$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: CwQq2EbVHmFi6JupNErrS4lqfCJHVtorjTZU8upHDNA= Subject key identifier: 1E:69:F7:9F:1A:51:7D:FA:D4:51:D4:F0:C8:D0:4C:9E:9C:7D:40:0A Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0BEF Signing time: Fri 22 Nov 2024 18:23:51 +0000 Manifest this update: Fri 22 Nov 2024 18:23:50 +0000 Manifest next update: Fri 29 Nov 2024 18:23:50 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: o/YdW0duULw+M1ZvJKbEGLs7PBQJsP+6cuTaLnUfebQ=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: Aze6ozKszibcl8aaLsoQDQAJdJwVjHWKnJlUnAfM2AM=) 3: 70E436A4155311EDB5B4C084C4F9AE02.roa (hash: I/CztQTncibMDYSxCkVeaVPo7AP0a3VGi32K5e2kfXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Nov 22 18:23:50 2024 GMT Not After : Nov 29 18:23:50 2024 GMT Subject: CN=6740cc36-f823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:7a:2c:14:34:fa:65:29:22:ef:ae:61:09: d3:c7:d3:af:fc:50:69:21:5d:fd:12:ee:e3:f9:83: f2:b5:86:9f:54:d6:62:14:a2:1f:04:81:7f:cb:d3: 55:0f:ae:7b:84:c4:41:d9:31:9d:54:2d:dc:cf:77: 68:5d:ab:8b:d0:7b:6a:b0:de:a5:a4:df:68:65:89: 6c:bb:be:0d:0c:26:d1:af:c7:09:06:ab:43:d2:8c: bb:3b:f6:c2:ea:ab:82:d2:cc:a3:8b:a7:57:5a:02: 88:0c:9f:72:0c:f6:d0:3e:bd:b3:ab:ec:5c:c6:96: 95:89:2a:dd:73:32:77:e5:47:23:d4:17:58:c8:f0: c9:d2:a3:24:8c:45:55:ed:96:a1:35:4a:d1:79:c6: 8a:66:9a:a9:49:ba:17:69:8b:98:b3:c5:a9:eb:d0: 2c:a9:4e:ff:c4:99:c8:0e:a2:50:81:c9:fa:07:6e: aa:ff:27:ad:6e:f1:e3:b4:0b:d9:5d:a6:31:67:ad: 4b:89:ed:ee:3b:e9:07:32:a9:b8:33:43:da:6e:09: 0a:e3:37:00:2f:7c:93:61:9e:a7:86:12:6f:da:75: 9a:a8:98:d3:a2:d5:31:09:fb:f9:2f:84:a7:dc:04: 42:60:d9:29:38:dd:a8:e3:ea:d7:3f:4d:81:ba:97: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:F7:9F:1A:51:7D:FA:D4:51:D4:F0:C8:D0:4C:9E:9C:7D:40:0A X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7a:bb:a9:86:d8:b6:dc:54:20:f7:d7:bc:da:7f:b2:62:52: 6a:c0:e8:b8:a3:4a:39:4c:cd:82:c1:c4:22:9c:a8:5e:33:4c: 96:86:ab:24:6d:dd:88:af:2c:03:b0:bf:77:d7:be:36:a2:f2: 39:a8:d5:28:a9:db:f9:5c:d3:ee:2a:a6:d5:c0:6e:1b:f4:1c: 56:e7:4a:d0:c2:0f:60:fe:eb:f8:06:45:43:0e:8b:dd:eb:40: f7:01:0a:ed:76:5a:fe:22:7e:a8:ea:78:6a:be:4b:d8:15:0e: 64:93:72:f7:31:7e:90:c4:e6:36:32:b8:e9:20:30:29:ee:ae: e3:16:61:76:bc:cf:12:d6:e9:59:f8:68:ec:8b:46:e4:ff:0b: c0:5a:41:49:6f:df:73:fa:93:dd:78:69:b6:18:1b:5d:2f:36: 64:4e:96:a3:d4:ab:43:82:de:7e:eb:60:8d:bc:2b:97:0a:d0: 8e:34:82:b1:4e:73:a5:3d:4e:22:59:60:7f:08:bb:6f:1d:4e: 20:fb:f8:33:49:4d:2a:ed:32:05:d2:31:1c:b7:cb:1f:34:2e: 01:bc:6f:16:65:28:a7:ea:11:36:dd:42:88:f9:b5:ce:e5:a9: 9c:0a:1a:67:9e:24:a3:8b:16:34:79:87:b6:ab:c6:e2:ef:f7: 63:c6:7a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjQxMTIyMTgyMzUwWhcNMjQxMTI5MTgyMzUwWjAYMRYwFAYD VQQDEw02NzQwY2MzNi1mODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Zx6LBQ0+mUpIu+uYQnTx9Ov/FBpIV39Eu7j+YPytYafVNZiFKIfBIF/y9NV D657hMRB2TGdVC3cz3doXauL0HtqsN6lpN9oZYlsu74NDCbRr8cJBqtD0oy7O/bC 6quC0syji6dXWgKIDJ9yDPbQPr2zq+xcxpaViSrdczJ35Ucj1BdYyPDJ0qMkjEVV 7ZahNUrRecaKZpqpSboXaYuYs8Wp69AsqU7/xJnIDqJQgcn6B26q/yetbvHjtAvZ XaYxZ61Lie3uO+kHMqm4M0PabgkK4zcAL3yTYZ6nhhJv2nWaqJjTotUxCfv5L4Sn 3ARCYNkpON2o4+rXP02Bupc6SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5p958a UX361FHU8MjQTJ6cfUAKMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAheruphti23FQg99e82n+yYlJqwOi4o0o5TM2CwcQinKheM0yWhqsk bd2IrywDsL931742ovI5qNUoqdv5XNPuKqbVwG4b9BxW50rQwg9g/uv4BkVDDovd 60D3AQrtdlr+In6o6nhqvkvYFQ5kk3L3MX6QxOY2MrjpIDAp7q7jFmF2vM8S1ulZ +Gjsi0bk/wvAWkFJb99z+pPdeGm2GBtdLzZkTpaj1KtDgt5+62CNvCuXCtCONIKx TnOlPU4iWWB/CLtvHU4g+/gzSU0q7TIF0jEct8sfNC4BvG8WZSin6hE23UKI+bXO 5amcChpnniSjixY0eYe2q8bi7/djxnpt -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org