$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: LIfcWJeFxSskfTPhZY09hlC0sMBqmQelXlgvKa+p/Sg= Subject key identifier: 7F:8C:18:07:9D:01:7A:F5:42:DF:AE:30:73:A9:2D:AF:91:8C:7B:5D Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: 42 Signing time: Sun 15 Sep 2024 09:47:40 +0000 Manifest this update: Sun 15 Sep 2024 09:47:39 +0000 Manifest next update: Sun 22 Sep 2024 09:47:39 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: EE0+FLq6k6z9wRMdzKSZiP6ZDEup1DVk1Hj20aJDWJ0=) 2: 8F7EB7560FA211EF9973D20FC4F9AE02.roa (hash: KgI85aHCH0n9a6s6ffJmw2EsEhFYRsWWLA+fH7x9vC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Sep 15 09:47:39 2024 GMT Not After : Sep 22 09:47:39 2024 GMT Subject: CN=66e6ad3b-9516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:ef:b5:72:50:c7:aa:0f:a6:43:f5:40:83: b7:ae:5a:2a:57:3c:f0:bf:46:c4:03:5a:c2:66:64: 50:36:8e:65:47:de:91:58:f1:0a:66:f0:8a:77:cf: 47:40:43:fa:94:cd:61:8b:47:56:45:2b:38:86:27: ef:cf:5f:fa:98:e5:27:ce:8b:4a:e8:b8:78:4a:e3: 39:5f:95:52:07:f1:1d:16:5c:f2:89:bb:a7:40:cd: 75:82:2a:a4:bd:d7:36:cd:5c:21:41:01:71:a0:9b: c2:ac:17:aa:9b:4f:a2:2c:f5:d4:12:17:17:4e:42: 86:73:28:25:34:58:ec:77:18:20:7a:1c:a5:19:64: 26:e9:c0:1a:39:69:96:38:08:15:ff:a3:72:be:eb: 1d:34:ac:88:28:26:7e:c2:bf:14:76:83:7d:ef:f3: 1c:74:10:f2:65:ef:72:a8:bb:6f:65:b4:78:68:52: 04:2b:c2:cb:9f:25:0e:64:6a:07:55:09:2e:df:69: 0e:b7:28:ec:41:6c:98:73:1e:d3:4b:a9:a1:48:b2: 17:9f:a1:a8:98:c7:03:c7:94:a9:54:ed:56:75:7e: f1:f6:da:9e:46:00:81:78:7a:15:24:7a:2e:96:b6: 99:ee:b1:a7:f5:d7:27:97:5b:3e:31:ae:aa:35:40: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:18:07:9D:01:7A:F5:42:DF:AE:30:73:A9:2D:AF:91:8C:7B:5D X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:7d:6f:3a:61:76:7c:93:f5:88:70:0a:18:62:2f:c2:0d:c7: 1d:38:05:48:7b:fa:d7:e4:93:24:2e:41:5a:10:a4:ae:7b:ff: a6:2b:45:40:67:5e:6a:c3:04:6d:73:ef:01:1f:ef:f4:52:08: f9:b5:27:ed:68:fb:94:0a:35:1c:ab:96:82:a9:09:c3:5b:25: 6f:b9:1a:75:2a:a1:e7:01:cf:6a:f0:62:83:79:c9:cf:a0:ad: ce:f4:6f:93:1f:21:80:7e:19:63:b3:7f:30:df:29:77:40:76: 26:2e:1e:cd:32:3d:c9:f8:87:12:bb:49:7a:ed:42:23:20:63: a7:f0:b0:a2:ce:88:ce:df:80:60:46:b9:1c:22:16:b7:44:59: a5:15:50:29:15:22:2c:6a:e3:32:7b:27:5c:0e:57:b5:a2:4c: 7f:43:cb:7f:74:96:24:80:99:2d:f5:d1:af:52:37:b6:6d:76: f1:5a:e9:b6:92:0d:1c:d1:e4:ba:4b:82:a2:ce:7d:de:49:01: e5:53:f2:05:b6:ea:22:68:20:cf:8e:8b:db:ec:1c:04:6d:27: 70:27:ad:24:f9:51:b0:bc:a8:8d:72:ef:be:c9:a7:13:0b:b8: 4d:96:b2:36:2b:c3:e3:03:a0:24:33:7e:ff:d0:96:cc:dd:ed: 7e:62:c3:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTBBQjExMC8GA1UEBRMoMjY1NzAzRDg1OTMzRjQ1RDlCMDREQUI3NzIzNzU4NEZD OTJEOUQ0NDAeFw0yNDA5MTUwOTQ3MzlaFw0yNDA5MjIwOTQ3MzlaMBgxFjAUBgNV BAMTDTY2ZTZhZDNiLTk1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Cu+1clDHqg+mQ/VAg7euWipXPPC/RsQDWsJmZFA2jmVH3pFY8Qpm8Ip3z0dA Q/qUzWGLR1ZFKziGJ+/PX/qY5SfOi0rouHhK4zlflVIH8R0WXPKJu6dAzXWCKqS9 1zbNXCFBAXGgm8KsF6qbT6Is9dQSFxdOQoZzKCU0WOx3GCB6HKUZZCbpwBo5aZY4 CBX/o3K+6x00rIgoJn7CvxR2g33v8xx0EPJl73Kou29ltHhoUgQrwsufJQ5kagdV CS7faQ63KOxBbJhzHtNLqaFIshefoaiYxwPHlKlU7VZ1fvH22p5GAIF4ehUkei6W tpnusaf11yeXWz4xrqo1QGJBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf4wYB50B evVC364wc6ktr5GMe10wHwYDVR0jBBgwFoAUJlcD2Fkz9F2bBNq3cjdYT8ktnUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMEFCLzc0NDUyNkY2MEZB MTExRUZBNjc4ODg4NkM0RjlBRTAyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmxjRDJGa3o5RjJiQk5xM2NqZFlUOGt0blVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MEFCLzc0NDUyNkY2MEZBMTExRUZBNjc4ODg4NkM0RjlBRTAyL0psY0QyRmt6OUYy YkJOcTNjamRZVDhrdG5VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFR9bzphdnyT9YhwChhiL8INxx04BUh7+tfkkyQuQVoQpK57/6YrRUBn XmrDBG1z7wEf7/RSCPm1J+1o+5QKNRyrloKpCcNbJW+5GnUqoecBz2rwYoN5yc+g rc70b5MfIYB+GWOzfzDfKXdAdiYuHs0yPcn4hxK7SXrtQiMgY6fwsKLOiM7fgGBG uRwiFrdEWaUVUCkVIixq4zJ7J1wOV7WiTH9Dy390liSAmS310a9SN7ZtdvFa6baS DRzR5LpLgqLOfd5JAeVT8gW26iJoIM+Oi9vsHARtJ3AnrST5UbC8qI1y777JpxML uE2WsjYrw+MDoCQzfv/Qlszd7X5iw4o= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:14 2024 by rpki-client on console-ams.rpki-client.org