$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: fXVR6+Rg93JM3fxmY/cQ1mjX5/hTMPRPA2VggeCiWBQ= Subject key identifier: 3D:5A:76:BC:7A:DF:25:B2:9E:89:86:42:A5:69:36:75:C7:3F:7A:28 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 021B Signing time: Sat 23 Nov 2024 01:32:01 +0000 Manifest this update: Sat 23 Nov 2024 01:32:00 +0000 Manifest next update: Sat 30 Nov 2024 01:32:00 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: dWcx93PjhTVEcapfBdwq5VH+uZhONYW/H2TKkgFlKIc=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Nov 23 01:32:00 2024 GMT Not After : Nov 30 01:32:00 2024 GMT Subject: CN=67413091-029b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:16:ed:2c:9d:53:71:93:96:6c:14:bd:d1: 52:64:8a:29:74:be:51:bd:ce:88:cb:17:26:67:f2: 16:e1:d6:c2:98:dc:5f:d9:a3:00:0a:36:82:62:ef: 60:75:47:20:ab:5e:76:e9:9d:e2:1c:3b:91:25:75: ec:76:0a:75:02:fe:fc:21:82:10:a7:bc:f5:22:8b: 0d:31:d0:d0:c9:a7:88:06:50:4f:13:14:77:2c:55: 9f:07:8b:f3:4e:41:84:53:a4:84:27:92:54:c1:0a: 17:cb:48:df:ae:12:50:d8:16:c0:85:43:6b:3b:a8: 18:9a:f4:00:1f:44:75:03:92:2d:62:d2:ba:89:33: cd:d9:e3:3d:a9:f5:f8:6a:1c:48:1a:03:fd:64:f3: 08:d3:b8:b3:e6:af:d1:65:e8:37:02:62:78:ad:97: 09:f1:e8:7d:d7:de:d1:08:f8:33:d9:16:4c:ce:11: b5:f0:3e:29:9e:08:02:fe:66:81:ab:a6:5b:5e:c2: fa:7f:cc:53:fd:48:38:dc:d7:e2:23:57:5e:e5:4c: 4e:70:a3:8e:7f:a6:bd:23:1a:ee:eb:02:f1:72:3a: 96:d2:57:1a:31:2f:9c:41:8b:ca:df:1d:43:a2:b4: bb:ee:64:f2:b6:69:c0:05:31:3d:67:75:8c:3b:7c: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5A:76:BC:7A:DF:25:B2:9E:89:86:42:A5:69:36:75:C7:3F:7A:28 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:63:ce:0c:51:0d:b1:e3:f4:30:c4:1f:00:40:37:7c:9d: a3:ed:df:6b:93:d6:22:10:f2:55:34:1e:66:90:73:47:40:01: 55:f8:d2:61:4a:7d:0f:67:cf:68:1d:f0:c9:0d:cb:7a:d5:d8: cc:c1:af:55:d6:00:2a:07:0e:5a:88:cb:30:06:fb:02:28:50: 19:6c:f6:1a:27:87:82:5c:8c:b6:6e:31:2f:92:86:43:30:c2: 86:e7:51:66:33:5e:22:2f:b1:97:f2:36:b3:e7:39:10:d9:8f: 32:a3:ad:34:a9:df:eb:31:19:cc:71:10:8b:21:e7:e1:ff:c9: 08:f2:c5:6c:dc:43:a7:0c:48:1f:36:4e:13:be:f9:89:32:f7: 19:40:fc:26:27:7e:d8:8b:1d:4a:f2:c7:96:d1:3e:27:83:d8: 5c:a7:44:7f:32:c0:01:b7:53:dd:d8:1b:03:65:03:12:4b:05: b5:5e:08:b8:a4:0b:bf:90:fc:ea:91:88:f1:36:2d:97:b5:98: 72:08:49:3a:6d:26:01:d4:74:70:e0:ff:d3:f6:98:55:19:9c: c6:8b:2d:1f:c4:67:c1:e3:6f:23:60:0f:26:e7:26:3a:3e:46: c1:69:df:df:54:39:4b:7c:18:f1:c7:0f:d1:8b:ec:cd:72:f9: 9b:dc:93:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjQxMTIzMDEzMjAwWhcNMjQxMTMwMDEzMjAwWjAYMRYwFAYD VQQDEw02NzQxMzA5MS0wMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9EW7SydU3GTlmwUvdFSZIopdL5Rvc6IyxcmZ/IW4dbCmNxf2aMACjaCYu9g dUcgq1526Z3iHDuRJXXsdgp1Av78IYIQp7z1IosNMdDQyaeIBlBPExR3LFWfB4vz TkGEU6SEJ5JUwQoXy0jfrhJQ2BbAhUNrO6gYmvQAH0R1A5ItYtK6iTPN2eM9qfX4 ahxIGgP9ZPMI07iz5q/RZeg3AmJ4rZcJ8eh9197RCPgz2RZMzhG18D4pnggC/maB q6ZbXsL6f8xT/Ug43NfiI1de5UxOcKOOf6a9Ixru6wLxcjqW0lcaMS+cQYvK3x1D orS77mTytmnABTE9Z3WMO3yp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1adrx6 3yWynomGQqVpNnXHP3ooMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB98GPODFENseP0MMQfAEA3fJ2j7d9rk9YiEPJVNB5mkHNHQAFV+NJh Sn0PZ89oHfDJDct61djMwa9V1gAqBw5aiMswBvsCKFAZbPYaJ4eCXIy2bjEvkoZD MMKG51FmM14iL7GX8jaz5zkQ2Y8yo600qd/rMRnMcRCLIefh/8kI8sVs3EOnDEgf Nk4TvvmJMvcZQPwmJ37Yix1K8seW0T4ng9hcp0R/MsABt1Pd2BsDZQMSSwW1Xgi4 pAu/kPzqkYjxNi2XtZhyCEk6bSYB1HRw4P/T9phVGZzGiy0fxGfB428jYA8m5yY6 PkbBad/fVDlLfBjxxw/Ri+zNcvmb3JPp -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org