$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: Ac1FemQ+DnjpOD/OgvZgKn323G+5WTGjnCeCKVFXgF4= Subject key identifier: 16:DA:E1:60:E6:6C:6C:E3:21:D5:52:9E:BD:13:EA:74:E8:D4:77:58 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0E0B Signing time: Fri 22 Nov 2024 17:45:06 +0000 Manifest this update: Fri 22 Nov 2024 17:45:05 +0000 Manifest next update: Fri 29 Nov 2024 17:45:05 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: g9UcAgES6Fy4aodEil4ehA09wGKB2C1zWxtJ0TLsSos=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: H2LFByHCGl67eJSX+O7peLobB2Xyb4BQ81wW7F5Xst0=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: qsatTV0vWjCabMFshTZDBa4P4hU9immfTIRLePvacAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Nov 22 17:45:05 2024 GMT Not After : Nov 29 17:45:05 2024 GMT Subject: CN=6740c322-292f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:75:e7:3b:d6:1b:ff:49:a3:69:c9:7c:00: 62:58:0b:72:12:c4:d2:fa:e0:6c:88:54:eb:f7:42: df:48:5a:d9:4c:57:61:23:a8:a5:d7:c5:8b:6c:96: 89:88:b1:b8:0e:cc:e2:ec:4a:ed:5c:d7:11:b1:2f: d9:ee:52:f3:06:ce:0f:40:bd:e4:a7:88:99:12:21: 18:d2:31:1c:ed:28:03:1d:93:bb:aa:57:01:e7:2b: 51:c4:4c:a7:6c:1c:8e:48:e7:5a:27:21:72:eb:07: ce:f3:6b:74:c1:a8:d6:d4:b9:b9:c4:e2:04:e7:1e: 96:33:8c:0f:14:7b:b6:2b:1b:23:45:b5:a8:44:17: cb:cb:33:e2:04:47:2e:0f:86:07:d2:9d:7a:7e:0c: 8b:42:2c:85:02:a5:2c:d3:27:fb:14:5f:9c:44:2c: 78:ed:e7:90:0b:e2:19:b8:26:51:3c:11:b0:a0:d5: d4:9f:d8:62:ab:1a:5a:96:9f:b1:7c:9f:0a:cb:c3: a5:43:7c:2c:a7:27:5a:b4:ed:05:9c:0c:c6:0c:57: a7:96:fc:22:ea:df:e2:f3:94:ff:a8:23:88:9f:ef: a7:16:6a:ec:b2:85:cc:a9:e0:7d:0e:5d:83:ee:ae: f3:64:8e:8a:8b:fe:93:14:c8:cd:f3:27:a5:ce:a3: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DA:E1:60:E6:6C:6C:E3:21:D5:52:9E:BD:13:EA:74:E8:D4:77:58 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d7:64:b9:db:09:c4:07:61:5a:7f:af:02:ec:e7:59:b9:be: e4:9f:39:5f:98:51:f8:88:65:d3:51:b5:5b:c1:1d:a6:f0:48: 4e:00:97:eb:93:b4:d9:58:1e:1b:a3:62:f7:20:8f:2c:6a:10: 56:bf:6f:f9:18:12:65:2a:14:49:12:52:f9:20:e6:3a:c3:a9: ec:b3:6b:fa:3f:8c:37:28:c3:c9:21:d9:2d:6c:04:e3:9e:b7: d2:16:d8:17:56:03:67:e5:e6:1c:3e:f6:c7:e8:cf:54:58:e2: 34:d1:7b:bc:fd:7a:57:0d:b5:8a:7c:38:f6:95:e0:da:d1:a3: 6a:1b:ab:c4:f0:3e:32:6a:32:b9:c4:17:fd:1b:8e:33:00:98: c1:51:6b:72:c3:a1:a2:59:df:bb:a8:09:a4:d1:63:f2:9c:3b: 5a:5d:dc:46:da:c5:c7:72:5a:1e:1a:90:33:13:af:12:43:af: 11:9e:13:53:8a:98:f4:af:c0:57:01:19:72:f5:13:bd:c0:86: da:b0:42:3e:cb:1a:6c:fc:44:30:23:5c:f6:8c:5f:33:bf:dd: cb:5f:a5:73:67:f4:b0:93:71:0c:45:3a:5d:48:ea:d5:89:f4: d1:b9:6a:07:96:0f:16:11:e3:29:9d:6d:3d:64:86:ac:48:42: 9f:3e:6e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjQxMTIyMTc0NTA1WhcNMjQxMTI5MTc0NTA1WjAYMRYwFAYD VQQDEw02NzQwYzMyMi0yOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6q515zvWG/9Jo2nJfABiWAtyEsTS+uBsiFTr90LfSFrZTFdhI6il18WLbJaJ iLG4Dszi7ErtXNcRsS/Z7lLzBs4PQL3kp4iZEiEY0jEc7SgDHZO7qlcB5ytRxEyn bByOSOdaJyFy6wfO82t0wajW1Lm5xOIE5x6WM4wPFHu2KxsjRbWoRBfLyzPiBEcu D4YH0p16fgyLQiyFAqUs0yf7FF+cRCx47eeQC+IZuCZRPBGwoNXUn9hiqxpalp+x fJ8Ky8OlQ3wspydatO0FnAzGDFenlvwi6t/i85T/qCOIn++nFmrssoXMqeB9Dl2D 7q7zZI6Ki/6TFMjN8yelzqN+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBba4WDm bGzjIdVSnr0T6nTo1HdYMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ12S52wnEB2Faf68C7OdZub7knzlfmFH4iGXTUbVbwR2m8EhOAJfr k7TZWB4bo2L3II8sahBWv2/5GBJlKhRJElL5IOY6w6nss2v6P4w3KMPJIdktbATj nrfSFtgXVgNn5eYcPvbH6M9UWOI00Xu8/XpXDbWKfDj2leDa0aNqG6vE8D4yajK5 xBf9G44zAJjBUWtyw6GiWd+7qAmk0WPynDtaXdxG2sXHcloeGpAzE68SQ68RnhNT ipj0r8BXARly9RO9wIbasEI+yxps/EQwI1z2jF8zv93LX6VzZ/Swk3EMRTpdSOrV ifTRuWoHlg8WEeMpnW09ZIasSEKfPm6W -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org