$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: km4+YjvDnKwA2OSrpKlwfyAzOWUUvAwQZUsYLLUDuyE= Subject key identifier: 50:C5:92:4E:EE:13:26:57:AC:4F:86:84:D3:C5:1A:17:86:34:25:65 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0CFF Signing time: Fri 22 Nov 2024 17:59:38 +0000 Manifest this update: Fri 22 Nov 2024 17:59:38 +0000 Manifest next update: Fri 29 Nov 2024 17:59:38 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: HknDhc8r4H5uOYRGJpsKq2XbDWtn41GBiXEAQlr6Ez0=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: 7nwi4xt2gy9ofefrS7G3QotlbXQ09IRHuywiHjLXzG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Nov 22 17:59:38 2024 GMT Not After : Nov 29 17:59:38 2024 GMT Subject: CN=6740c68a-8031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:40:a9:be:96:3f:28:49:04:39:b4:55:63: fe:6c:cb:f0:bc:63:e5:f2:4e:a7:de:b8:e5:79:4d: 9d:cf:d5:19:d9:38:bb:b4:d7:81:38:f7:48:79:72: 65:84:db:4f:70:89:47:21:62:e6:06:e6:41:d6:f2: 4b:06:e2:7c:d3:23:08:3b:75:9c:06:7c:94:ee:a3: 3f:56:16:d7:1b:b1:ce:8d:cb:b4:b5:51:15:f1:73: 3f:2c:6f:4b:93:18:20:d7:f1:96:89:b5:2b:ed:53: 5e:dc:2a:67:d0:59:c6:c9:54:44:49:92:4a:51:f0: f2:ce:03:ed:17:e3:df:e0:58:8d:57:1f:dc:fc:4d: bc:70:5c:d9:98:42:80:38:1b:74:9c:6b:36:62:20: 8f:67:81:49:f1:fd:29:d8:35:5c:33:48:84:0d:03: db:25:7e:c7:06:5f:c5:98:78:09:b6:e0:3a:67:a3: 08:63:e8:38:e1:d9:89:ae:37:1f:0a:b2:e9:e2:88: 7b:48:89:4a:71:df:9c:d7:5c:99:4b:34:24:7b:cf: 79:89:9c:4a:2b:59:28:b3:7d:15:7f:71:77:5b:89: c1:de:04:79:29:63:0b:f9:4c:72:fc:12:4e:18:64: 04:66:05:cc:53:db:ac:9d:51:cd:e4:84:62:83:79: 9a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C5:92:4E:EE:13:26:57:AC:4F:86:84:D3:C5:1A:17:86:34:25:65 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4e:ed:2d:6d:a3:9c:dc:97:c9:2f:92:18:72:6e:09:d5:8f: f0:da:cb:bd:ee:f5:8e:fc:a0:88:20:4e:e3:16:38:4e:8c:85: ad:05:a8:94:6d:0a:1e:36:37:6f:3f:81:98:72:2c:99:8d:05: 9a:cc:0c:63:5c:9f:3f:b5:79:e6:cf:c9:c3:e6:82:17:ca:8d: 8d:cd:50:2f:e5:67:24:80:89:81:f7:d6:3d:82:aa:fc:16:18: b0:27:09:68:c0:7d:e1:c6:c8:90:c5:62:54:23:b5:a9:57:6d: 99:61:5d:dd:fa:f8:4f:25:f1:3b:fe:d4:e4:72:42:d5:83:04: 9e:82:14:d2:af:58:a1:fa:8a:b3:46:5a:bb:aa:fc:3d:59:8f: 75:af:0c:74:e6:64:12:18:a3:88:ed:fb:f5:ab:c1:d9:aa:53: 01:f9:dc:c0:36:43:a8:03:96:97:a3:c9:eb:d7:fe:25:94:1d: 0e:5c:a6:53:04:fc:37:5d:06:7b:a8:a2:42:96:03:20:ed:4a: 40:43:00:d3:60:bd:e1:38:20:7d:7b:7b:5b:8f:0d:87:93:4d: 64:a3:95:3a:44:03:24:6e:fc:5e:9b:3d:61:f4:f7:cf:f3:55: 50:fd:f2:7e:08:37:e7:4d:14:8d:3c:b5:79:e0:d4:25:d8:28: b6:76:70:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjQxMTIyMTc1OTM4WhcNMjQxMTI5MTc1OTM4WjAYMRYwFAYD VQQDEw02NzQwYzY4YS04MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunBAqb6WPyhJBDm0VWP+bMvwvGPl8k6n3rjleU2dz9UZ2Ti7tNeBOPdIeXJl hNtPcIlHIWLmBuZB1vJLBuJ80yMIO3WcBnyU7qM/VhbXG7HOjcu0tVEV8XM/LG9L kxgg1/GWibUr7VNe3Cpn0FnGyVRESZJKUfDyzgPtF+Pf4FiNVx/c/E28cFzZmEKA OBt0nGs2YiCPZ4FJ8f0p2DVcM0iEDQPbJX7HBl/FmHgJtuA6Z6MIY+g44dmJrjcf CrLp4oh7SIlKcd+c11yZSzQke895iZxKK1kos30Vf3F3W4nB3gR5KWML+Uxy/BJO GGQEZgXMU9usnVHN5IRig3ma3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDFkk7u EyZXrE+GhNPFGheGNCVlMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTu0tbaOc3JfJL5IYcm4J1Y/w2su97vWO/KCIIE7jFjhOjIWtBaiU bQoeNjdvP4GYciyZjQWazAxjXJ8/tXnmz8nD5oIXyo2NzVAv5WckgImB99Y9gqr8 FhiwJwlowH3hxsiQxWJUI7WpV22ZYV3d+vhPJfE7/tTkckLVgwSeghTSr1ih+oqz Rlq7qvw9WY91rwx05mQSGKOI7fv1q8HZqlMB+dzANkOoA5aXo8nr1/4llB0OXKZT BPw3XQZ7qKJClgMg7UpAQwDTYL3hOCB9e3tbjw2Hk01ko5U6RAMkbvxemz1h9PfP 81VQ/fJ+CDfnTRSNPLV54NQl2Ci2dnBh -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:21 2024 by rpki-client on console-ams.rpki-client.org