$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: L82WNGEwqCecYYs2iS4li/GjHlDUMH1lkCkv1kA+vws= Subject key identifier: 9D:E4:12:81:25:08:CC:56:DB:96:EC:D7:DB:A2:38:E4:00:0A:5F:DB Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 343C Signing time: Fri 22 Nov 2024 15:18:07 +0000 Manifest this update: Fri 22 Nov 2024 15:18:06 +0000 Manifest next update: Fri 29 Nov 2024 15:18:06 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: wVEbAuo5snDJ/yCqLjspFt8xPQYrUzNIZSP9DLif/m4=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Nov 22 15:18:06 2024 GMT Not After : Nov 29 15:18:06 2024 GMT Subject: CN=6740a0ae-3bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:1c:bc:c2:ef:a0:c6:96:5b:85:a8:3c:eb: 4d:7f:cf:e4:3f:c2:b3:1c:f2:44:68:5c:fb:66:5d: eb:37:09:d5:6e:17:92:21:10:7e:a3:4a:ed:a3:13: b4:ad:dc:86:d0:36:e5:a7:b5:c9:7c:61:ab:ec:9c: cb:d4:9e:49:57:e5:68:83:6b:3f:54:c7:f8:9f:45: 67:f9:70:62:4f:3c:3c:d9:c0:11:c3:b3:c0:27:b8: 24:83:d9:1d:3e:47:71:23:b4:08:b5:b5:65:1b:92: b8:1c:1d:d2:06:b3:e9:08:9d:43:39:0a:8e:06:08: a1:28:97:6d:06:58:03:27:f9:18:4c:00:0a:71:a7: 87:b8:a3:d7:b5:06:aa:fd:56:6e:d2:88:71:c7:e9: b4:a6:98:9f:0f:65:ff:b4:32:39:06:dd:05:b3:56: 39:f6:f8:c9:4c:fa:8c:54:58:da:19:a9:fd:22:9e: bf:f0:ac:94:32:e8:03:a7:cb:7f:02:99:b3:58:36: 0a:ad:8c:0b:8a:fd:ec:67:bb:b0:bd:14:5a:25:9f: 79:93:5c:d3:2c:4a:99:fb:dd:0a:fc:3d:57:30:d0: dd:39:dd:d1:9b:59:8d:b2:be:bc:64:6d:0b:84:7b: a8:9a:46:fa:1a:b7:87:7e:68:2d:ce:6c:04:ca:2a: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:12:81:25:08:CC:56:DB:96:EC:D7:DB:A2:38:E4:00:0A:5F:DB X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0d:11:96:6d:90:fb:14:56:ef:4d:bf:67:09:cc:32:49:6a: f7:49:05:a6:22:84:28:0f:ae:64:17:fc:b6:7b:8b:03:f0:a5: 6c:48:8a:be:80:e6:60:33:a6:1e:d0:00:b6:1f:72:c5:71:6c: aa:0a:2a:59:85:2d:2c:a7:0d:2e:f8:d8:b6:a1:c1:c4:f4:79: be:ef:b5:dc:f8:56:44:14:b9:17:04:2b:2d:2a:56:f9:9a:34: 65:55:2d:f3:87:52:5e:ce:38:65:b9:8d:0a:a6:66:a9:77:37: 90:b9:4f:3b:38:e4:6f:36:39:c9:11:dd:ea:1e:da:0a:2f:40: 1b:85:44:4e:85:40:eb:f9:e5:77:a8:fb:01:73:0c:06:8d:28: 4a:d5:ec:af:e8:ae:f1:65:9f:52:83:83:8b:77:23:dd:ad:ca: 1b:e5:28:c8:7f:ca:74:7f:54:99:de:50:e0:5e:87:6c:6f:dc: c8:f9:03:ac:13:97:fd:fb:23:88:11:f4:fd:0a:45:04:23:dc: 77:4c:70:fb:4c:7d:e0:43:ed:5f:c6:1d:6c:b0:8b:75:aa:19: 3d:d3:e7:e1:7e:6c:21:95:d4:23:2b:5d:7a:32:40:31:b6:e0: a3:2c:09:37:c0:85:a0:2c:7a:4e:2d:e1:18:9d:b2:4c:34:6f: 2c:60:87:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjQxMTIyMTUxODA2WhcNMjQxMTI5MTUxODA2WjAYMRYwFAYD VQQDEw02NzQwYTBhZS0zYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxocvMLvoMaWW4WoPOtNf8/kP8KzHPJEaFz7Zl3rNwnVbheSIRB+o0rtoxO0 rdyG0Dblp7XJfGGr7JzL1J5JV+Vog2s/VMf4n0Vn+XBiTzw82cARw7PAJ7gkg9kd PkdxI7QItbVlG5K4HB3SBrPpCJ1DOQqOBgihKJdtBlgDJ/kYTAAKcaeHuKPXtQaq /VZu0ohxx+m0ppifD2X/tDI5Bt0Fs1Y59vjJTPqMVFjaGan9Ip6/8KyUMugDp8t/ ApmzWDYKrYwLiv3sZ7uwvRRaJZ95k1zTLEqZ+90K/D1XMNDdOd3Rm1mNsr68ZG0L hHuomkb6GreHfmgtzmwEyip+swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3kEoEl CMxW25bs19uiOOQACl/bMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzDRGWbZD7FFbvTb9nCcwySWr3SQWmIoQoD65kF/y2e4sD8KVsSIq+ gOZgM6Ye0AC2H3LFcWyqCipZhS0spw0u+Ni2ocHE9Hm+77Xc+FZEFLkXBCstKlb5 mjRlVS3zh1JezjhluY0KpmapdzeQuU87OORvNjnJEd3qHtoKL0AbhUROhUDr+eV3 qPsBcwwGjShK1eyv6K7xZZ9Sg4OLdyPdrcob5SjIf8p0f1SZ3lDgXodsb9zI+QOs E5f9+yOIEfT9CkUEI9x3THD7TH3gQ+1fxh1ssIt1qhk90+fhfmwhldQjK116MkAx tuCjLAk3wIWgLHpOLeEYnbJMNG8sYIcl -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org