:1c:fc:45:f4:a2:8b:27:1a:7b:49:f5:ff:68:b1:a3:16:a9: d1:89:3a:49:43:18:cf:da:e9:c4:5e:da:bb:88:3a:4e:5b:96: fa:64:a3:98:e1:65:18:d2:bf:a9:db:80:86:c6:cb:43:9a:57: a4:37:65:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjQxMTIyMjAzMzQ1WhcNMjQxMTI5MjAzMzQ1WjAYMRYwFAYD VQQDEw02NzQwZWFhOS1mOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnizgTW+9CoFvyzvFN8jkCCNSdP6UssxIv9M9UmZdgpILg+TJsAEc2axKzmit GhzZxgqQ1EU+KD4wEAaGem6lVsRPqZSJf4nYcGZIUbMXhbCrNt80PD+ovgAQgf4Z 8WfGC5n9mAK5gVR55KTs8Iq7HnexbiMk/ll4H3Lt1BbPPxGaCeClVAWCLd5Z9KZI Gdg3TeGzaUGZFn3wKwtyMD45+ERvDPHSU6Tae9x1EEibaDOBHeo/1qmVQV+xM9dU +2yJbVR/1e7nt/jD+IZAenSTgAqjFpQVngyFgrxJx+OQjuj76kz/CaOertm6r+we VuqVcvE8YVWFqWgde5UfvJ4CRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9dI4Ox 2qX1OnFiyf5ydTVB2t52MB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAOr+Xwx/NRt+SH1BiDmHceHqiG1wDafNqXNVEgZUy1kpw6uCqeAD/ PNUm63VAcMbMaqKrU+Bv6UB4NExPb69hnmkL4ZX1pEIrFKDMS8ylAh+4UG1ztFIb ywaXpTyfa+cM/lKPFvs5rkA3bLD+mtnJRN5krfu4aLU4NJ5UhUP4FdfbDXHE7zWE abGJJNYoC2BA/GrP4F4SpD066XbkKLMpHZpq8Z9poS8ro8CR6drVCGSs7L3WGjhG Yvd6v986DuWcQdbMjQDYHPxF9KKLJxp7SfX/aLGjFqnRiTpJQxjP2unEXtq7iDpO W5b6ZKOY4WUY0r+p24CGxstDmlekN2UA -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org