$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json) Hash identifier: vo1g5du50qmcHSv8rtjpZJ0/ql4npO53r8NbjGr3BuU= Subject key identifier: 09:8C:FE:05:17:D2:F6:4B:D9:1F:55:7A:B1:DC:63:CB:A3:91:F5:C4 Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft Manifest number: A3 Signing time: Sat 23 Nov 2024 04:19:37 +0000 Manifest this update: Sat 23 Nov 2024 04:19:37 +0000 Manifest next update: Sat 30 Nov 2024 04:19:37 +0000 Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: 2QQ3zfelogv8qinmvMC4tMXWBKcw6YKpRbRKa4+/DEk=) 2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: rCeTEdWJzDJDdyTFfW5+yJKqhOmfCKimM46piNEKqjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Validity Not Before: Nov 23 04:19:37 2024 GMT Not After : Nov 30 04:19:37 2024 GMT Subject: CN=674157d9-591e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:5c:43:8f:5a:90:ad:9e:64:58:aa:ab:de: 5b:6c:db:5f:08:3f:38:34:f0:23:a8:94:29:a5:68: 98:93:ea:77:c7:21:ba:48:57:80:df:4d:7a:ba:3f: 74:44:cd:7b:b9:eb:65:6b:4b:20:9a:5d:59:eb:8b: 3e:ea:ab:37:de:68:0a:00:7c:57:2b:93:01:8e:98: a0:a3:ca:d3:99:b2:57:46:dd:5a:76:0b:23:dd:b2: 6e:21:b3:dd:3d:77:3e:f2:88:14:cb:fd:14:03:fd: fb:19:ee:97:5a:6e:f5:6f:d7:8d:5f:9e:97:60:71: 4e:28:c9:d5:76:88:ae:23:b1:fd:74:3a:bd:79:f7: 02:41:6d:28:69:a8:19:a0:1c:18:43:ba:b2:d4:09: 29:a9:9e:99:ac:46:00:d8:f9:17:2e:8f:0a:b2:94: 4e:26:e6:29:8d:08:bf:51:69:36:ed:ed:fc:b9:d1: dd:e1:51:bf:13:70:8d:fc:de:4f:12:fc:3b:b8:7a: bd:3c:79:af:d3:ef:9f:12:3c:ae:bd:65:4f:00:6b: 9f:a1:24:c3:05:e8:ce:78:2f:b3:61:93:21:6f:2f: b6:b9:8f:88:9f:a7:b6:4c:21:41:b7:87:0f:c8:43: 73:e9:3c:ed:42:0e:3b:47:d3:1b:da:b0:ff:0c:b4: 38:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:FE:05:17:D2:F6:4B:D9:1F:55:7A:B1:DC:63:CB:A3:91:F5:C4 X509v3 Authority Key Identifier: keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:15:ac:77:43:b4:06:53:ad:ee:f8:ce:24:d2:c5:ce:be: b9:e4:37:c7:fc:ee:0e:a0:c4:c3:00:32:c5:a6:9f:cb:d0:da: 13:16:3a:57:12:ca:4f:63:9e:0c:d3:ce:88:a8:62:58:e3:e3: 30:52:ab:4d:68:cf:73:ad:46:a8:83:ad:31:54:f5:2e:d8:ea: a7:d5:a1:f0:d5:19:fe:30:f8:dd:ee:c5:94:05:5d:48:d4:68: b2:fa:22:05:8c:a2:24:73:0b:05:f2:06:19:00:88:6b:29:fe: 8c:d0:1c:8f:30:48:47:8f:d4:a1:d8:57:86:ae:93:d8:46:94: dd:2f:5b:5a:46:8a:11:74:b6:d9:29:99:11:48:7c:4a:25:41: c4:7a:12:3c:76:f0:e4:72:50:24:a2:75:ea:24:4f:48:41:58: 96:96:f4:2e:f8:00:2e:92:aa:12:e9:5d:74:d8:49:a5:f1:45: 01:86:59:84:13:28:7d:67:54:8b:96:68:21:99:a9:c2:b0:c7: da:80:4b:8e:ac:ec:dd:ee:4a:3d:a3:43:ce:2a:96:63:51:8d: 5e:aa:f6:af:0b:61:63:76:82:7b:9e:ac:15:d6:eb:26:39:09: 57:33:fb:f1:bd:7b:3e:24:fe:9d:48:5c:a6:73:db:d6:4c:bb: 56:9a:62:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy QTMzQ0IzOTAwHhcNMjQxMTIzMDQxOTM3WhcNMjQxMTMwMDQxOTM3WjAYMRYwFAYD VQQDEw02NzQxNTdkOS01OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SJcQ49akK2eZFiqq95bbNtfCD84NPAjqJQppWiYk+p3xyG6SFeA3016uj90 RM17uetla0sgml1Z64s+6qs33mgKAHxXK5MBjpigo8rTmbJXRt1adgsj3bJuIbPd PXc+8ogUy/0UA/37Ge6XWm71b9eNX56XYHFOKMnVdoiuI7H9dDq9efcCQW0oaagZ oBwYQ7qy1AkpqZ6ZrEYA2PkXLo8KspROJuYpjQi/UWk27e38udHd4VG/E3CN/N5P Evw7uHq9PHmv0++fEjyuvWVPAGufoSTDBejOeC+zYZMhby+2uY+In6e2TCFBt4cP yENz6TztQg47R9Mb2rD/DLQ42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmM/gUX 0vZL2R9VerHcY8ujkfXEMB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1 RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB LWxNLVg4cFFfemNxTThzNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC9hWsd0O0BlOt7vjOJNLFzr655DfH/O4OoMTDADLFpp/L0NoTFjpX EspPY54M086IqGJY4+MwUqtNaM9zrUaog60xVPUu2Oqn1aHw1Rn+MPjd7sWUBV1I 1Giy+iIFjKIkcwsF8gYZAIhrKf6M0ByPMEhHj9Sh2FeGrpPYRpTdL1taRooRdLbZ KZkRSHxKJUHEehI8dvDkclAkonXqJE9IQViWlvQu+AAukqoS6V102Eml8UUBhlmE Eyh9Z1SLlmghmanCsMfagEuOrOzd7ko9o0POKpZjUY1eqvavC2FjdoJ7nqwV1usm OQlXM/vxvXs+JP6dSFymc9vWTLtWmmJh -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org