$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: Vy2y36Uh5/pVL6aeQJ/+z3jtM0t68KE0T0fCPfdir14= Subject key identifier: EB:A2:8F:F9:35:4B:F6:2E:B2:48:32:40:65:00:38:12:C9:F4:0B:38 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 0434 Signing time: Fri 22 Nov 2024 23:51:43 +0000 Manifest this update: Fri 22 Nov 2024 23:51:42 +0000 Manifest next update: Fri 29 Nov 2024 23:51:42 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: NMzUSj5xW/Z/p5DWZwEVBS0ZmU4JXaLgYwOzmXSexBw=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Nov 22 23:51:42 2024 GMT Not After : Nov 29 23:51:42 2024 GMT Subject: CN=6741190e-1dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:6f:d0:de:97:bd:eb:88:9c:9c:7b:94:b4: 0e:53:0d:25:7a:9a:02:78:b4:47:5c:2a:47:b9:30: 51:36:a5:39:a9:8b:5a:a8:21:34:ee:58:d7:89:a6: 9b:6e:74:2e:46:01:eb:ee:72:8d:74:ff:69:3a:40: ed:37:33:12:0d:30:46:49:64:8c:d4:40:21:54:70: ca:09:d1:f2:17:8a:4e:68:51:73:83:6a:4c:2a:1a: a8:1d:91:ab:03:ce:67:3c:f4:17:27:2b:93:63:ee: 9c:68:b3:fa:36:9a:1c:db:11:94:f3:cc:4d:3e:9b: 59:c1:41:9f:db:d1:06:b2:1a:94:8d:e3:62:6e:07: 91:ff:6b:6a:e0:c8:db:68:2f:c5:ae:43:51:0a:9c: d6:9a:bd:fb:2c:e5:be:18:35:c8:67:49:ea:2b:b9: 5a:93:1a:d3:90:c7:62:91:0e:24:1e:3a:11:a9:84: dd:68:55:97:3f:4a:51:7c:13:58:0a:0b:d3:9b:75: 21:24:b3:a7:2e:f4:d4:33:6a:98:d7:aa:28:7a:b2: dc:5c:f5:82:c9:e1:44:01:0b:ec:91:15:26:64:bd: 26:78:de:9e:5c:4b:f4:17:62:6e:dc:c7:35:30:5d: 98:50:93:72:41:ec:89:2d:fb:4c:27:28:57:a5:6f: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A2:8F:F9:35:4B:F6:2E:B2:48:32:40:65:00:38:12:C9:F4:0B:38 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:f9:f9:13:f7:70:12:76:2f:96:cb:f7:e0:81:a8:84:d9:e1: 64:c7:5d:53:78:ad:87:ca:34:50:b8:3d:13:7b:be:e1:72:f0: 23:59:a9:f3:85:5b:bf:20:2e:b0:c5:0d:e6:94:63:4a:df:c4: 2b:e2:c5:23:a9:64:09:40:b5:22:76:f7:ef:cc:83:d2:5d:03: a0:f4:db:3f:aa:c0:d7:d4:98:9f:98:d5:bd:44:9f:a2:f3:34: 8d:13:f3:b1:0a:93:d1:86:a8:b8:86:97:b5:84:40:fb:85:1e: d0:d7:bb:4f:75:b3:2e:80:c6:51:b2:dc:8f:9c:30:b9:d4:38: 13:fd:88:dc:d9:6c:be:0e:9d:35:ea:cf:17:f9:7d:91:58:5d: d0:25:0d:cf:b8:12:66:1a:ba:a0:ed:6a:7c:0a:37:57:ef:4d: 59:b3:b3:21:6e:c7:86:c9:91:38:5c:4c:0b:e1:12:8a:51:57: 5e:b6:e1:9a:41:ca:12:5b:22:cc:c7:6d:c6:70:ff:96:05:ba: 5d:2a:5f:ad:70:a1:47:57:f6:bd:68:79:37:ba:91:4c:62:22: 27:ad:33:2d:ef:e7:0f:35:cf:8a:43:23:1e:a9:b5:63:9d:90: 18:c0:20:35:48:94:46:89:4a:c2:8f:cf:a2:33:47:da:2b:b2: 5b:d5:f5:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjQxMTIyMjM1MTQyWhcNMjQxMTI5MjM1MTQyWjAYMRYwFAYD VQQDEw02NzQxMTkwZS0xZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqFv0N6XveuInJx7lLQOUw0lepoCeLRHXCpHuTBRNqU5qYtaqCE07ljXiaab bnQuRgHr7nKNdP9pOkDtNzMSDTBGSWSM1EAhVHDKCdHyF4pOaFFzg2pMKhqoHZGr A85nPPQXJyuTY+6caLP6Npoc2xGU88xNPptZwUGf29EGshqUjeNibgeR/2tq4Mjb aC/FrkNRCpzWmr37LOW+GDXIZ0nqK7lakxrTkMdikQ4kHjoRqYTdaFWXP0pRfBNY CgvTm3UhJLOnLvTUM2qY16ooerLcXPWCyeFEAQvskRUmZL0meN6eXEv0F2Ju3Mc1 MF2YUJNyQeyJLftMJyhXpW+aHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuij/k1 S/YuskgyQGUAOBLJ9As4MB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDc+fkT93ASdi+Wy/fggaiE2eFkx11TeK2HyjRQuD0Te77hcvAjWanz hVu/IC6wxQ3mlGNK38Qr4sUjqWQJQLUidvfvzIPSXQOg9Ns/qsDX1JifmNW9RJ+i 8zSNE/OxCpPRhqi4hpe1hED7hR7Q17tPdbMugMZRstyPnDC51DgT/Yjc2Wy+Dp01 6s8X+X2RWF3QJQ3PuBJmGrqg7Wp8CjdX701Zs7MhbseGyZE4XEwL4RKKUVdetuGa QcoSWyLMx23GcP+WBbpdKl+tcKFHV/a9aHk3upFMYiInrTMt7+cPNc+KQyMeqbVj nZAYwCA1SJRGiUrCj8+iM0faK7Jb1fX2 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org