$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: C3ZXyzIUE3QoM00s7XdlAN617PXKcY15f2zAqVQUlHM= Subject key identifier: 66:BC:A0:92:1B:0F:3B:97:B0:D4:F6:3A:AA:C4:4B:1A:76:EB:53:E3 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: CF Signing time: Sat 23 Nov 2024 03:49:19 +0000 Manifest this update: Sat 23 Nov 2024 03:49:19 +0000 Manifest next update: Sat 30 Nov 2024 03:49:19 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: WvJEBEVvctmq7m2kodmz2J7uaHmkXRvWIKAEooBRinQ=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: fsgwXlrQI8Xf5Rjyp/4eVuAgbFz37cGdGAMKHjxGUCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Nov 23 03:49:19 2024 GMT Not After : Nov 30 03:49:19 2024 GMT Subject: CN=674150bf-598b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:fd:6a:04:a3:2d:de:0e:4b:6a:01:f4:11: 84:25:62:54:38:94:f1:d7:35:d1:b8:53:8b:97:c9: 75:ab:45:e6:07:17:9e:d9:91:47:7b:c1:13:d7:7b: 0d:ab:9b:e3:4b:b2:6a:18:62:f7:38:8a:8a:35:1e: 47:f8:4d:24:99:5a:56:6b:15:47:f3:86:eb:59:46: 5c:bb:6c:66:45:db:f1:a1:07:f4:e8:65:ec:40:ad: f9:cc:41:37:ca:99:03:14:b2:92:0e:4d:11:0f:af: f9:8a:3c:04:b0:4c:7c:6e:49:14:8a:03:cb:e8:41: b4:1f:12:64:a0:25:33:e4:83:14:6e:53:bf:56:7b: 62:32:6f:05:28:e7:58:55:4c:e5:81:86:eb:80:8c: b6:8a:8c:6c:e5:38:e0:12:32:32:78:06:5f:13:9d: 42:55:09:bf:f7:ca:c3:79:d8:ff:51:18:c0:02:15: 06:f6:ce:bd:ef:e4:0e:8a:8b:61:88:e3:dc:17:b5: 26:c1:da:db:6a:14:c8:bf:22:d9:dd:41:55:6a:26: a4:c1:ab:f6:84:85:c1:58:39:9b:85:b0:77:ba:15: 17:34:18:4a:2b:c2:92:b0:65:54:10:26:54:d5:a0: 6b:4c:86:20:9b:ee:0b:b4:ad:7e:74:c0:02:cd:6b: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BC:A0:92:1B:0F:3B:97:B0:D4:F6:3A:AA:C4:4B:1A:76:EB:53:E3 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ac:1f:5e:b6:0c:02:c1:ef:7e:14:bc:98:72:83:5b:ed:35: 63:bb:c2:d4:ab:78:58:48:2b:78:9d:12:03:88:30:e4:3d:a1: e8:25:cc:4a:d3:5f:0f:61:8a:8b:05:18:f5:d6:f8:39:98:40: d3:50:18:d1:5b:b8:0c:4a:ce:53:d0:02:3f:57:98:2d:0e:ab: 35:12:37:96:13:b5:8c:22:31:30:cd:4d:33:e7:4a:47:1b:59: a8:70:84:4d:15:c9:0b:6c:ec:4e:18:79:60:29:72:2d:80:55: 5b:19:7a:d2:89:32:eb:80:1b:ec:2d:56:d9:20:4e:19:71:64: fa:99:46:96:d5:6b:63:c8:5e:29:f8:47:19:d2:12:32:6a:cc: 86:bf:4e:56:68:e4:29:11:1a:8e:88:72:3a:9a:57:f6:a3:ac: c7:9a:f9:fd:36:9f:74:76:7f:2a:81:13:82:01:71:11:9a:e8: c4:7f:ab:7a:0b:20:31:1e:08:ae:f9:94:00:15:45:67:43:9c: 3c:d3:e0:bd:c3:fa:97:23:28:31:5f:91:f5:39:dc:95:60:32: 12:55:e7:dc:d1:da:f7:16:40:19:39:b2:f0:37:1c:4e:5e:b3: 96:4e:38:86:74:24:25:1a:e2:43:5c:56:ed:c9:08:29:9b:7e: d4:d2:ea:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjQxMTIzMDM0OTE5WhcNMjQxMTMwMDM0OTE5WjAYMRYwFAYD VQQDEw02NzQxNTBiZi01OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2D9agSjLd4OS2oB9BGEJWJUOJTx1zXRuFOLl8l1q0XmBxee2ZFHe8ET13sN q5vjS7JqGGL3OIqKNR5H+E0kmVpWaxVH84brWUZcu2xmRdvxoQf06GXsQK35zEE3 ypkDFLKSDk0RD6/5ijwEsEx8bkkUigPL6EG0HxJkoCUz5IMUblO/VntiMm8FKOdY VUzlgYbrgIy2ioxs5TjgEjIyeAZfE51CVQm/98rDedj/URjAAhUG9s697+QOioth iOPcF7UmwdrbahTIvyLZ3UFVaiakwav2hIXBWDmbhbB3uhUXNBhKK8KSsGVUECZU 1aBrTIYgm+4LtK1+dMACzWsAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa8oJIb DzuXsNT2OqrESxp261PjMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfrB9etgwCwe9+FLyYcoNb7TVju8LUq3hYSCt4nRIDiDDkPaHoJcxK 018PYYqLBRj11vg5mEDTUBjRW7gMSs5T0AI/V5gtDqs1EjeWE7WMIjEwzU0z50pH G1mocIRNFckLbOxOGHlgKXItgFVbGXrSiTLrgBvsLVbZIE4ZcWT6mUaW1WtjyF4p +EcZ0hIyasyGv05WaOQpERqOiHI6mlf2o6zHmvn9Np90dn8qgROCAXERmujEf6t6 CyAxHgiu+ZQAFUVnQ5w80+C9w/qXIygxX5H1OdyVYDISVefc0dr3FkAZObLwNxxO XrOWTjiGdCQlGuJDXFbtyQgpm37U0uo+ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org