$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: ErQ2qesyGqniV3aSgXE9CrMOxv2f8zEbi5iWkGzcmBo= Subject key identifier: 8A:13:6B:E9:B0:E6:4A:75:FE:DB:18:DC:A5:D3:DD:AA:90:DB:BE:45 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 2FEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 2FBF Signing time: Sun 24 Nov 2024 15:24:39 +0000 Manifest this update: Sun 24 Nov 2024 15:24:39 +0000 Manifest next update: Sun 01 Dec 2024 15:24:39 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: r7c80v3xB0S663a1Bg4yMBTSgaB+iWB16C8V0wL43bo=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: mZztKr45nO/gM/3Jsp/t6m3zKzm9X2x6Vn1aMOLEY00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12271 (0x2fef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: Nov 24 15:24:39 2024 GMT Not After : Dec 1 15:24:39 2024 GMT Subject: CN=67434537-1655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:fe:a4:26:dd:88:0f:39:7f:dd:b2:89:e4: cd:97:b6:06:5e:cf:c7:d9:94:0f:8c:8e:82:3a:83: 97:55:e9:42:aa:67:61:a1:af:f1:03:b6:73:53:05: e6:27:27:a0:ff:9b:7d:88:56:d9:aa:e0:02:5b:4c: b6:54:44:7e:c1:f8:ca:89:d3:2f:91:4e:bd:0e:8e: a5:00:81:a4:7b:49:01:37:2f:85:de:8b:c5:a5:e1: 2e:b9:9d:f7:83:93:c9:fb:06:7a:6e:af:38:d7:c8: b2:7c:ea:6f:9c:ef:57:2d:38:1e:7f:5e:63:8b:e2: 62:da:48:50:b8:e7:43:fb:47:78:75:dd:8b:70:3c: c0:ad:76:f1:7e:30:ee:2d:d3:f3:ba:04:a4:e8:4d: 7d:61:f8:fa:c4:e2:b6:93:7d:eb:cb:c9:d6:9a:9a: 52:25:a9:3f:57:27:09:80:e2:68:16:a6:66:9a:77: 84:21:cd:23:aa:79:6c:49:8d:6a:1b:38:be:48:53: f2:51:48:19:f1:b6:74:94:5f:06:c4:69:15:39:94: 21:a9:19:18:c8:e1:27:8c:ba:34:43:e5:65:01:5c: 93:cd:6c:b5:03:75:2b:f4:ca:19:ed:e2:17:66:7a: 83:26:b4:42:da:c1:0f:d6:b4:52:f1:d3:b3:ea:c8: 3b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:6B:E9:B0:E6:4A:75:FE:DB:18:DC:A5:D3:DD:AA:90:DB:BE:45 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1a:ed:16:5a:5b:16:8f:7a:04:44:da:b2:d9:66:33:cf:27: 90:2f:68:e9:b7:b6:2d:c6:b5:ef:a5:cb:6c:58:a9:04:b4:7f: 3f:86:a8:ff:4d:a9:a9:7f:19:a8:16:da:ed:e0:4e:67:1c:a3: 8a:8a:8a:ff:90:d6:ff:68:bb:e2:d8:18:99:b5:7c:f9:d9:8e: 7a:fa:25:62:a8:ec:ef:bd:63:30:fe:88:83:e0:a5:e5:47:3f: 29:e7:b8:c8:23:ea:9e:2e:e0:82:e2:04:09:fe:4c:59:45:e3: 71:14:9d:e1:83:b1:06:e3:91:c8:2a:df:2a:c0:fa:b5:b6:5e: db:d9:e9:ba:68:a6:3a:09:7a:fc:7e:7e:c5:ad:80:4f:92:aa: 57:61:5d:69:c8:82:48:69:03:3a:b6:99:0b:ba:17:98:9b:b4: f8:13:1b:aa:ae:7a:50:ce:ca:1d:59:3b:94:22:2c:8c:df:51: 5a:7d:fa:05:68:46:fe:c1:55:31:5b:00:37:c4:d4:59:4b:75: 06:bf:e9:75:18:64:f0:d4:70:59:19:7b:07:50:f5:ad:b9:de: 68:11:ed:3b:26:63:99:df:7c:c1:aa:44:4f:ec:47:a7:0d:aa: bf:b4:fa:0a:e4:43:67:cf:dc:60:15:27:dd:87:70:20:0e:37: 5e:38:5f:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjQxMTI0MTUyNDM5WhcNMjQxMjAxMTUyNDM5WjAYMRYwFAYD VQQDEw02NzQzNDUzNy0xNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6/+pCbdiA85f92yieTNl7YGXs/H2ZQPjI6COoOXVelCqmdhoa/xA7ZzUwXm Jyeg/5t9iFbZquACW0y2VER+wfjKidMvkU69Do6lAIGke0kBNy+F3ovFpeEuuZ33 g5PJ+wZ6bq8418iyfOpvnO9XLTgef15ji+Ji2khQuOdD+0d4dd2LcDzArXbxfjDu LdPzugSk6E19Yfj6xOK2k33ry8nWmppSJak/VycJgOJoFqZmmneEIc0jqnlsSY1q Gzi+SFPyUUgZ8bZ0lF8GxGkVOZQhqRkYyOEnjLo0Q+VlAVyTzWy1A3Ur9MoZ7eIX ZnqDJrRC2sEP1rRS8dOz6sg7rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoTa+mw 5kp1/tsY3KXT3aqQ275FMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfGu0WWlsWj3oERNqy2WYzzyeQL2jpt7YtxrXvpctsWKkEtH8/hqj/ TampfxmoFtrt4E5nHKOKior/kNb/aLvi2BiZtXz52Y56+iViqOzvvWMw/oiD4KXl Rz8p57jII+qeLuCC4gQJ/kxZReNxFJ3hg7EG45HIKt8qwPq1tl7b2em6aKY6CXr8 fn7FrYBPkqpXYV1pyIJIaQM6tpkLuheYm7T4ExuqrnpQzsodWTuUIiyM31FaffoF aEb+wVUxWwA3xNRZS3UGv+l1GGTw1HBZGXsHUPWtud5oEe07JmOZ33zBqkRP7Een Daq/tPoK5ENnz9xgFSfdh3AgDjdeOF/j -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:20 2024 by rpki-client on console-ams.rpki-client.org