$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: 1DN+i4FqMfiZOWHnlerZYkZvY2iWEN14pNt4ouW3zBE= Subject key identifier: D9:E5:FB:65:3E:2F:C5:D5:2D:C5:C5:2F:BE:7E:7D:A0:A0:F8:C3:45 Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 2974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 296B Signing time: Fri 22 Nov 2024 15:37:14 +0000 Manifest this update: Fri 22 Nov 2024 15:37:13 +0000 Manifest next update: Fri 29 Nov 2024 15:37:13 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: g4R9RnV3ShEOUPEWVzROOZHz89WeUF1x05ONZDuGvEA=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: v8ikpVeIaeLPw7BPTH8hEvqeozL1b7cNZXyGxnhNLLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10612 (0x2974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Nov 22 15:37:13 2024 GMT Not After : Nov 29 15:37:13 2024 GMT Subject: CN=6740a52a-c763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:c6:a7:ec:ad:55:01:83:3b:2e:e1:c6:14: f9:0b:75:23:8c:20:89:18:1a:81:cf:4c:a0:95:87: 63:2a:ed:e8:ae:d8:8c:ed:1c:ff:89:33:41:80:b7: ff:06:bb:8b:9d:60:7e:84:99:6c:3c:48:13:13:99: 4a:aa:35:1c:ab:f0:59:df:8a:64:25:f2:c0:d3:c5: 88:fc:cd:1a:0a:9a:a9:5f:b6:7c:ec:77:80:60:23: 41:2c:43:9d:6b:af:e6:46:40:d3:78:b2:84:79:88: de:cf:95:b7:4f:8a:65:15:93:f5:ac:97:e0:15:5d: 0f:a7:95:09:4e:d7:e4:93:26:b7:87:50:55:29:13: 55:33:cd:38:e2:b1:e3:93:5c:ca:87:fc:72:4f:10: d0:64:fd:6e:39:39:ab:be:2a:84:09:af:51:67:d7: 5d:99:39:5b:e5:64:bb:07:2f:c1:56:87:b1:2a:fb: d0:07:31:2a:db:d9:5d:91:47:9c:0e:1c:13:49:81: 83:ba:97:f4:fc:db:f8:23:46:ce:4e:36:4c:7e:31: df:23:86:b0:d7:8f:39:b8:61:46:fd:d1:e1:3b:00: 34:b5:f5:a9:e1:1e:d9:b6:3c:55:c4:2f:3f:d0:75: 37:3f:b9:0f:7e:5a:a2:d0:a8:1d:99:01:7a:47:50: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:FB:65:3E:2F:C5:D5:2D:C5:C5:2F:BE:7E:7D:A0:A0:F8:C3:45 X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:4f:71:c0:b8:41:60:e7:70:a8:69:25:0e:57:ec:f0:09: 42:9e:d5:c1:53:8f:fd:98:16:3b:da:e3:7a:ff:ab:6e:58:f2: d0:d4:5f:d9:d0:20:c8:89:87:70:6b:32:26:b0:af:13:a5:3b: 77:72:58:3c:f6:e8:25:4a:9b:26:0f:ea:2b:10:43:60:96:4e: 70:01:53:c8:1e:97:4e:55:93:d3:24:22:16:32:5e:7a:ad:03: e6:1a:da:3e:ad:2d:f5:1a:05:d2:e4:8e:0b:7b:a6:c1:13:a5: 30:f8:9f:4a:bf:21:8d:e4:ff:d1:ce:f2:33:72:74:a3:22:9d: 72:98:5c:17:19:90:ec:b5:b5:d6:34:a5:e6:14:2c:4e:b6:65: 7d:e6:97:5f:aa:5c:94:b3:f1:3c:01:6c:48:03:bb:cb:fc:36: 60:d1:1c:f4:4f:b0:a6:c6:9d:5b:fb:5d:9b:84:3e:12:32:3a: 8a:60:6b:a6:48:24:1e:ba:c5:b5:c2:d2:12:77:fc:2c:d8:ac: 46:6e:f8:79:84:b5:22:3c:40:24:71:9b:a9:a8:a5:ba:0d:f6: 76:73:06:80:36:f5:b5:b5:38:44:24:72:0e:f0:58:c6:89:09: 5e:c7:f3:8c:b2:18:e2:28:a3:ac:ff:ce:5f:63:33:b0:71:4a: d6:f4:ec:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjQxMTIyMTUzNzEzWhcNMjQxMTI5MTUzNzEzWjAYMRYwFAYD VQQDEw02NzQwYTUyYS1jNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEzGp+ytVQGDOy7hxhT5C3UjjCCJGBqBz0yglYdjKu3ortiM7Rz/iTNBgLf/ BruLnWB+hJlsPEgTE5lKqjUcq/BZ34pkJfLA08WI/M0aCpqpX7Z87HeAYCNBLEOd a6/mRkDTeLKEeYjez5W3T4plFZP1rJfgFV0Pp5UJTtfkkya3h1BVKRNVM8044rHj k1zKh/xyTxDQZP1uOTmrviqECa9RZ9ddmTlb5WS7By/BVoexKvvQBzEq29ldkUec DhwTSYGDupf0/Nv4I0bOTjZMfjHfI4aw1485uGFG/dHhOwA0tfWp4R7ZtjxVxC8/ 0HU3P7kPflqi0KgdmQF6R1AQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnl+2U+ L8XVLcXFL75+faCg+MNFMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFcU9xwLhBYOdwqGklDlfs8AlCntXBU4/9mBY72uN6/6tuWPLQ1F/Z 0CDIiYdwazImsK8TpTt3clg89uglSpsmD+orEENglk5wAVPIHpdOVZPTJCIWMl56 rQPmGto+rS31GgXS5I4Le6bBE6Uw+J9KvyGN5P/RzvIzcnSjIp1ymFwXGZDstbXW NKXmFCxOtmV95pdfqlyUs/E8AWxIA7vL/DZg0Rz0T7Cmxp1b+12bhD4SMjqKYGum SCQeusW1wtISd/ws2KxGbvh5hLUiPEAkcZupqKW6DfZ2cwaANvW1tThEJHIO8FjG iQlex/OMshjiKKOs/85fYzOwcUrW9Oyw -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:17 2024 by rpki-client on console-ams.rpki-client.org