$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft File: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft (raw, json) Hash identifier: qsVAxjj6Tzk/hYh1o+9dcJG/6/6tqckVZ6zWfXhcG1U= Subject key identifier: B8:14:FF:2A:9C:82:1F:A5:9B:55:D4:AA:5C:0B:61:2F:F8:6A:8C:06 Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Certificate serial: 101F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft Manifest number: 1018 Signing time: Fri 22 Nov 2024 17:23:22 +0000 Manifest this update: Fri 22 Nov 2024 17:23:21 +0000 Manifest next update: Fri 29 Nov 2024 17:23:21 +0000 Files and hashes: 1: AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl (hash: AwekVNCtj4odnYCk0LxMWnuyfKuzesM6Kd8J9lsKEqU=) 2: 2A44CEFE311111E98C69B181C4F9AE02.roa (hash: yVQ7Tl1tWpf81vPcr+DIGrlTie1lmDP121ZRm0ckbwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4127 (0x101f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F Validity Not Before: Nov 22 17:23:21 2024 GMT Not After : Nov 29 17:23:21 2024 GMT Subject: CN=6740be09-c8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:2b:c3:8f:93:93:c5:c2:2c:d2:76:4e:09: ee:1d:a3:a2:6e:a7:6c:e8:14:75:7d:d2:73:b0:45: a4:05:49:84:33:70:0f:92:0f:dd:6e:ea:50:93:03: fa:50:ea:e0:94:ea:7a:28:50:38:e4:90:94:01:e7: da:0d:d8:cd:17:a9:47:d9:4c:76:cb:53:e0:d6:67: bf:e5:04:3c:9c:b9:3c:4d:52:50:93:b2:48:d6:9d: 81:8b:1c:5a:78:71:a2:87:b9:f6:1d:d6:35:f4:c0: 8e:e8:89:56:2a:db:43:62:3b:26:52:57:a0:bb:80: 42:6f:25:65:42:68:a8:d8:95:aa:63:86:b3:8f:2e: 70:c3:1d:48:2d:18:f7:8e:f9:d2:1d:80:a2:85:57: 79:66:29:65:70:24:6b:71:cf:d4:0f:93:a5:87:eb: 05:22:9a:fd:41:88:e7:52:ec:4f:66:b8:fc:cf:4e: 16:9d:b8:dd:dc:43:b3:6a:f0:f7:fa:57:1c:0e:af: c8:cb:3a:c5:d8:79:fc:2d:1c:43:ff:ac:0b:98:d9: 94:54:a4:7e:0d:2d:1c:6f:8b:1e:35:5c:04:6d:df: de:db:c8:bb:07:5e:af:e5:23:35:1e:43:3d:6c:40: 2c:1a:dd:af:46:ca:e3:ac:26:92:fd:c5:48:66:85: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:14:FF:2A:9C:82:1F:A5:9B:55:D4:AA:5C:0B:61:2F:F8:6A:8C:06 X509v3 Authority Key Identifier: keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:75:09:3f:9d:53:57:cc:67:c3:70:c9:71:6d:10:bc:08:5e: 85:8c:29:c0:dd:28:94:a3:cf:d6:3b:85:b2:76:c3:af:77:e1: 05:20:28:63:7f:51:2b:11:2f:95:9e:7c:3b:4e:05:21:c1:61: e4:8b:d7:d2:3b:4e:7e:d8:7c:3e:2c:b9:66:07:5c:a1:d6:f5: ba:93:89:49:67:e9:ac:04:10:79:1c:2e:91:be:f6:88:07:b6: f2:11:bc:72:af:39:5e:4e:3c:ba:db:17:8b:15:1d:0f:28:b3: 01:f8:0e:30:48:d6:9f:4d:a9:46:de:59:95:29:64:2e:e6:89: f7:24:1a:bc:cb:76:17:6f:a4:4f:7d:79:f3:8e:b0:7b:9a:05: 9c:a6:c0:2c:d4:61:7a:54:1d:44:86:e1:5d:f3:42:db:e2:9e: e1:94:d7:3a:16:41:95:b9:d9:36:a3:55:07:63:66:be:13:6d: b6:e3:88:0b:e3:e3:d9:2c:ad:80:7d:62:eb:cf:bd:9c:f4:12: 05:72:d1:74:e2:c3:03:0e:85:c4:4f:42:b1:2d:88:15:86:5e: b6:9c:da:e5:23:75:42:17:b8:75:39:5d:3f:74:81:d4:73:b5: ca:98:ed:22:c0:79:e9:00:8f:ad:08:6d:0d:a1:1a:9f:1c:fb: 60:7f:32:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxNkExMTAvBgNVBAUTKDAwOTYxQjhGNjNBREU5RDE5RjNBQ0Y0MjgzM0FDNUQ5 QzlDNzI3OEYwHhcNMjQxMTIyMTcyMzIxWhcNMjQxMTI5MTcyMzIxWjAYMRYwFAYD VQQDEw02NzQwYmUwOS1jOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHgrw4+Tk8XCLNJ2TgnuHaOibqds6BR1fdJzsEWkBUmEM3APkg/dbupQkwP6 UOrglOp6KFA45JCUAefaDdjNF6lH2Ux2y1Pg1me/5QQ8nLk8TVJQk7JI1p2Bixxa eHGih7n2HdY19MCO6IlWKttDYjsmUlegu4BCbyVlQmio2JWqY4azjy5wwx1ILRj3 jvnSHYCihVd5ZillcCRrcc/UD5Olh+sFIpr9QYjnUuxPZrj8z04Wnbjd3EOzavD3 +lccDq/IyzrF2Hn8LRxD/6wLmNmUVKR+DS0cb4seNVwEbd/e28i7B16v5SM1HkM9 bEAsGt2vRsrjrCaS/cVIZoVkewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgU/yqc gh+lm1XUqlwLYS/4aowGMB8GA1UdIwQYMBaAFACWG49jrenRnzrPQoM6xdnJxyeP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjE2QS9GQzUxQzlFODMx MEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZkR2ZPczlDZ3pyRjJjbkhK NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKWWJqMk90NmRHZk9zOUNnenJGMmNuSEo0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjE2QS9GQzUxQzlFODMxMEIxMUU5QkI4MkZFNzJDNEY5QUUwMi9BSlliajJPdDZk R2ZPczlDZ3pyRjJjbkhKNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7dQk/nVNXzGfDcMlxbRC8CF6FjCnA3SiUo8/WO4WydsOvd+EFIChj f1ErES+Vnnw7TgUhwWHki9fSO05+2Hw+LLlmB1yh1vW6k4lJZ+msBBB5HC6RvvaI B7byEbxyrzleTjy62xeLFR0PKLMB+A4wSNafTalG3lmVKWQu5on3JBq8y3YXb6RP fXnzjrB7mgWcpsAs1GF6VB1EhuFd80Lb4p7hlNc6FkGVudk2o1UHY2a+E22244gL 4+PZLK2AfWLrz72c9BIFctF04sMDDoXET0KxLYgVhl62nNrlI3VCF7h1OV0/dIHU c7XKmO0iwHnpAI+tCG0NoRqfHPtgfzJ9 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org