$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: 1eRtlt3eCPzUNIEY4JuFek0jLe+8ZJn89lTrH0MAmW8= Subject key identifier: 43:D6:7E:DA:36:81:F5:9D:F6:38:D5:04:9D:0E:E7:B8:0F:22:A6:5D Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0C09 Signing time: Fri 22 Nov 2024 18:17:19 +0000 Manifest this update: Fri 22 Nov 2024 18:17:18 +0000 Manifest next update: Fri 29 Nov 2024 18:17:18 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: TGj1FLZqojs8rmyHKPg2oLLo8apgNiIH9CxWMgDKCsM=) 2: DF4076188EA911EFB2C2DF39C4F9AE02.roa (hash: RTMt48ljBvlnkHTTZ+J9lmK5rFGFXdWz+XaAResKx4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Nov 22 18:17:18 2024 GMT Not After : Nov 29 18:17:18 2024 GMT Subject: CN=6740caae-c6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:01:1a:6f:7f:75:64:88:04:b9:88:e0:8d: 67:88:78:a8:e1:6d:0f:3a:b3:47:f2:3e:93:7f:d8: ff:53:3f:b2:f8:58:de:ee:5a:b7:61:0f:fe:12:ec: 1b:d0:75:35:5a:fd:35:61:b0:e5:1c:c1:73:69:d0: d5:84:91:11:35:b8:d9:41:18:55:19:6c:24:90:25: 5c:8f:64:24:7f:05:ff:97:74:93:a7:b8:fd:42:94: 4b:0d:97:1d:e0:55:3f:3f:9e:7e:a7:fe:d7:4f:4b: 9b:3f:34:cf:52:54:07:dc:91:6a:ab:ef:ea:34:36: f0:91:18:51:a4:1a:e2:d9:8c:ac:2a:c0:89:ac:d5: 3b:e7:e5:5a:59:c5:c5:b6:52:91:a6:32:4c:cd:eb: d0:7e:3b:27:37:25:67:25:95:93:3a:e3:18:6b:45: a2:71:1d:99:51:a5:c9:04:2d:c8:79:bf:5e:dc:40: 7d:5f:58:74:fc:52:c5:20:c4:a2:ae:b0:79:b7:37: 46:9b:2f:69:c3:f2:b2:43:53:5e:6f:fb:89:cb:b5: 28:de:67:08:fc:85:53:f4:a9:ba:72:b7:f1:e1:a5: d0:7a:97:3b:a5:94:93:23:86:40:27:41:30:45:66: 96:7f:32:5d:0c:b0:b4:73:a1:b5:1b:0c:b4:0d:da: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:7E:DA:36:81:F5:9D:F6:38:D5:04:9D:0E:E7:B8:0F:22:A6:5D X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:55:5c:b9:86:31:98:62:be:a1:d9:c9:37:fc:75:f6:c9:bb: a8:ce:42:a3:b1:87:34:65:45:7c:03:43:d8:68:7e:9a:9e:2c: 6c:e0:f2:d9:4c:19:18:3c:f6:37:42:4a:16:82:c0:a0:50:50: 01:02:ee:51:05:fa:71:63:d4:de:58:f9:fe:4e:96:fe:3c:24: 55:b7:6b:b1:e2:5e:fd:3b:ad:c1:d8:d1:d6:79:58:d3:2f:a2: 7d:53:9f:59:10:ed:75:e9:82:a9:a5:fd:e3:12:52:62:01:32: ff:55:49:f9:3c:a8:bb:83:cf:f1:46:2e:13:62:ec:f3:d2:cb: 65:43:10:22:e4:0a:92:08:bb:e5:71:74:61:4c:79:ac:6a:24: 41:eb:14:27:ec:f6:60:95:f8:2b:b6:7d:5d:c0:ac:ff:b2:d2: fb:81:6d:16:47:d5:d8:e6:1b:52:37:87:6a:65:b0:e3:71:4e: 8c:d1:d3:43:99:c8:d8:17:24:a9:2f:b6:37:3f:35:e1:1b:db: 5a:01:b8:39:4c:d8:06:fb:a3:8a:55:9e:3a:c2:07:b9:99:78: b5:6c:64:17:07:4e:6e:46:81:97:88:30:35:80:ce:d2:90:30: 53:21:54:01:e2:fb:e9:18:07:6b:58:e5:e2:a8:17:96:37:00: 73:85:1d:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjQxMTIyMTgxNzE4WhcNMjQxMTI5MTgxNzE4WjAYMRYwFAYD VQQDEw02NzQwY2FhZS1jNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySYBGm9/dWSIBLmI4I1niHio4W0POrNH8j6Tf9j/Uz+y+Fje7lq3YQ/+Euwb 0HU1Wv01YbDlHMFzadDVhJERNbjZQRhVGWwkkCVcj2QkfwX/l3STp7j9QpRLDZcd 4FU/P55+p/7XT0ubPzTPUlQH3JFqq+/qNDbwkRhRpBri2YysKsCJrNU75+VaWcXF tlKRpjJMzevQfjsnNyVnJZWTOuMYa0WicR2ZUaXJBC3Ieb9e3EB9X1h0/FLFIMSi rrB5tzdGmy9pw/KyQ1Neb/uJy7Uo3mcI/IVT9Km6crfx4aXQepc7pZSTI4ZAJ0Ew RWaWfzJdDLC0c6G1Gwy0DdqTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPWfto2 gfWd9jjVBJ0O57gPIqZdMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXVVy5hjGYYr6h2ck3/HX2ybuozkKjsYc0ZUV8A0PYaH6anixs4PLZ TBkYPPY3QkoWgsCgUFABAu5RBfpxY9TeWPn+Tpb+PCRVt2ux4l79O63B2NHWeVjT L6J9U59ZEO116YKppf3jElJiATL/VUn5PKi7g8/xRi4TYuzz0stlQxAi5AqSCLvl cXRhTHmsaiRB6xQn7PZglfgrtn1dwKz/stL7gW0WR9XY5htSN4dqZbDjcU6M0dND mcjYFySpL7Y3PzXhG9taAbg5TNgG+6OKVZ46wge5mXi1bGQXB05uRoGXiDA1gM7S kDBTIVQB4vvpGAdrWOXiqBeWNwBzhR3k -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org