$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: 1a7DSoulClsDtiZYHEOdMYKkkxiHzStkZk/H7Qu/HVI= Subject key identifier: 0D:21:4F:FB:92:71:0C:4A:C9:C2:87:1A:EC:E3:73:1D:32:C2:93:D4 Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 3443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 3432 Signing time: Fri 22 Nov 2024 15:20:35 +0000 Manifest this update: Fri 22 Nov 2024 15:20:34 +0000 Manifest next update: Fri 29 Nov 2024 15:20:34 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: rKrc6lw52RbbE9IOElzZNWXeCPd/AkvrYKGXPE/yCzk=) 2: 2417A16240D111EEB97F9366C4F9AE02.roa (hash: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds=) 3: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13379 (0x3443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Nov 22 15:20:34 2024 GMT Not After : Nov 29 15:20:34 2024 GMT Subject: CN=6740a142-683f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:79:c2:fe:de:d0:2b:76:a6:62:16:0d:a1: 70:d0:48:0b:36:01:51:43:8f:33:d1:4f:32:55:e5: 82:f8:ac:e8:31:82:11:1a:53:ea:25:af:80:5e:d7: 51:14:e5:ab:f5:82:f5:22:38:a8:7c:bf:6c:61:bd: d8:d0:28:74:cf:94:3f:9f:be:22:30:a6:e6:53:d0: cb:9c:62:d2:97:82:7a:4b:1e:50:37:91:e7:e9:96: 66:19:44:07:3e:47:1c:99:08:86:97:f0:4b:bb:54: 04:f2:ef:c1:61:62:a3:df:a2:bd:b7:9b:58:ac:15: 4c:13:85:f5:f1:4a:e5:62:0b:d2:5f:0d:c6:97:12: 27:47:d8:73:46:55:ef:dc:04:02:2a:8b:66:96:e8: 0f:d6:f9:6a:2d:bc:88:53:81:57:89:ea:2a:03:15: 5f:64:47:ba:b3:a7:53:b2:ee:96:e4:a2:6a:ff:ec: 44:4a:70:4b:f3:69:22:67:34:04:95:4b:5b:b4:d3: be:9c:ae:84:25:86:0c:95:fd:c6:55:03:f3:d5:5f: 9d:ba:6a:21:1c:a9:1d:60:a6:0e:dd:9e:4b:4e:71: 7f:f9:ca:e2:b7:d0:16:5c:d9:7d:9b:91:bc:80:dd: bd:40:2f:15:5a:25:09:dc:ae:90:a6:11:8e:0f:1d: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:21:4F:FB:92:71:0C:4A:C9:C2:87:1A:EC:E3:73:1D:32:C2:93:D4 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:b4:63:58:74:d3:8f:7f:3f:63:9b:b1:a9:b3:c3:0a:7d: a5:74:ee:45:e3:b4:19:38:9c:59:89:5c:e1:48:dd:ec:14:37: 0d:7f:42:ea:8a:b3:34:79:21:c9:4a:0f:fa:5e:fa:35:d6:24: c8:32:f7:40:a4:ac:ed:39:73:82:4f:02:d6:1c:5e:81:1c:df: fa:2a:9f:14:ee:24:ed:61:5a:6a:22:06:d6:6d:5e:1d:2b:a9: 8b:ca:15:79:8c:28:11:eb:87:46:78:1a:15:76:34:d7:81:2c: 81:20:84:0d:46:c9:e7:6b:d9:f1:7f:a0:76:94:bc:89:a7:24: a1:34:83:c2:52:12:30:1a:b1:6f:59:42:72:97:16:3e:1a:ed: e8:71:38:98:8c:50:0f:59:af:99:fc:0a:67:81:20:b5:b7:8e: e3:70:a8:ab:38:fc:47:76:5e:24:91:2a:f9:2f:9e:e9:eb:e4: 02:89:ed:5f:6d:a9:b4:7d:25:22:cb:f6:c7:a8:f9:f3:ea:97: 32:5a:93:a2:c2:8b:35:fb:7a:41:06:90:a1:92:34:ee:33:ad: fb:82:ab:76:28:e8:cf:c3:5f:87:98:63:1e:2d:ac:0c:73:cc: f1:c6:a0:00:9b:3a:17:bf:3b:45:69:02:96:37:fb:cf:cc:18: 8c:19:c1:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjQxMTIyMTUyMDM0WhcNMjQxMTI5MTUyMDM0WjAYMRYwFAYD VQQDEw02NzQwYTE0Mi02ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUF5wv7e0Ct2pmIWDaFw0EgLNgFRQ48z0U8yVeWC+KzoMYIRGlPqJa+AXtdR FOWr9YL1IjiofL9sYb3Y0Ch0z5Q/n74iMKbmU9DLnGLSl4J6Sx5QN5Hn6ZZmGUQH PkccmQiGl/BLu1QE8u/BYWKj36K9t5tYrBVME4X18UrlYgvSXw3GlxInR9hzRlXv 3AQCKotmlugP1vlqLbyIU4FXieoqAxVfZEe6s6dTsu6W5KJq/+xESnBL82kiZzQE lUtbtNO+nK6EJYYMlf3GVQPz1V+dumohHKkdYKYO3Z5LTnF/+crit9AWXNl9m5G8 gN29QC8VWiUJ3K6QphGODx3FGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0hT/uS cQxKycKHGuzjcx0ywpPUMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALhrRjWHTTj38/Y5uxqbPDCn2ldO5F47QZOJxZiVzhSN3sFDcNf0Lq irM0eSHJSg/6Xvo11iTIMvdApKztOXOCTwLWHF6BHN/6Kp8U7iTtYVpqIgbWbV4d K6mLyhV5jCgR64dGeBoVdjTXgSyBIIQNRsnna9nxf6B2lLyJpyShNIPCUhIwGrFv WUJylxY+Gu3ocTiYjFAPWa+Z/ApngSC1t47jcKirOPxHdl4kkSr5L57p6+QCie1f bam0fSUiy/bHqPnz6pcyWpOiwos1+3pBBpChkjTuM637gqt2KOjPw1+HmGMeLawM c8zxxqAAmzoXvztFaQKWN/vPzBiMGcFv -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org