$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: FzuiwBLNfIXEyuZOz9M3aQibhonfWJdWWD7VDx3m2tU= Subject key identifier: 20:3C:9F:A3:F2:4C:05:A2:FA:47:9C:3F:E9:F8:A9:3B:99:F0:20:70 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 19F8 Signing time: Fri 22 Nov 2024 16:22:48 +0000 Manifest this update: Fri 22 Nov 2024 16:22:48 +0000 Manifest next update: Fri 29 Nov 2024 16:22:48 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: Ys/RvWzn0zLVnMpQ0F07LkUzEGNyHdOBZ8BNGpMvjuw=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: bh3z16gZ2VSFsHisnqXivod3jWj16xVb8JpTHoh3XV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6657 (0x1a01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Nov 22 16:22:48 2024 GMT Not After : Nov 29 16:22:48 2024 GMT Subject: CN=6740afd8-8e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:00:d0:41:23:33:0f:4b:5c:d5:4a:0c:f0: 36:3d:4e:64:c3:03:89:14:83:6f:a2:b4:f8:1f:07: 44:8f:f5:8b:79:8d:7b:a4:17:86:01:e0:e2:2e:9d: 72:29:48:c5:db:fa:c6:95:37:2e:1a:27:a6:b6:37: 80:09:07:5a:aa:92:28:05:6f:6e:57:c9:c9:9a:d6: 55:b6:7d:bb:d1:45:39:7e:be:45:a3:78:5e:55:9c: 8e:93:f9:30:fd:88:ea:84:4d:d9:ea:5a:8f:a0:28: 78:ae:37:4f:7d:f5:d0:e7:03:88:d4:be:36:c4:4b: f9:67:b2:e6:05:7e:73:05:72:4f:ef:29:db:12:76: 95:a7:13:8b:74:dd:ae:81:a8:6b:1f:93:db:16:11: f6:79:34:75:c6:ab:b5:85:f6:65:4f:c3:57:46:6f: 2c:1c:27:b3:ee:2b:52:0f:71:ef:e7:4c:3a:2c:3e: e1:23:fc:fa:7c:be:aa:42:97:95:a7:ea:88:46:42: e2:33:80:7e:5f:6e:ff:4f:4a:e2:9f:d4:49:b8:d3: 63:7f:1f:a4:64:7d:bf:dd:d2:75:3f:a7:de:54:3d: 13:54:0b:6f:8e:a1:94:20:93:56:5c:1b:1f:5f:1a: 70:48:a6:b5:44:8f:57:e9:ad:f0:ed:3c:e1:c7:f2: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3C:9F:A3:F2:4C:05:A2:FA:47:9C:3F:E9:F8:A9:3B:99:F0:20:70 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b1:a7:39:ef:25:9a:20:5e:f7:ff:d2:d8:bb:e2:a4:08:9e: b6:8e:71:7d:3c:69:08:1d:3c:71:20:83:9d:56:1f:70:8d:2f: da:04:22:ee:1c:4e:90:0a:4b:7b:69:40:ee:25:7e:b9:7a:56: 77:38:e2:8f:9e:15:84:57:63:d7:34:40:9f:e7:4c:10:6c:d8: 92:95:d2:74:26:c9:0b:3c:26:e1:7a:1f:0d:25:bc:30:47:67: 7b:a1:87:83:e9:45:a4:28:12:4c:76:c1:39:ca:f3:a0:e7:80: 8c:33:6d:b6:79:3c:19:59:95:92:5c:08:bc:3b:5b:1f:74:2b: a4:11:f8:6c:f6:60:c7:e7:9a:97:d0:68:e4:bc:d2:d5:f7:b2: af:91:39:24:d4:05:5a:91:65:ec:61:91:16:b4:0c:67:fa:de: c4:eb:d1:00:f1:2c:e6:54:aa:4d:12:b8:32:41:42:3a:06:17: 66:d8:1b:7e:7b:76:ff:56:90:b0:4b:7b:5f:85:57:5e:6b:7b: 8f:2e:e3:12:18:7f:7d:5b:44:24:3a:8b:c5:f8:71:2a:54:f9: 98:f2:e2:b0:b2:59:55:18:19:57:f8:7f:1c:b8:34:d4:91:cb: fd:66:0e:a4:a6:2e:cf:b2:be:2e:bf:41:db:2a:23:c0:36:d9: 7b:2b:02:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjQxMTIyMTYyMjQ4WhcNMjQxMTI5MTYyMjQ4WjAYMRYwFAYD VQQDEw02NzQwYWZkOC04ZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQAA0EEjMw9LXNVKDPA2PU5kwwOJFINvorT4HwdEj/WLeY17pBeGAeDiLp1y KUjF2/rGlTcuGiemtjeACQdaqpIoBW9uV8nJmtZVtn270UU5fr5Fo3heVZyOk/kw /YjqhE3Z6lqPoCh4rjdPffXQ5wOI1L42xEv5Z7LmBX5zBXJP7ynbEnaVpxOLdN2u gahrH5PbFhH2eTR1xqu1hfZlT8NXRm8sHCez7itSD3Hv50w6LD7hI/z6fL6qQpeV p+qIRkLiM4B+X27/T0rin9RJuNNjfx+kZH2/3dJ1P6feVD0TVAtvjqGUIJNWXBsf XxpwSKa1RI9X6a3w7Tzhx/LjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA8n6Py TAWi+kecP+n4qTuZ8CBwMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLsac57yWaIF73/9LYu+KkCJ62jnF9PGkIHTxxIIOdVh9wjS/aBCLu HE6QCkt7aUDuJX65elZ3OOKPnhWEV2PXNECf50wQbNiSldJ0JskLPCbheh8NJbww R2d7oYeD6UWkKBJMdsE5yvOg54CMM222eTwZWZWSXAi8O1sfdCukEfhs9mDH55qX 0GjkvNLV97KvkTkk1AVakWXsYZEWtAxn+t7E69EA8SzmVKpNErgyQUI6Bhdm2Bt+ e3b/VpCwS3tfhVdea3uPLuMSGH99W0QkOovF+HEqVPmY8uKwsllVGBlX+H8cuDTU kcv9Zg6kpi7Psr4uv0HbKiPANtl7KwJD -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org