$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: e70Riw/OrYYDYTCIP96GMhdGJ6u0pp1TJyJ18gFgJrg= Subject key identifier: D7:1E:0B:D7:29:61:DF:A7:68:2B:A2:20:59:64:36:5F:9A:4E:B8:7F Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 0650 Signing time: Fri 22 Nov 2024 22:00:36 +0000 Manifest this update: Fri 22 Nov 2024 22:00:36 +0000 Manifest next update: Fri 29 Nov 2024 22:00:36 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: aH+AgkkItmauKKmJNfzkdAu9skc7PRDQulnc3MADcaw=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: t7mfrUSDQrKIp8JEdIvGwr5fOfRSKBqvcJKp6zu78N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Nov 22 22:00:36 2024 GMT Not After : Nov 29 22:00:36 2024 GMT Subject: CN=6740ff04-0399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:9a:4e:1d:b6:03:81:36:99:01:21:db:93: 9c:e1:25:9e:89:1c:f7:6f:f9:a7:12:f9:72:72:25: 34:38:61:c5:d2:7b:16:24:68:2d:e6:57:5a:76:ce: 37:c4:7a:cc:7b:28:6f:75:fd:af:95:64:9b:03:01: 33:38:a4:21:4f:41:66:95:70:6e:8a:80:6d:8a:ef: 9c:3b:a7:27:49:7b:8a:ce:83:ae:4c:25:da:bf:81: bf:53:db:5a:f9:83:b9:c8:92:2e:f7:5d:3d:1e:b5: 75:e4:db:5b:f3:61:14:4b:72:da:0a:17:2d:65:a9: a3:2d:f5:b4:b1:61:e2:0b:a5:61:45:95:71:15:7f: 95:ec:6e:a8:56:31:24:78:0b:bb:d4:0a:0e:54:1a: a5:7a:a3:6e:de:1b:f7:d5:c6:a7:47:b9:07:dc:9e: 43:f4:09:c6:97:43:30:a1:bf:27:6f:7e:ec:05:90: fe:b2:2b:1f:96:de:ea:67:ce:3b:9d:60:02:a1:93: 5e:5c:c9:c4:56:4f:5e:04:5c:58:26:28:f3:1c:f1: f3:78:cd:da:98:e3:af:a3:31:05:df:09:ed:42:0e: be:1e:e1:05:b6:e7:78:f2:16:b4:e7:eb:f9:0f:e1: 01:44:1b:18:a4:56:5f:7f:2d:ac:a0:ee:69:3c:bc: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:0B:D7:29:61:DF:A7:68:2B:A2:20:59:64:36:5F:9A:4E:B8:7F X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:30:10:78:fa:dc:d4:56:68:35:0e:bc:50:c0:1d:85:25:02: 6e:0d:82:b9:f2:39:ee:d6:5e:5d:65:10:99:79:df:51:cf:a6: a9:b6:4e:82:28:59:2a:d8:8a:4c:95:f0:4d:b3:19:cd:d7:46: d5:8d:9b:3e:57:b3:60:5e:89:72:74:60:9a:04:82:55:2c:0d: 61:5e:2b:5b:36:34:ad:d3:52:ce:94:6e:47:3d:bb:90:85:df: 7a:61:b8:49:2e:68:78:74:71:a3:2d:c1:2c:de:34:76:92:98: 87:d6:16:f3:58:b2:7f:5a:8a:8b:ee:84:c9:eb:6a:2b:a6:47: fc:fb:d6:21:d7:86:23:09:5f:4d:1c:6f:58:f5:85:5b:e2:b6: 81:de:ab:ae:0e:1f:a5:25:f8:95:d5:06:fe:8e:2b:5e:1f:cb: 77:e0:ec:13:dc:38:59:66:e1:97:a2:ed:df:a0:ac:f5:39:90: f4:f4:ea:7a:06:2e:e8:4d:6f:6c:96:c1:a8:b0:e6:99:91:73: dc:be:cc:31:53:7c:53:bb:d0:a5:da:56:b7:7b:0d:80:fe:9b: 0b:c6:53:15:19:94:d7:96:92:f2:74:fa:ae:89:66:f8:d8:e6: 82:11:9a:6f:a5:0b:88:44:4f:ad:da:f0:75:e4:ff:31:53:8d: 65:e9:0b:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjQxMTIyMjIwMDM2WhcNMjQxMTI5MjIwMDM2WjAYMRYwFAYD VQQDEw02NzQwZmYwNC0wMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SaaTh22A4E2mQEh25Oc4SWeiRz3b/mnEvlyciU0OGHF0nsWJGgt5ldads43 xHrMeyhvdf2vlWSbAwEzOKQhT0FmlXBuioBtiu+cO6cnSXuKzoOuTCXav4G/U9ta +YO5yJIu9109HrV15Ntb82EUS3LaChctZamjLfW0sWHiC6VhRZVxFX+V7G6oVjEk eAu71AoOVBqleqNu3hv31canR7kH3J5D9AnGl0Mwob8nb37sBZD+sisflt7qZ847 nWACoZNeXMnEVk9eBFxYJijzHPHzeM3amOOvozEF3wntQg6+HuEFtud48ha05+v5 D+EBRBsYpFZffy2soO5pPLxZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNceC9cp Yd+naCuiIFlkNl+aTrh/MB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmMBB4+tzUVmg1DrxQwB2FJQJuDYK58jnu1l5dZRCZed9Rz6aptk6C KFkq2IpMlfBNsxnN10bVjZs+V7NgXolydGCaBIJVLA1hXitbNjSt01LOlG5HPbuQ hd96YbhJLmh4dHGjLcEs3jR2kpiH1hbzWLJ/WoqL7oTJ62orpkf8+9Yh14YjCV9N HG9Y9YVb4raB3quuDh+lJfiV1Qb+jiteH8t34OwT3DhZZuGXou3foKz1OZD09Op6 Bi7oTW9slsGosOaZkXPcvswxU3xTu9Cl2la3ew2A/psLxlMVGZTXlpLydPquiWb4 2OaCEZpvpQuIRE+t2vB15P8xU41l6QsQ -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:38 2024 by rpki-client on console-fra.rpki-client.org