$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: f+M7aacUCGmhqejeRVqZnYIrIiip5IxsU18W6WbBTAU= Subject key identifier: 4C:1D:4D:27:1C:B7:D6:85:C2:52:3E:7E:D4:EC:2E:5F:70:D8:F4:E8 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 42 Signing time: Sat 23 Nov 2024 05:21:19 +0000 Manifest this update: Sat 23 Nov 2024 05:21:18 +0000 Manifest next update: Sat 30 Nov 2024 05:21:18 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: I1v8NTwH1mZ+gtGp6j4aertQrAHzVxLcgZQns5/Tlcs=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Nov 23 05:21:18 2024 GMT Not After : Nov 30 05:21:18 2024 GMT Subject: CN=6741664e-08be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:05:c0:67:5c:e2:2d:b6:ab:d8:a6:a3:7a: 40:29:9b:42:ba:35:18:3a:2a:34:8d:b4:80:0c:4a: 7a:3e:01:21:b0:b2:1e:1e:8e:fd:41:bd:8a:bb:33: c3:3d:e3:83:0a:c1:37:c1:05:f1:68:64:d1:96:cb: fd:9c:d9:15:1d:68:81:3b:7d:9f:b9:fa:9e:51:ee: af:90:96:81:6e:b7:a0:8c:e2:84:f0:d0:35:9f:94: 67:22:d1:34:a9:15:b1:81:80:66:db:10:32:33:27: b0:1f:e7:0d:40:35:d9:26:31:c0:64:11:7f:db:7b: 57:81:fb:c4:14:5e:14:a5:9c:20:7c:c4:77:6f:2e: 9e:2e:3b:44:75:9c:a4:c5:ac:96:d4:fd:94:27:f3: f7:6a:fb:e9:9f:e7:74:c1:a8:11:8b:4d:ea:43:0c: db:ca:9a:07:b6:ff:90:1b:31:4f:4a:ef:bf:d4:e5: 0f:59:6c:43:ab:37:9c:03:cd:68:05:85:c6:66:ba: 13:3b:37:38:d5:be:61:8b:21:19:b9:94:3e:a9:4b: b1:5e:80:88:6f:ec:c6:45:a2:03:50:0b:55:09:25: 08:e3:20:b6:52:c6:a0:15:14:a1:8a:0c:c4:22:d1: 77:62:75:93:01:1d:8c:86:89:f1:9c:c8:e3:78:8c: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:4D:27:1C:B7:D6:85:C2:52:3E:7E:D4:EC:2E:5F:70:D8:F4:E8 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:e3:63:4d:10:8a:40:26:0a:80:6c:a0:5c:32:db:af:78: eb:6d:af:79:d9:5c:fb:24:c7:d5:4e:9a:65:e9:ee:6c:b1:2e: 29:78:65:22:e0:c6:21:a8:4f:07:09:44:9a:e2:96:3f:0b:0e: 0d:92:0f:24:56:60:36:34:47:f5:2f:66:7a:b9:38:f8:ec:e5: e2:3e:69:7d:1a:07:38:a5:17:a9:bc:6e:8b:72:87:50:19:2d: 50:37:f2:72:9a:a6:42:cb:3d:64:d1:8f:8b:0a:98:39:1e:77: c6:7a:32:bc:64:22:40:db:d4:7a:90:24:78:e7:f8:12:1a:77: 38:29:fc:fc:11:70:b1:53:a4:83:af:b3:03:e3:df:6f:38:29: 95:7c:be:7a:9a:d6:f3:ea:91:2d:c1:ed:cc:41:5c:6d:8e:e4: 12:a2:6d:e9:26:f6:5e:8f:46:69:2d:2a:ab:40:d5:ca:ce:35: 14:ac:2a:f8:cb:45:ec:78:d3:2a:a4:ce:28:12:01:85:36:6b: 18:3e:fa:4d:6a:3c:e6:f0:3c:b4:06:2e:06:a3:4b:1c:f0:d2: 8c:54:47:41:74:e6:a7:4b:8e:9f:12:c8:2f:be:e7:bf:2d:6f: 04:54:8f:01:25:bd:3f:a4:7e:f0:c8:cf:ee:da:3d:61:55:39: db:cd:08:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJEMTExMC8GA1UEBRMoOEU1MjYxMjNFRjUyQ0Y4NDk1NTgyNkEyNzI4QTMzMDc1 N0YxRTgwQzAeFw0yNDExMjMwNTIxMThaFw0yNDExMzAwNTIxMThaMBgxFjAUBgNV BAMTDTY3NDE2NjRlLTA4YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKAQXAZ1ziLbar2KajekApm0K6NRg6KjSNtIAMSno+ASGwsh4ejv1BvYq7M8M9 44MKwTfBBfFoZNGWy/2c2RUdaIE7fZ+5+p5R7q+QloFut6CM4oTw0DWflGci0TSp FbGBgGbbEDIzJ7Af5w1ANdkmMcBkEX/be1eB+8QUXhSlnCB8xHdvLp4uO0R1nKTF rJbU/ZQn8/dq++mf53TBqBGLTepDDNvKmge2/5AbMU9K77/U5Q9ZbEOrN5wDzWgF hcZmuhM7NzjVvmGLIRm5lD6pS7FegIhv7MZFogNQC1UJJQjjILZSxqAVFKGKDMQi 0XdidZMBHYyGifGcyON4jKgJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTB1NJxy3 1oXCUj5+1OwuX3DY9OgwHwYDVR0jBBgwFoAUjlJhI+9Sz4SVWCaicoozB1fx6Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkQxL0NGRUI4REFBNDVB ODExRUY5NUM2RkQyREM0RjlBRTAyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamxKaEktOVN6NFNWV0NhaWNvb3pCMWZ4NkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkQxL0NGRUI4REFBNDVBODExRUY5NUM2RkQyREM0RjlBRTAyL2psSmhJLTlTejRT VldDYWljb296QjFmeDZBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+742NNEIpAJgqAbKBcMtuveOttr3nZXPskx9VOmmXp7myxLil4ZSLg xiGoTwcJRJrilj8LDg2SDyRWYDY0R/UvZnq5OPjs5eI+aX0aBzilF6m8botyh1AZ LVA38nKapkLLPWTRj4sKmDked8Z6MrxkIkDb1HqQJHjn+BIadzgp/PwRcLFTpIOv swPj3284KZV8vnqa1vPqkS3B7cxBXG2O5BKibekm9l6PRmktKqtA1crONRSsKvjL Rex40yqkzigSAYU2axg++k1qPObwPLQGLgajSxzw0oxUR0F05qdLjp8SyC++578t bwRUjwElvT+kfvDIz+7aPWFVOdvNCF0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org