$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: dJjR1AMMUxw9Hi/Z4WfPIsi1puo47jPrDSsmsWzDCDI= Subject key identifier: 38:DF:1A:DD:6B:BD:26:03:FB:DF:6A:AF:9C:89:B7:C4:8E:B5:75:77 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 20A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 20A6 Signing time: Fri 22 Nov 2024 15:57:09 +0000 Manifest this update: Fri 22 Nov 2024 15:57:09 +0000 Manifest next update: Fri 29 Nov 2024 15:57:09 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: CNp+DfvWMitM06i2buimwXzu9BjquYxU0bqvQ1CDCQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8358 (0x20a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: Nov 22 15:57:09 2024 GMT Not After : Nov 29 15:57:09 2024 GMT Subject: CN=6740a9d5-8d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:ad:3e:11:72:5c:f2:45:fd:27:29:91:9b: 14:2b:51:aa:12:c1:c6:04:53:44:38:16:c3:5c:02: 82:3a:83:87:f4:be:1a:e8:67:b9:06:10:02:d2:ba: 51:e5:bd:83:7f:12:09:a3:0d:e2:14:6c:0e:75:fc: ca:84:d6:0b:c1:12:37:19:35:c9:01:9e:10:73:ae: ca:b0:98:06:d4:02:31:68:3e:f6:33:b7:af:6b:55: a8:7c:30:57:2e:87:0d:fd:25:60:44:70:12:21:ee: 7a:f5:6a:be:59:6e:f5:17:6d:81:7b:74:31:fc:af: dc:57:86:1e:78:a1:8f:85:3b:56:db:04:a0:5b:55: ee:d3:17:91:a9:9c:c6:34:de:d2:84:68:8b:f2:d7: e1:82:2a:53:c3:9d:22:98:0b:6d:4c:90:12:43:b7: 49:c7:5a:38:04:89:30:c9:f6:a6:c1:64:20:37:c0: b8:69:0f:d9:74:a4:37:c8:16:49:79:8f:26:19:0d: 95:20:48:e8:a1:c5:b5:b8:d9:2a:db:a2:bd:28:77: 21:b2:a7:02:74:a4:76:e1:1a:18:34:65:e3:c3:db: 9e:6f:41:e1:69:ce:21:06:9d:56:51:7a:db:2c:1f: ae:9e:1a:cb:88:c1:1e:04:89:f4:3f:7a:c6:07:a8: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DF:1A:DD:6B:BD:26:03:FB:DF:6A:AF:9C:89:B7:C4:8E:B5:75:77 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:88:75:87:f9:32:dc:87:9b:08:d1:b9:2d:82:57:5b:1f:a4: e4:57:bc:09:fb:1b:ce:47:39:ee:5a:87:0c:90:eb:e5:86:24: e5:9f:cf:46:95:6b:6f:ff:d1:6f:5b:d4:16:06:ca:27:5d:94: ee:5b:fb:4d:93:92:88:d3:e9:22:f4:8c:a6:78:52:39:30:12: 3e:2c:00:f5:cb:1a:1b:eb:fa:e8:57:9b:f4:47:f6:00:84:f3: 93:2e:bd:8d:10:35:cc:e4:5d:14:ad:9b:31:6d:90:be:13:1e: 52:00:41:2e:6f:9f:9b:48:b7:3b:29:56:a1:b3:db:b8:5e:d7: e3:a1:a9:36:62:28:ad:65:e0:f9:4a:a1:6b:4e:9e:c1:a2:ce: b7:19:40:d5:e8:f0:05:c5:98:e9:07:f2:d1:fb:32:ea:52:a9: 7b:0c:b8:9a:cf:60:a0:bb:5d:64:17:f8:a0:42:52:9c:52:27: 58:62:16:4b:cc:0b:6f:90:c7:4a:35:48:d0:94:c8:e1:d5:2f: ba:6b:7f:c2:c1:54:7c:15:c0:ec:07:f8:53:f8:f7:73:2c:fd: 85:75:ba:b2:ce:f3:12:44:59:d0:58:1d:f7:0b:5a:89:66:34: 88:8c:4a:76:e9:63:44:77:b7:13:68:c9:59:83:95:5e:58:12: 37:71:d3:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjQxMTIyMTU1NzA5WhcNMjQxMTI5MTU1NzA5WjAYMRYwFAYD VQQDEw02NzQwYTlkNS04ZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhCtPhFyXPJF/ScpkZsUK1GqEsHGBFNEOBbDXAKCOoOH9L4a6Ge5BhAC0rpR 5b2DfxIJow3iFGwOdfzKhNYLwRI3GTXJAZ4Qc67KsJgG1AIxaD72M7eva1WofDBX LocN/SVgRHASIe569Wq+WW71F22Be3Qx/K/cV4YeeKGPhTtW2wSgW1Xu0xeRqZzG NN7ShGiL8tfhgipTw50imAttTJASQ7dJx1o4BIkwyfamwWQgN8C4aQ/ZdKQ3yBZJ eY8mGQ2VIEjoocW1uNkq26K9KHchsqcCdKR24RoYNGXjw9ueb0Hhac4hBp1WUXrb LB+unhrLiMEeBIn0P3rGB6jwdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjfGt1r vSYD+99qr5yJt8SOtXV3MB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARiHWH+TLch5sI0bktgldbH6TkV7wJ+xvORznuWocMkOvlhiTln89G lWtv/9FvW9QWBsonXZTuW/tNk5KI0+ki9IymeFI5MBI+LAD1yxob6/roV5v0R/YA hPOTLr2NEDXM5F0UrZsxbZC+Ex5SAEEub5+bSLc7KVahs9u4Xtfjoak2YiitZeD5 SqFrTp7Bos63GUDV6PAFxZjpB/LR+zLqUql7DLiaz2Cgu11kF/igQlKcUidYYhZL zAtvkMdKNUjQlMjh1S+6a3/CwVR8FcDsB/hT+PdzLP2FdbqyzvMSRFnQWB33C1qJ ZjSIjEp26WNEd7cTaMlZg5VeWBI3cdOc -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org