$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: wjDA4WqRNo07RfmVngnT555tRIpYzbSQec0JvBQjy+0= Subject key identifier: 08:B0:FC:64:2A:8B:29:62:85:84:34:2C:76:14:CC:08:F3:03:4B:B7 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 03A0 Signing time: Thu 21 Nov 2024 00:18:21 +0000 Manifest this update: Thu 21 Nov 2024 00:18:20 +0000 Manifest next update: Thu 28 Nov 2024 00:18:20 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: 0123Sf0+WoFGaBAtKBqGy1Idk+Ssp1TLTiSIAecn2dQ=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: k+Z56AZRkmsg8G/VM5gkdImqRL0zYO34OeSgcqTOnfk=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: g2dvLYBGOdMHNfTcKzHb+shJjdNBYdOW92QYVT374z4=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: 4yf2iy/EaDycevCFtGY4EKlu7vgv+r5omMQGMcRFOK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Nov 21 00:18:20 2024 GMT Not After : Nov 28 00:18:20 2024 GMT Subject: CN=673e7c4d-a0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:a6:6f:e4:dd:ba:ea:29:92:63:a5:93:c0: 5c:89:8e:a2:45:94:a0:dc:e0:ed:9b:d9:e0:8b:9e: 62:ad:dd:e3:74:00:fe:c3:7c:7e:67:5a:73:9e:93: e3:f8:b8:ae:cb:08:8c:29:06:20:e2:27:ca:91:56: 86:01:22:64:ba:91:38:b3:89:0d:b1:0a:b4:ae:c7: f1:23:a5:88:4d:f0:0f:f5:8a:5e:76:4c:00:32:07: fc:1c:b5:8d:86:07:1a:7d:ed:5e:93:34:43:db:3b: fb:1c:bc:83:39:49:9e:f9:e4:85:47:ab:a5:a4:ff: c7:8b:be:68:91:60:e7:79:ea:54:d3:eb:ed:74:e9: 3c:32:3f:3d:fe:47:b8:35:12:39:a3:f3:c7:1b:68: 43:61:5e:97:5b:47:90:fe:5a:9d:62:1a:39:68:14: ea:3a:04:d9:61:09:4b:32:ca:6b:30:e8:ae:1e:ac: 22:51:3a:e4:00:34:79:47:ba:f7:93:c2:37:e2:15: 3c:1e:7b:18:27:c6:d6:7f:b3:7b:fe:9e:32:fa:0d: e5:0c:ed:ef:3b:68:ea:ce:e4:01:ca:fb:97:2d:33: 0b:86:55:e1:ed:40:b9:8e:c4:6e:2f:4d:65:f2:16: 37:c9:8c:7d:16:71:e6:d4:f0:b3:ac:30:9d:50:2a: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B0:FC:64:2A:8B:29:62:85:84:34:2C:76:14:CC:08:F3:03:4B:B7 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:83:07:7f:58:97:ac:be:53:e0:d1:24:fe:ce:39:81:e9:5a: 6a:7d:44:fe:d1:a0:9b:45:fb:51:b5:33:73:be:78:ea:48:d5: e1:d0:9a:a9:2d:fb:97:a5:4d:6b:55:a8:a3:94:73:04:b9:ec: 32:1a:ea:27:4f:19:c5:8e:cd:72:a9:f6:27:8c:49:a9:79:1b: 1a:b4:99:94:b6:00:8e:80:39:3c:b3:12:db:ef:65:bc:a3:8f: 80:a6:f1:51:eb:a1:96:24:9f:80:10:86:55:cd:e0:91:41:50: 2d:45:33:7c:44:df:96:6e:f7:56:49:3d:1c:a8:a8:3b:27:fc: 13:2e:3b:6a:0a:67:1c:f0:8b:26:dc:16:c7:a2:ed:db:0d:b6: cd:89:14:9c:00:84:15:96:8f:82:37:07:de:bc:d7:1e:a1:35: 5a:c4:69:29:06:40:21:e9:7d:7a:20:bc:b4:19:43:cf:bf:86: 28:88:df:b5:63:da:c2:58:a7:2d:9f:0a:34:4e:64:a2:13:92: fa:be:7e:20:eb:fa:86:63:16:91:30:fb:d8:c1:db:26:8b:38: 3b:3d:0b:66:9f:f0:4f:c0:90:cf:f6:f7:40:86:6c:e5:51:cc: 1d:f8:bc:d8:f9:72:98:37:6a:5e:2a:88:23:49:32:3c:61:bb: 2b:7a:3b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjQxMTIxMDAxODIwWhcNMjQxMTI4MDAxODIwWjAYMRYwFAYD VQQDEw02NzNlN2M0ZC1hMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6imb+TduuopkmOlk8BciY6iRZSg3ODtm9ngi55ird3jdAD+w3x+Z1pznpPj +LiuywiMKQYg4ifKkVaGASJkupE4s4kNsQq0rsfxI6WITfAP9YpedkwAMgf8HLWN hgcafe1ekzRD2zv7HLyDOUme+eSFR6ulpP/Hi75okWDneepU0+vtdOk8Mj89/ke4 NRI5o/PHG2hDYV6XW0eQ/lqdYho5aBTqOgTZYQlLMsprMOiuHqwiUTrkADR5R7r3 k8I34hU8HnsYJ8bWf7N7/p4y+g3lDO3vO2jqzuQByvuXLTMLhlXh7UC5jsRuL01l 8hY3yYx9FnHm1PCzrDCdUCowqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiw/GQq iylihYQ0LHYUzAjzA0u3MB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2gwd/WJesvlPg0ST+zjmB6VpqfUT+0aCbRftRtTNzvnjqSNXh0Jqp LfuXpU1rVaijlHMEuewyGuonTxnFjs1yqfYnjEmpeRsatJmUtgCOgDk8sxLb72W8 o4+ApvFR66GWJJ+AEIZVzeCRQVAtRTN8RN+WbvdWST0cqKg7J/wTLjtqCmcc8Ism 3BbHou3bDbbNiRScAIQVlo+CNwfevNceoTVaxGkpBkAh6X16ILy0GUPPv4YoiN+1 Y9rCWKctnwo0TmSiE5L6vn4g6/qGYxaRMPvYwdsmizg7PQtmn/BPwJDP9vdAhmzl Ucwd+LzY+XKYN2peKogjSTI8Ybsrejuh -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:07 2024 by rpki-client on console-ams.rpki-client.org