$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json) Hash identifier: p5rVa2SMKrqNsf4cKS587rfPiCAVTVlHhmDS+BtkzfE= Subject key identifier: FC:6D:BC:C9:E1:69:F7:62:59:84:8C:B5:04:97:BF:70:99:22:09:1B Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft Manifest number: 04D5 Signing time: Fri 22 Nov 2024 23:20:10 +0000 Manifest this update: Fri 22 Nov 2024 23:20:10 +0000 Manifest next update: Fri 29 Nov 2024 23:20:10 +0000 Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: P8jMsx9F/++KYgdf5df+s19Oott8cLPJ/xy0DuHijSI=) 2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Validity Not Before: Nov 22 23:20:10 2024 GMT Not After : Nov 29 23:20:10 2024 GMT Subject: CN=674111aa-8531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:f5:fe:bc:d8:1f:e9:10:2e:bb:16:1c:07: 63:e7:05:ea:13:9d:11:b1:9e:03:72:9f:3e:db:c7: a5:b4:19:b3:6e:33:76:83:79:2e:92:f4:1e:27:c5: cd:66:4d:5f:1e:36:09:f0:cf:e9:18:75:4c:76:c9: 58:3f:81:a7:fd:79:db:73:b5:dc:2d:dd:2d:f9:ba: b7:75:70:ef:41:fc:98:fb:52:fd:ee:5a:e8:54:aa: 0c:ca:00:8d:65:26:f1:3e:4e:e0:95:8c:4c:8b:1e: 47:1b:1f:e3:a3:25:37:9c:10:70:55:4d:1f:eb:bd: c7:eb:46:e0:1f:e0:67:86:04:80:43:33:85:d6:64: 44:e8:27:33:7b:24:de:a0:0d:6a:af:5e:66:b6:da: 62:17:9b:0d:e0:c3:43:84:7c:3d:68:d7:77:a0:9e: f0:c7:8f:08:c4:b3:bc:a1:96:5d:ea:2e:f6:09:02: 88:31:dc:09:4e:25:50:99:0a:cf:ba:07:1e:ec:11: 5b:57:1b:86:32:be:c7:e5:4d:27:ce:07:3a:f5:ae: 6f:0e:ce:8f:13:17:db:d7:b2:4b:df:4d:39:56:25: 06:6c:78:27:63:78:ec:41:6c:54:c2:a5:ca:02:ac: a0:63:fd:36:10:91:57:91:e5:e0:d0:2f:b2:47:0a: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6D:BC:C9:E1:69:F7:62:59:84:8C:B5:04:97:BF:70:99:22:09:1B X509v3 Authority Key Identifier: keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:45:d9:01:78:99:c2:2d:88:87:1a:df:5c:f2:38:10:75: 1b:18:3e:d0:9d:dc:a1:5d:0d:41:84:db:68:5c:f1:90:65:59: 15:ab:34:f8:29:db:8d:9e:b2:a7:51:6c:14:5d:6d:65:a7:8b: f5:26:93:ff:ac:ae:e3:b7:ae:ef:72:c3:e2:2e:fe:f8:1c:6b: e5:b7:40:70:ac:a4:48:ae:b0:03:ec:54:89:e0:b3:e7:f0:b5: b7:bd:f5:74:9d:ab:a8:79:66:5f:8c:da:67:92:15:df:a2:70: 48:8c:3e:91:64:c5:27:02:00:10:b8:ec:2c:6e:d8:24:1f:7f: a4:51:c3:3c:b8:a0:6e:9c:5a:d2:84:78:4f:77:b6:6e:b0:91: a8:2b:ca:fa:74:95:9a:86:cb:60:f3:7e:6b:83:3b:42:eb:3c: 8a:85:ad:77:2e:39:d2:9a:c3:2b:5a:f8:25:5f:29:a6:46:c6: 68:a4:39:7f:54:87:27:63:81:8e:c9:02:8a:a7:8c:f0:6e:79: 22:dc:7d:96:9a:9d:85:d6:1c:e2:bc:fa:7e:53:5c:dc:91:68: 13:b6:ad:72:79:aa:1e:9a:18:a7:2e:77:3b:8e:c0:19:9d:49: 5b:36:ec:73:75:80:b3:fa:51:ce:76:9e:bf:dd:90:e0:9a:22: e8:1a:9f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCMEIxMTAvBgNVBAUTKEFFM0ZBNjUzNDk1NTE2NjBERkY0OEM0OTdFODM3OEE2 MzBCOTgzNzYwHhcNMjQxMTIyMjMyMDEwWhcNMjQxMTI5MjMyMDEwWjAYMRYwFAYD VQQDEw02NzQxMTFhYS04NTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtU/1/rzYH+kQLrsWHAdj5wXqE50RsZ4Dcp8+28eltBmzbjN2g3kukvQeJ8XN Zk1fHjYJ8M/pGHVMdslYP4Gn/Xnbc7XcLd0t+bq3dXDvQfyY+1L97lroVKoMygCN ZSbxPk7glYxMix5HGx/joyU3nBBwVU0f673H60bgH+BnhgSAQzOF1mRE6CczeyTe oA1qr15mttpiF5sN4MNDhHw9aNd3oJ7wx48IxLO8oZZd6i72CQKIMdwJTiVQmQrP ugce7BFbVxuGMr7H5U0nzgc69a5vDs6PExfb17JL3005ViUGbHgnY3jsQWxUwqXK AqygY/02EJFXkeXg0C+yRwqAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxtvMnh afdiWYSMtQSXv3CZIgkbMB8GA1UdIwQYMBaAFK4/plNJVRZg3/SMSX6DeKYwuYN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUIwQi8zQTRDNDYwNkY5 MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZtRGY5SXhKZm9ONHBqQzVn M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JqLW1VMGxWRm1EZjlJeEpmb040cGpDNWczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUIwQi8zQTRDNDYwNkY5MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZt RGY5SXhKZm9ONHBqQzVnM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO00XZAXiZwi2IhxrfXPI4EHUbGD7QndyhXQ1BhNtoXPGQZVkVqzT4 KduNnrKnUWwUXW1lp4v1JpP/rK7jt67vcsPiLv74HGvlt0BwrKRIrrAD7FSJ4LPn 8LW3vfV0nauoeWZfjNpnkhXfonBIjD6RZMUnAgAQuOwsbtgkH3+kUcM8uKBunFrS hHhPd7ZusJGoK8r6dJWahstg835rgztC6zyKha13LjnSmsMrWvglXymmRsZopDl/ VIcnY4GOyQKKp4zwbnki3H2Wmp2F1hzivPp+U1zckWgTtq1yeaoemhinLnc7jsAZ nUlbNuxzdYCz+lHOdp6/3ZDgmiLoGp/v -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org