$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: rOn6P/1T7YTjvrnEz82FCfJmfwWw8cJTwqQAcR7gWw8= Subject key identifier: 42:AA:E5:9B:2B:1B:E2:17:F8:F5:23:9E:D0:A5:D5:9B:93:6C:E6:EA Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 04A7 Signing time: Fri 22 Nov 2024 23:30:46 +0000 Manifest this update: Fri 22 Nov 2024 23:30:46 +0000 Manifest next update: Fri 29 Nov 2024 23:30:46 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: fNsx8kenlNoTXhUb+Ze7CC1Sl64e+YHi4zkhYosMQ/w=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: Nov 22 23:30:46 2024 GMT Not After : Nov 29 23:30:46 2024 GMT Subject: CN=67411426-5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:af:10:69:01:09:03:da:bf:00:34:66:6c: b0:58:96:dc:55:1d:95:81:4c:2c:39:e9:da:93:94: e9:4b:16:cd:5e:29:e2:bb:88:64:8e:f2:c3:b5:eb: ee:a5:d9:2f:f1:28:ab:20:dc:2f:39:54:0b:de:6c: b1:14:e4:71:82:04:a8:32:82:68:68:43:f6:47:a3: bb:e4:0a:99:23:9f:3f:fc:a0:c1:1d:fd:50:db:8c: e2:f7:f6:88:5b:48:07:b1:c8:86:79:73:ab:27:78: dd:49:3b:68:63:fc:78:32:02:c1:54:ae:39:5c:b7: 2a:e7:c4:a8:51:37:98:1b:ed:df:5e:cb:05:c0:b1: 7a:ef:96:22:a4:d0:60:ac:49:1b:cd:57:74:79:9c: d6:3b:38:97:80:43:8c:d9:c8:25:1a:2a:1e:98:2e: 48:1c:63:83:e9:de:91:7b:13:a4:eb:a8:dc:ed:c4: 0a:eb:4b:61:2b:e2:f7:3a:17:6c:e3:33:35:64:5b: e3:a5:c7:3d:f4:21:3b:59:46:d8:f3:e7:dd:45:11: dd:10:ce:ec:be:ca:1e:19:82:9e:05:eb:f4:1b:fd: 5d:87:38:55:5f:02:27:74:96:e0:9b:b5:81:6b:3c: c2:f9:e5:d3:23:f8:c9:ae:dc:6b:f6:42:f6:dd:2a: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:E5:9B:2B:1B:E2:17:F8:F5:23:9E:D0:A5:D5:9B:93:6C:E6:EA X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:64:88:b5:83:57:09:81:ab:c8:24:46:af:1e:87:3c:b0:e0: e8:d4:c4:47:6f:db:07:2c:40:53:d3:7e:98:00:c2:1b:d7:53: a5:31:9d:bb:75:f5:24:bb:94:d1:3f:fd:6f:34:00:67:eb:b1: bf:ac:40:d8:ef:ff:d8:69:5c:14:0b:15:89:68:0f:77:9a:49: df:e3:ce:23:c7:aa:26:55:83:cf:61:17:90:f0:c9:a0:87:38: 59:70:6e:98:b3:3e:13:e7:a9:44:3d:2d:39:d5:6e:12:aa:02: 65:e0:13:2f:f9:f1:b3:b0:27:13:65:71:5b:94:7e:8a:1b:03: 52:3e:86:5a:24:6d:2a:cc:86:34:d6:d1:16:c4:dc:30:03:ec: 75:03:fb:a8:c9:de:33:b1:39:9e:45:ff:6a:b5:eb:57:c3:02: ee:86:b2:bc:4f:85:c0:a8:0a:df:60:85:40:d9:86:71:75:27: 4e:bd:37:ae:cf:2f:d5:bb:76:c4:67:f3:7c:09:32:ad:79:da: d3:ad:8d:fb:b0:a9:a2:f0:92:17:b2:52:89:b8:4a:de:93:b7: b7:65:37:14:e6:26:b8:55:8a:01:6d:a8:28:d9:20:0c:73:9d: 52:92:22:e9:46:bb:e0:ce:9d:77:9e:4c:7b:fa:60:a3:b6:bb: bb:ca:e1:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjQxMTIyMjMzMDQ2WhcNMjQxMTI5MjMzMDQ2WjAYMRYwFAYD VQQDEw02NzQxMTQyNi01YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yWvEGkBCQPavwA0ZmywWJbcVR2VgUwsOenak5TpSxbNXiniu4hkjvLDtevu pdkv8SirINwvOVQL3myxFORxggSoMoJoaEP2R6O75AqZI58//KDBHf1Q24zi9/aI W0gHsciGeXOrJ3jdSTtoY/x4MgLBVK45XLcq58SoUTeYG+3fXssFwLF675YipNBg rEkbzVd0eZzWOziXgEOM2cglGioemC5IHGOD6d6RexOk66jc7cQK60thK+L3Ohds 4zM1ZFvjpcc99CE7WUbY8+fdRRHdEM7svsoeGYKeBev0G/1dhzhVXwIndJbgm7WB azzC+eXTI/jJrtxr9kL23Sr4EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKq5Zsr G+IX+PUjntCl1ZuTbObqMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnZIi1g1cJgavIJEavHoc8sODo1MRHb9sHLEBT036YAMIb11OlMZ27 dfUku5TRP/1vNABn67G/rEDY7//YaVwUCxWJaA93mknf484jx6omVYPPYReQ8Mmg hzhZcG6Ysz4T56lEPS051W4SqgJl4BMv+fGzsCcTZXFblH6KGwNSPoZaJG0qzIY0 1tEWxNwwA+x1A/uoyd4zsTmeRf9qtetXwwLuhrK8T4XAqArfYIVA2YZxdSdOvTeu zy/Vu3bEZ/N8CTKtedrTrY37sKmi8JIXslKJuErek7e3ZTcU5ia4VYoBbago2SAM c51SkiLpRrvgzp13nkx7+mCjtru7yuGu -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org