$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: iUK0LE+h5PnmKFQQrGjMAtS3l1ju5wJTQWYGjAlAjBM= Subject key identifier: 13:E4:25:F1:F5:EC:7F:CA:35:08:F2:98:50:62:CA:43:06:2E:19:E7 Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2EBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2EAC Signing time: Fri 22 Nov 2024 15:30:41 +0000 Manifest this update: Fri 22 Nov 2024 15:30:40 +0000 Manifest next update: Fri 29 Nov 2024 15:30:40 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: 4WzBVzg2/yOKpnFPl2P3Dfob7hr5bd9nAFRfGRj8ydk=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11967 (0x2ebf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: Nov 22 15:30:40 2024 GMT Not After : Nov 29 15:30:40 2024 GMT Subject: CN=6740a3a1-8822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:d9:7f:5d:15:81:a6:d0:2b:dc:02:91:c4: e3:64:42:cb:23:65:de:9c:8f:3f:80:fe:56:8c:74: 74:91:f0:6b:f7:a7:51:8c:78:23:02:fa:90:3f:69: a2:9c:52:73:58:7b:03:e9:0d:7a:df:37:4f:84:bd: 88:dd:e5:39:18:bc:5d:43:ff:0b:82:6e:3d:ea:5d: 7f:9b:c8:ce:8c:48:05:3c:0e:dc:0b:20:fc:34:45: 41:e5:56:7c:31:9f:b7:97:ff:bb:9a:2b:61:59:1a: 3c:9d:49:55:92:19:91:5e:fa:30:fc:dc:66:52:02: b1:a2:c0:91:ef:9a:68:a9:93:c4:ee:48:05:17:fd: 0e:48:2e:6c:87:97:48:3a:f4:45:61:e6:9e:c3:6d: 01:6c:10:62:8a:d8:0f:ef:4b:77:51:8c:6f:e6:2a: 8b:14:00:21:81:70:c5:bb:06:fc:43:83:b5:ea:3c: 2f:4d:a6:0f:f0:64:34:ab:42:2f:b6:42:7d:9c:40: ad:fd:fc:32:6c:2f:20:42:bc:20:f2:da:0a:41:78: 1e:5c:0e:de:49:cf:7c:d0:ff:2e:9e:11:57:61:49: 0a:e0:44:f1:ae:0c:b3:5b:2b:2d:7e:5f:18:d6:7a: 2e:88:7a:3b:e6:c8:37:39:81:17:af:ea:50:43:6e: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E4:25:F1:F5:EC:7F:CA:35:08:F2:98:50:62:CA:43:06:2E:19:E7 X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f6:64:71:61:4d:42:4e:94:a1:56:b7:fb:45:4c:1a:f7:a8: 43:c6:bb:8f:54:f6:5c:99:d3:b7:bc:ba:a1:e2:0c:26:d2:f7: dd:c9:1e:a4:96:ed:ba:b0:a4:2d:c1:1b:93:bd:2e:1a:26:63: 86:6d:9c:fa:2c:4a:b6:25:fb:a0:b3:95:41:31:97:49:5c:22: ff:c3:a9:da:e3:0e:ee:06:97:d5:ea:45:35:34:74:0b:7b:14: 2c:5e:fc:c3:a8:ea:0f:c3:21:7e:c1:8c:c7:ba:69:a5:ce:74: 10:b0:3c:a8:d3:0e:76:25:1b:b5:a3:0c:69:83:79:e0:6d:3d: 47:61:ba:e7:53:b1:c9:37:3e:7b:a7:c3:77:72:a2:ea:32:a6: d1:be:ab:74:e3:cd:15:e4:1a:f6:95:65:68:b2:5f:86:1d:8c: 5d:cc:20:32:a8:cb:28:6a:04:00:23:18:a8:a4:3f:3f:b1:06: de:21:76:66:2f:3e:a7:b0:da:df:5f:ee:93:93:57:f2:d7:62: 9d:3e:4a:b1:99:98:1f:26:a2:98:10:bb:b2:8c:58:29:b1:c2: b8:5d:4a:c6:94:c9:37:bd:1e:dd:f4:40:d9:61:c6:af:9f:5e: 16:74:2b:ce:6e:5f:e1:bb:82:71:51:af:78:b1:28:2b:3c:42: 30:5a:f6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjQxMTIyMTUzMDQwWhcNMjQxMTI5MTUzMDQwWjAYMRYwFAYD VQQDEw02NzQwYTNhMS04ODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp7Zf10VgabQK9wCkcTjZELLI2XenI8/gP5WjHR0kfBr96dRjHgjAvqQP2mi nFJzWHsD6Q163zdPhL2I3eU5GLxdQ/8Lgm496l1/m8jOjEgFPA7cCyD8NEVB5VZ8 MZ+3l/+7mithWRo8nUlVkhmRXvow/NxmUgKxosCR75poqZPE7kgFF/0OSC5sh5dI OvRFYeaew20BbBBiitgP70t3UYxv5iqLFAAhgXDFuwb8Q4O16jwvTaYP8GQ0q0Iv tkJ9nECt/fwybC8gQrwg8toKQXgeXA7eSc980P8unhFXYUkK4ETxrgyzWystfl8Y 1nouiHo75sg3OYEXr+pQQ26AaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPkJfH1 7H/KNQjymFBiykMGLhnnMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw9mRxYU1CTpShVrf7RUwa96hDxruPVPZcmdO3vLqh4gwm0vfdyR6k lu26sKQtwRuTvS4aJmOGbZz6LEq2Jfugs5VBMZdJXCL/w6na4w7uBpfV6kU1NHQL exQsXvzDqOoPwyF+wYzHummlznQQsDyo0w52JRu1owxpg3ngbT1HYbrnU7HJNz57 p8N3cqLqMqbRvqt0480V5Br2lWVosl+GHYxdzCAyqMsoagQAIxiopD8/sQbeIXZm Lz6nsNrfX+6Tk1fy12KdPkqxmZgfJqKYELuyjFgpscK4XUrGlMk3vR7d9EDZYcav n14WdCvObl/hu4JxUa94sSgrPEIwWvbH -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org