$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: BSZRz1LtN2ZUtJV+/Ayk5HnrD11Sldaq057CwzoVlxs= Subject key identifier: 18:2C:CD:73:BD:48:2D:89:0D:04:6F:10:53:41:3E:89:7A:D0:64:E0 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 0B Signing time: Sat 23 Nov 2024 06:03:23 +0000 Manifest this update: Sat 23 Nov 2024 06:03:22 +0000 Manifest next update: Sat 30 Nov 2024 06:03:22 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: yCtywJZvRTSkYv0OM+my19ntd6oThfhqsmP1B6gbg5M=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: jqs0ABnXsd8cXcdu4xuE6qRkZ64UI3BOhOOWWgnZ0J4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Nov 23 06:03:22 2024 GMT Not After : Nov 30 06:03:22 2024 GMT Subject: CN=6741702b-7019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:b4:d1:d2:f4:d1:55:85:af:4f:dd:18:61: 30:2d:ca:ee:60:46:c2:ab:df:25:3e:3e:dc:97:45: 5c:71:d0:30:dd:78:de:a9:64:0d:cb:cc:5a:91:1c: 95:31:c4:4f:40:98:36:49:72:0d:46:ce:6b:54:bd: 2f:38:e3:b8:23:09:83:a6:cb:ea:5a:f4:4a:2e:38: be:a7:1a:c1:8a:ea:72:79:79:8e:c7:b1:72:fd:b8: 39:b1:f0:9d:4c:34:ba:a8:a7:97:82:6d:51:e2:3f: bb:89:7b:80:4b:9d:55:ed:d7:87:58:35:ac:d2:1a: 4f:21:a1:53:78:33:c5:08:20:49:39:cf:ec:98:96: 82:8c:c0:ce:c6:d2:6e:bc:eb:a1:94:91:2e:23:71: 93:45:d4:cb:af:3d:83:66:34:70:88:61:5c:83:aa: f7:b1:c5:1e:aa:73:fd:9d:11:59:c4:fe:9b:ae:c4: 57:a1:7e:1e:86:03:d8:eb:19:09:15:8e:25:c8:a7: ac:e5:9b:99:a4:92:76:8c:27:af:62:4f:f3:76:2c: 7a:cf:b6:dc:45:47:a4:2e:8d:4d:60:85:26:c8:78: e1:ba:c0:58:a6:90:a8:d1:ff:a9:34:b3:db:b4:0e: 9f:8b:4f:2b:1e:13:e7:43:b3:f6:25:c8:86:05:d4: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2C:CD:73:BD:48:2D:89:0D:04:6F:10:53:41:3E:89:7A:D0:64:E0 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d9:34:53:d9:e6:b2:bc:f8:46:95:c6:25:7d:cf:f3:35:43: 5d:bd:68:df:97:75:73:f8:d4:1c:c3:3a:e0:52:23:40:d7:a5: 8d:3c:7f:15:67:6b:aa:80:f3:0e:9e:8a:69:e4:18:2b:2c:74: 01:b5:04:99:bf:a1:f0:e2:ef:3c:23:bf:d2:6e:36:40:e2:78: 47:f6:5f:4f:f3:d7:46:33:d6:44:a1:40:95:97:dc:c6:d5:aa: aa:1e:78:21:00:cb:40:00:6b:cb:39:fa:76:c2:92:18:49:d5: 88:9d:ea:ef:9d:22:ee:3d:e7:58:45:ac:75:5b:99:62:90:cb: 32:ee:9e:23:a6:33:df:92:23:0c:36:0f:95:54:f9:a5:c7:9c: 3b:c4:51:22:89:99:46:d2:60:c5:c8:7c:47:c0:0c:0a:6a:ae: 1d:0b:97:43:4b:98:fa:f1:82:f2:56:07:46:fe:47:e9:c6:08: 63:68:3e:33:11:f3:4e:4a:b2:53:1e:63:b1:7f:3e:3b:e4:e3: d3:27:7b:f9:3e:70:93:29:eb:ce:97:8b:74:74:ea:97:de:b5: 7b:81:88:14:8a:b0:07:bb:8a:00:d9:22:a7:35:10:d7:03:c7: 31:13:8d:72:84:d0:99:0c:95:f3:c5:eb:33:af:6b:93:3a:1b: 31:38:87:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNDExMjMwNjAzMjJaFw0yNDExMzAwNjAzMjJaMBgxFjAUBgNV BAMTDTY3NDE3MDJiLTcwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVXLTR0vTRVYWvT90YYTAtyu5gRsKr3yU+PtyXRVxx0DDdeN6pZA3LzFqRHJUx xE9AmDZJcg1GzmtUvS8447gjCYOmy+pa9EouOL6nGsGK6nJ5eY7HsXL9uDmx8J1M NLqop5eCbVHiP7uJe4BLnVXt14dYNazSGk8hoVN4M8UIIEk5z+yYloKMwM7G0m68 66GUkS4jcZNF1MuvPYNmNHCIYVyDqvexxR6qc/2dEVnE/puuxFehfh6GA9jrGQkV jiXIp6zlm5mkknaMJ69iT/N2LHrPttxFR6QujU1ghSbIeOG6wFimkKjR/6k0s9u0 Dp+LTyseE+dDs/YlyIYF1IXjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGCzNc71I LYkNBG8QU0E+iXrQZOAwHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7ZNFPZ5rK8+EaVxiV9z/M1Q129aN+XdXP41BzDOuBSI0DXpY08fxVn a6qA8w6eimnkGCssdAG1BJm/ofDi7zwjv9JuNkDieEf2X0/z10Yz1kShQJWX3MbV qqoeeCEAy0AAa8s5+nbCkhhJ1Yid6u+dIu4951hFrHVbmWKQyzLuniOmM9+SIww2 D5VU+aXHnDvEUSKJmUbSYMXIfEfADApqrh0Ll0NLmPrxgvJWB0b+R+nGCGNoPjMR 805KslMeY7F/Pjvk49Mne/k+cJMp686Xi3R06pfetXuBiBSKsAe7igDZIqc1ENcD xzETjXKE0JkMlfPF6zOva5M6GzE4h/Q= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org