$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: 16/pS0r+QxMoDoknxVQDKaMs3VxpobqqOYCcaFfOmjw= Subject key identifier: D9:54:54:C4:F8:92:0A:BD:BF:9E:AC:0D:95:37:71:A7:50:92:C8:1C Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 74 Signing time: Thu 21 Nov 2024 04:54:14 +0000 Manifest this update: Thu 21 Nov 2024 04:54:13 +0000 Manifest next update: Thu 28 Nov 2024 04:54:13 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: TEtektQ1JHlaFEy3pwNRle8fbHzH/rWukiaFz8clYTM=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: Usn+KtLh2fQfBRzeOzAzXm3AdLqgWTBEojWaTaYRxFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Nov 21 04:54:13 2024 GMT Not After : Nov 28 04:54:13 2024 GMT Subject: CN=673ebcf5-5b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:19:f4:da:61:42:2b:a8:83:58:50:0c:35: ac:7e:4c:da:90:2b:5c:40:43:09:6a:8f:b1:70:15: 46:a5:5e:7a:89:ce:1b:eb:88:38:a2:5c:8e:ab:1a: a0:25:35:0e:35:16:fe:e8:54:ed:8e:08:cf:90:75: 1e:fb:df:60:cb:90:45:6f:ea:ec:2d:cd:86:b2:d7: 1a:97:44:7e:77:a3:7f:35:bd:54:ec:ec:2e:6a:7b: 3a:53:4a:38:2f:b3:13:8e:a5:7a:05:b5:89:16:c4: cd:d3:0f:a6:b1:b6:7d:41:ca:19:61:b4:0a:78:e8: d5:27:71:41:53:ed:f1:ae:01:6f:86:a3:14:a4:87: a7:4a:a3:4e:d9:96:31:20:67:50:f6:ba:08:6c:6b: 05:24:c2:2f:f0:10:54:ce:89:8e:aa:41:a6:ab:70: b2:c5:d8:60:ca:0e:57:87:0d:14:3d:73:f9:48:dd: de:1e:fe:bd:67:51:84:20:00:e7:ed:80:81:60:88: 60:51:a0:5b:a5:2e:c9:31:e4:38:7d:26:80:a4:47: b0:f6:49:86:ca:f2:ec:3d:60:ed:35:e9:5f:3b:85: 65:65:0b:fa:46:20:6b:f5:50:ca:98:3a:b7:89:eb: c7:c1:68:80:f9:da:b5:80:90:ba:fa:fb:f5:1e:0d: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:54:54:C4:F8:92:0A:BD:BF:9E:AC:0D:95:37:71:A7:50:92:C8:1C X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b1:6e:ca:14:2a:1f:9a:dc:cf:33:8b:b2:a8:b3:54:19:ec: b0:08:81:cc:70:25:3b:e4:21:21:27:e5:38:24:e8:e7:7d:b8: fe:95:cb:ed:23:19:36:10:2f:9d:6d:93:43:7a:eb:25:f1:e5: 83:c2:f9:77:16:de:d5:03:e8:a1:83:4f:3d:a3:fd:31:c0:75: 32:f8:8b:d2:e8:66:8b:8d:c4:aa:cf:ec:0d:d4:17:c5:c3:e9: 84:04:24:b0:2f:dd:36:04:1d:47:29:aa:d1:7a:2a:ff:4a:b9: b2:fe:fb:16:79:70:a8:8f:34:76:d0:ee:6b:09:e0:74:06:32: b5:69:94:ce:c1:ff:4b:af:51:28:b1:dc:97:42:63:1d:3c:a3: 25:87:ee:b9:f0:15:d7:65:67:a1:18:d4:f2:ca:0c:54:71:46: 58:66:96:52:55:59:60:c3:36:1b:14:27:11:df:3d:f4:7f:d2: 5d:db:a3:93:3a:04:a8:50:6e:bf:c0:60:ff:ce:07:af:23:ee: 0e:84:f7:0a:00:2e:51:a9:81:50:67:a9:16:5b:d2:e3:6f:21: 9e:83:4f:aa:12:19:29:42:a2:ae:01:00:3a:70:f1:be:40:2c: 4c:ec:37:82:31:ba:37:a2:8b:13:f5:3e:aa:ab:a5:59:18:eb: 32:7c:bf:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0ExRTExMC8GA1UEBRMoOEU2NTBBNzEyREM4NEYyMkI4OUI4RjE4Qjg2NEMyOUY5 REQ3MTNDNTAeFw0yNDExMjEwNDU0MTNaFw0yNDExMjgwNDU0MTNaMBgxFjAUBgNV BAMTDTY3M2ViY2Y1LTViMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCseRn02mFCK6iDWFAMNax+TNqQK1xAQwlqj7FwFUalXnqJzhvriDiiXI6rGqAl NQ41Fv7oVO2OCM+QdR7732DLkEVv6uwtzYay1xqXRH53o381vVTs7C5qezpTSjgv sxOOpXoFtYkWxM3TD6axtn1ByhlhtAp46NUncUFT7fGuAW+GoxSkh6dKo07ZljEg Z1D2ughsawUkwi/wEFTOiY6qQaarcLLF2GDKDleHDRQ9c/lI3d4e/r1nUYQgAOft gIFgiGBRoFulLskx5Dh9JoCkR7D2SYbK8uw9YO016V87hWVlC/pGIGv1UMqYOreJ 68fBaID52rWAkLr6+/UeDWErAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2VRUxPiS Cr2/nqwNlTdxp1CSyBwwHwYDVR0jBBgwFoAUjmUKcS3ITyK4m48YuGTCn53XE8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTFFL0YwMDYyRjI4RjYz NDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam1VS2NTM0lUeUs0bTQ4WXVHVENuNTNYRThVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTFFL0YwMDYyRjI4RjYzNDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlL NG00OFl1R1RDbjUzWEU4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCxbsoUKh+a3M8zi7Kos1QZ7LAIgcxwJTvkISEn5Tgk6Od9uP6Vy+0j GTYQL51tk0N66yXx5YPC+XcW3tUD6KGDTz2j/THAdTL4i9LoZouNxKrP7A3UF8XD 6YQEJLAv3TYEHUcpqtF6Kv9KubL++xZ5cKiPNHbQ7msJ4HQGMrVplM7B/0uvUSix 3JdCYx08oyWH7rnwFddlZ6EY1PLKDFRxRlhmllJVWWDDNhsUJxHfPfR/0l3bo5M6 BKhQbr/AYP/OB68j7g6E9woALlGpgVBnqRZb0uNvIZ6DT6oSGSlCoq4BADpw8b5A LEzsN4IxujeiixP1PqqrpVkY6zJ8v08= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org