$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: Sd71TfzWlYyXhSMZx1gLS4WkhL0AGrUYmLJlcLqRakA= Subject key identifier: 06:18:3D:44:65:22:E4:5C:4B:0E:CB:C4:2D:81:F9:4E:EB:4F:17:84 Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 067A Signing time: Fri 22 Nov 2024 21:51:14 +0000 Manifest this update: Fri 22 Nov 2024 21:51:14 +0000 Manifest next update: Fri 29 Nov 2024 21:51:14 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: VN/eXIwW2tRq7FvtFsn8drs1C3QLV7Cae1oveVbtJ+M=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: FM7yDHlJcJDZzdbkKfFhR30NkATmp1gUFaWCKDL44ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Nov 22 21:51:14 2024 GMT Not After : Nov 29 21:51:14 2024 GMT Subject: CN=6740fcd2-fab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:a5:cd:cf:71:97:f9:4b:c4:ec:0a:c6:7b: c4:18:0e:a0:86:d8:02:dc:6f:a6:b3:91:d6:17:22: df:8e:62:1a:1d:7e:21:a9:7a:90:1e:ef:60:8d:3f: aa:d2:27:69:ca:0e:7e:28:c5:b2:06:45:0c:06:a1: 53:ff:91:5f:11:64:a6:2f:5c:b1:a6:c6:08:d6:d6: f1:26:e7:cd:01:99:fd:38:88:11:d8:7f:7d:6d:cc: 48:d7:51:c1:22:b2:b7:0d:f4:b7:cf:88:01:8a:f7: 07:de:da:57:f9:86:8d:01:b2:dd:7d:96:49:5a:db: ec:29:4b:06:46:28:c4:f1:01:e7:41:25:89:ef:6c: ce:3c:74:a9:db:60:b8:ba:33:b8:33:27:8e:de:05: d4:f2:56:b2:c8:7f:7e:a1:43:c9:35:8e:4f:b9:25: 7e:0a:0f:a3:60:77:df:d8:ba:ab:20:68:d6:26:dc: 52:cb:ba:8e:75:23:36:c9:fa:30:69:4e:ba:7c:aa: f8:1a:1e:30:d5:4f:ca:61:d0:ff:cd:53:7b:62:29: 10:fb:48:ba:61:2b:54:99:4a:54:f9:4c:38:aa:f8: 76:5f:01:18:08:47:4f:c9:8a:ea:b5:58:3e:ef:86: 48:f0:f8:3a:49:0d:e6:30:86:04:e5:40:d7:f0:9c: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:18:3D:44:65:22:E4:5C:4B:0E:CB:C4:2D:81:F9:4E:EB:4F:17:84 X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:56:16:b9:3f:80:3f:af:14:44:ce:5e:e9:db:dc:90:18:b8: 8a:80:41:bc:c9:f1:d7:22:36:f1:5f:86:17:f0:b1:8e:99:a4: ac:5b:f1:45:4f:59:aa:76:a4:8d:e6:53:0f:74:a2:f7:04:d6: 5b:b2:9a:27:c4:22:ce:fb:0b:25:8f:f7:1c:ee:53:62:2f:ec: 13:65:f0:9c:53:a4:21:46:c8:58:10:77:7a:30:6b:14:38:70: 42:79:ec:87:03:7f:75:ed:dc:ac:dd:3a:2d:7c:7d:ea:ff:d6: c1:ca:00:db:13:69:f7:3c:59:54:7c:c2:36:d2:1d:e4:65:84: c1:89:27:39:48:24:02:2d:f0:d4:6e:ae:97:2d:21:23:8e:cb: 96:f0:81:28:4f:0f:d3:ff:b8:4a:23:bd:15:7e:3f:27:c2:09: 5a:fc:42:4a:2a:e6:66:e5:f2:2f:21:18:68:2e:11:c0:ce:20: 48:e9:19:46:52:d3:77:4c:a6:e6:ac:b7:f8:19:8e:ce:a8:48: 20:fa:11:64:7b:6a:22:fe:ee:70:7b:24:68:71:dc:fb:ca:c6: f2:93:4c:8d:08:04:69:a3:c1:2d:a1:50:0f:66:eb:8e:1a:86: 98:b9:0b:ec:59:c5:97:62:71:e9:fb:07:42:15:c3:33:b7:79: cd:03:6d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjQxMTIyMjE1MTE0WhcNMjQxMTI5MjE1MTE0WjAYMRYwFAYD VQQDEw02NzQwZmNkMi1mYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxulzc9xl/lLxOwKxnvEGA6ghtgC3G+ms5HWFyLfjmIaHX4hqXqQHu9gjT+q 0idpyg5+KMWyBkUMBqFT/5FfEWSmL1yxpsYI1tbxJufNAZn9OIgR2H99bcxI11HB IrK3DfS3z4gBivcH3tpX+YaNAbLdfZZJWtvsKUsGRijE8QHnQSWJ72zOPHSp22C4 ujO4MyeO3gXU8layyH9+oUPJNY5PuSV+Cg+jYHff2LqrIGjWJtxSy7qOdSM2yfow aU66fKr4Gh4w1U/KYdD/zVN7YikQ+0i6YStUmUpU+Uw4qvh2XwEYCEdPyYrqtVg+ 74ZI8Pg6SQ3mMIYE5UDX8JwOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYYPURl IuRcSw7LxC2B+U7rTxeEMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAVha5P4A/rxREzl7p29yQGLiKgEG8yfHXIjbxX4YX8LGOmaSsW/FF T1mqdqSN5lMPdKL3BNZbsponxCLO+wslj/cc7lNiL+wTZfCcU6QhRshYEHd6MGsU OHBCeeyHA3917dys3TotfH3q/9bBygDbE2n3PFlUfMI20h3kZYTBiSc5SCQCLfDU bq6XLSEjjsuW8IEoTw/T/7hKI70Vfj8nwgla/EJKKuZm5fIvIRhoLhHAziBI6RlG UtN3TKbmrLf4GY7OqEgg+hFke2oi/u5weyRocdz7ysbyk0yNCARpo8EtoVAPZuuO GoaYuQvsWcWXYnHp+wdCFcMzt3nNA20T -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org