$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: XrgK8aQmJxddi7YT+9+CenCpqhesSsTJ1M1XDljprPg= Subject key identifier: 14:DF:75:FF:BF:2C:DB:9D:94:07:06:2D:8F:0D:BE:0F:37:17:9A:1D Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: EA Signing time: Sat 23 Nov 2024 03:32:41 +0000 Manifest this update: Sat 23 Nov 2024 03:32:40 +0000 Manifest next update: Sat 30 Nov 2024 03:32:40 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: 5nk1fYdmw9n3U30/G+clnjwxTq7f5B1+S/1+7xBT1G8=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Nov 23 03:32:40 2024 GMT Not After : Nov 30 03:32:40 2024 GMT Subject: CN=67414cd8-152d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:71:a1:e8:40:1d:c8:ea:29:e8:e4:b7:5b: c4:b0:1d:a7:d3:31:b1:01:62:b4:c5:d3:f6:7a:97: ee:3c:71:f9:6e:36:26:6d:a7:08:24:75:65:36:25: b0:94:cf:35:3a:a8:7b:81:04:1f:af:1e:9a:2d:cf: a0:ec:0b:1f:1b:3a:7e:f7:ff:e9:4f:e9:69:c6:51: f9:57:a9:e2:09:f7:38:c1:d2:75:8a:5c:5e:8d:8a: 1f:e8:f2:0f:20:0a:c5:34:58:09:17:3a:10:d0:4f: fb:ba:1b:81:7f:06:e5:89:8c:97:9d:7b:0f:5a:99: f0:43:99:2a:5c:ff:92:da:6d:62:49:cd:af:67:81: 3a:5a:b1:c3:11:d6:19:fb:cf:18:69:8f:18:be:86: 28:61:e6:5c:c1:a1:e1:f4:67:48:9b:01:6b:22:c7: 3a:0e:05:f9:cb:06:98:3a:f3:fe:b2:b5:85:21:39: 9c:8c:ff:e7:11:50:1f:7a:33:ef:83:93:fb:78:d3: 0f:25:f0:6d:6f:c6:6f:fa:07:6f:f1:54:b7:88:b5: b9:ab:91:34:30:b7:7d:8a:2c:77:21:82:78:aa:8a: 00:88:e2:4e:05:1a:6f:fc:3e:d9:7a:f6:ab:bd:57: a6:47:d6:68:ec:00:10:9c:44:15:31:a4:95:6f:15: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:75:FF:BF:2C:DB:9D:94:07:06:2D:8F:0D:BE:0F:37:17:9A:1D X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ef:fc:df:bf:01:1e:f4:d8:d2:99:fd:ab:bc:d8:c6:29:5a: e7:2a:db:ac:c7:e6:34:6b:46:79:36:2a:aa:26:00:a1:2f:fc: 87:15:be:19:2a:86:5d:5c:fc:34:bb:97:82:9f:fb:5f:1e:23: 16:ed:d7:e0:62:89:a9:9a:5d:1a:be:69:a9:3b:81:32:6b:ff: e8:91:3c:67:1b:29:19:76:c8:38:20:d4:76:ee:58:61:8e:05: b7:ab:db:17:cf:16:c7:d3:9f:4a:57:8d:0a:1f:4f:b1:9f:c1: 03:20:82:47:45:ed:53:8e:00:ae:33:2d:77:e2:5a:e6:c6:e1: 1d:2d:41:ff:08:bc:5a:16:78:ba:30:1b:35:8e:00:16:8e:f6: 2a:87:22:7e:38:5f:90:f9:99:2a:06:ee:5d:2c:d9:49:77:dc: cf:79:db:77:9c:c0:f3:a6:a6:f4:bc:a7:60:8c:82:60:bd:a7: ff:03:fc:87:dd:cb:a4:69:b5:d1:87:e7:cb:23:c6:c7:79:ff: 49:4b:7a:bc:4e:40:34:67:c0:7c:4d:85:a6:5d:f0:4e:ef:4d: dd:76:ee:6b:70:a8:0d:63:94:32:b3:4f:a9:f1:4f:ee:18:a9: f9:2d:a5:ea:24:9a:7f:16:86:b4:3b:ed:4c:32:5e:65:ff:ac: 49:00:30:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjQxMTIzMDMzMjQwWhcNMjQxMTMwMDMzMjQwWjAYMRYwFAYD VQQDEw02NzQxNGNkOC0xNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJFxoehAHcjqKejkt1vEsB2n0zGxAWK0xdP2epfuPHH5bjYmbacIJHVlNiWw lM81Oqh7gQQfrx6aLc+g7AsfGzp+9//pT+lpxlH5V6niCfc4wdJ1ilxejYof6PIP IArFNFgJFzoQ0E/7uhuBfwbliYyXnXsPWpnwQ5kqXP+S2m1iSc2vZ4E6WrHDEdYZ +88YaY8YvoYoYeZcwaHh9GdImwFrIsc6DgX5ywaYOvP+srWFITmcjP/nEVAfejPv g5P7eNMPJfBtb8Zv+gdv8VS3iLW5q5E0MLd9iix3IYJ4qooAiOJOBRpv/D7Zevar vVemR9Zo7AAQnEQVMaSVbxUYyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTfdf+/ LNudlAcGLY8Nvg83F5odMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM7/zfvwEe9NjSmf2rvNjGKVrnKtusx+Y0a0Z5NiqqJgChL/yHFb4Z KoZdXPw0u5eCn/tfHiMW7dfgYompml0avmmpO4Eya//okTxnGykZdsg4INR27lhh jgW3q9sXzxbH059KV40KH0+xn8EDIIJHRe1TjgCuMy134lrmxuEdLUH/CLxaFni6 MBs1jgAWjvYqhyJ+OF+Q+ZkqBu5dLNlJd9zPedt3nMDzpqb0vKdgjIJgvaf/A/yH 3cukabXRh+fLI8bHef9JS3q8TkA0Z8B8TYWmXfBO703ddu5rcKgNY5Qys0+p8U/u GKn5LaXqJJp/Foa0O+1MMl5l/6xJADAN -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org