$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: RvGgDxU6T3cu6yEJqHa8FrKYD6v0dFLqt4U2YjlFDVs= Subject key identifier: DB:A0:9A:C9:6F:E7:70:6D:15:B8:F4:96:4E:AF:4D:70:EE:11:23:09 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 0898 Signing time: Fri 22 Nov 2024 20:17:34 +0000 Manifest this update: Fri 22 Nov 2024 20:17:34 +0000 Manifest next update: Fri 29 Nov 2024 20:17:34 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: Ogs3EMAB2vASWwEjvjFrGE1Xx16MAMs1P594kSbHgKs=) 2: 9A1AEF16A9F511EAAEF63A52C4F9AE02.roa (hash: /K6l2Nk5DFl51F71/YofhWzfQ52cGcF53r9oxtYQCag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Nov 22 20:17:34 2024 GMT Not After : Nov 29 20:17:34 2024 GMT Subject: CN=6740e6de-1bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:cc:f0:4b:2d:22:da:ca:7a:47:9f:a8:d8: 14:03:3a:b2:73:46:41:e4:35:b3:e1:fe:33:04:ce: 30:6b:5c:33:b7:b9:86:c2:80:6d:5f:ad:30:c9:1e: 6b:c9:58:c4:a6:14:46:5c:76:bc:a6:3e:8c:fb:69: b0:f9:0f:a3:88:50:07:11:dd:22:73:ab:b7:8e:d6: d3:f2:d9:35:b0:05:74:cc:89:41:96:36:ba:ec:ac: e6:2c:f5:cb:cb:31:df:66:85:82:da:5d:b9:4a:32: 6a:db:63:c8:9d:3f:72:80:b0:1d:32:ee:9d:6a:f0: 2c:32:13:2c:ea:b6:75:27:9a:ed:47:48:a0:35:f5: e9:9f:e4:1a:c9:01:54:55:0a:22:4b:a2:71:fa:6b: 49:09:ed:52:4d:70:64:a1:3d:1b:5e:68:7a:85:52: b0:b7:be:1d:53:71:d2:9f:e2:59:c0:f9:cf:13:17: 74:0f:6e:ea:f9:20:af:2a:de:2b:c6:6e:3c:90:19: ba:ae:8b:e8:54:8c:2d:a4:0d:0a:d5:46:a4:07:ec: 20:e4:e2:dd:11:07:0b:f5:50:e4:2b:85:97:30:c1: d5:95:f5:06:8b:7c:a4:12:23:a0:cb:eb:71:b5:ec: 8e:68:c9:6b:66:d7:ae:4c:b3:2d:62:cc:e7:ab:d4: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A0:9A:C9:6F:E7:70:6D:15:B8:F4:96:4E:AF:4D:70:EE:11:23:09 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:23:aa:8e:47:18:9b:09:9b:14:81:6b:46:e8:0d:66:77:27: 4b:68:9e:11:e2:0b:a4:2b:76:63:55:00:38:ff:85:e2:86:0a: 5f:d8:21:70:b3:26:2e:b3:65:d4:f0:30:ea:3f:e9:fe:3d:56: 86:90:8b:7c:2e:57:1b:b0:1d:32:90:c0:76:74:5c:5c:aa:e1: 0b:3c:35:66:ec:20:6f:95:c3:1f:eb:69:36:b7:3a:5c:6c:22: 95:a3:c8:8f:47:08:78:55:16:f8:38:5b:94:35:ec:ea:0c:97: 50:c0:8e:7d:0d:c0:79:e2:89:53:4b:5e:69:1a:1c:93:af:85: 26:26:49:d8:aa:54:66:7c:67:95:4e:b4:b0:db:2a:c2:e9:61: f1:5f:4a:ed:2e:e1:a4:94:c8:c1:a7:14:72:40:bd:3c:6e:18: 2f:49:7a:66:40:35:50:f7:12:92:eb:d9:a4:a9:11:ba:99:85: 98:94:60:ff:80:63:dc:12:b9:9e:98:a5:06:29:47:c1:d5:b3: 58:d0:fa:94:2d:81:ec:2f:bb:64:6d:32:30:ce:e3:e9:32:e4: 75:5c:c0:2a:3a:61:6b:09:0d:86:63:3e:d8:bd:84:82:2e:54: e6:1c:45:a4:da:0c:22:07:57:54:1d:b7:be:9d:bc:d7:d2:dd: fe:99:a2:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjQxMTIyMjAxNzM0WhcNMjQxMTI5MjAxNzM0WjAYMRYwFAYD VQQDEw02NzQwZTZkZS0xYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GHM8EstItrKekefqNgUAzqyc0ZB5DWz4f4zBM4wa1wzt7mGwoBtX60wyR5r yVjEphRGXHa8pj6M+2mw+Q+jiFAHEd0ic6u3jtbT8tk1sAV0zIlBlja67KzmLPXL yzHfZoWC2l25SjJq22PInT9ygLAdMu6davAsMhMs6rZ1J5rtR0igNfXpn+QayQFU VQoiS6Jx+mtJCe1STXBkoT0bXmh6hVKwt74dU3HSn+JZwPnPExd0D27q+SCvKt4r xm48kBm6rovoVIwtpA0K1UakB+wg5OLdEQcL9VDkK4WXMMHVlfUGi3ykEiOgy+tx teyOaMlrZteuTLMtYsznq9R4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNugmslv 53BtFbj0lk6vTXDuESMJMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaI6qORxibCZsUgWtG6A1mdydLaJ4R4gukK3ZjVQA4/4Xihgpf2CFw syYus2XU8DDqP+n+PVaGkIt8LlcbsB0ykMB2dFxcquELPDVm7CBvlcMf62k2tzpc bCKVo8iPRwh4VRb4OFuUNezqDJdQwI59DcB54olTS15pGhyTr4UmJknYqlRmfGeV TrSw2yrC6WHxX0rtLuGklMjBpxRyQL08bhgvSXpmQDVQ9xKS69mkqRG6mYWYlGD/ gGPcErmemKUGKUfB1bNY0PqULYHsL7tkbTIwzuPpMuR1XMAqOmFrCQ2GYz7YvYSC LlTmHEWk2gwiB1dUHbe+nbzX0t3+maJl -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org