$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: /h21w/17W2DW6Jz8IZYxgAA5hPkqBu0c3Y425LnpSGM= Subject key identifier: 99:3A:6C:64:BD:9D:0E:D5:36:AD:93:AB:EA:D8:08:9C:1F:AE:A1:65 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0BC6 Signing time: Fri 22 Nov 2024 18:36:26 +0000 Manifest this update: Fri 22 Nov 2024 18:36:25 +0000 Manifest next update: Fri 29 Nov 2024 18:36:25 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: MasoADJ+VrhWlClEMQRVbbNvsAg9DCY0cGcBGWbl8Ao=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Nov 22 18:36:25 2024 GMT Not After : Nov 29 18:36:25 2024 GMT Subject: CN=6740cf2a-7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:76:b4:8e:9e:8b:4a:45:99:60:7c:98:69: 56:e0:28:ba:d0:65:e5:6f:c9:37:3a:95:5b:e1:58: a8:f9:99:2f:33:74:e3:c5:b1:f5:46:a2:ef:73:7d: 85:b4:9d:9e:43:ae:8f:79:79:64:16:3e:67:c4:76: 8c:17:f3:0d:ae:0b:c9:d3:62:3a:d5:a9:a4:cf:e0: 50:9d:d5:d1:5d:aa:d0:4e:d4:61:df:75:52:7e:0a: f8:36:07:d0:f2:67:27:63:e7:7a:dc:40:80:13:5e: 0c:c6:55:ef:d6:86:1b:c1:79:45:86:0b:5c:b3:8a: ad:2f:18:63:46:d4:38:82:89:a4:d3:08:62:b8:12: b9:3f:73:84:b1:e8:f3:b3:73:f8:70:da:d1:8b:79: 48:e7:18:5d:a8:4a:6e:96:fc:29:61:da:5f:d7:1b: ef:b3:57:73:1a:ee:72:5d:a2:37:16:e2:c5:eb:5d: 08:81:fc:df:bd:22:27:b3:78:71:49:17:58:45:0f: 70:51:63:0e:db:b5:f5:b5:7d:36:39:3e:b8:19:16: 4e:17:31:a8:0b:fc:7d:9c:0f:d5:54:8d:e2:13:0c: 37:52:6f:82:b5:93:7e:3c:af:dd:5a:94:b2:ba:44: ff:07:0e:3e:f4:21:99:83:1c:7b:5f:e3:f6:20:e1: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3A:6C:64:BD:9D:0E:D5:36:AD:93:AB:EA:D8:08:9C:1F:AE:A1:65 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:cc:0a:59:72:91:95:43:ef:69:c5:62:a2:1e:dd:dc:03:7f: 98:20:32:f5:34:a4:33:dd:56:5e:aa:d8:2c:d5:47:25:14:2f: 80:29:e7:c2:7e:4c:20:69:fa:f7:29:52:c1:86:d5:54:80:62: 57:f3:68:73:c4:73:42:27:da:2b:f2:3a:c9:bc:78:ea:02:16: e5:e6:ba:95:ea:b2:ea:63:26:cc:cb:63:48:2b:0d:25:64:72: ee:d9:1b:48:38:7d:99:b3:11:fb:91:d0:58:de:e4:ef:2f:84: 2c:ca:08:51:ae:cb:5e:dc:29:13:68:8c:b5:79:5f:d1:c7:bc: 82:63:11:e3:88:63:d4:b2:b0:71:b0:cb:9d:d4:c5:17:c8:38: 8e:38:ac:ee:a1:fd:23:e6:22:a4:37:0e:ad:37:3c:72:4c:8b: 9c:cf:06:b7:e3:4b:76:fd:09:58:08:8f:8e:16:79:46:da:d6: 3c:f0:fe:50:2f:15:bb:b6:7b:aa:e1:51:d3:7f:6e:6a:47:12: fc:f6:7e:b4:f1:25:1a:52:79:b5:80:ee:29:54:bb:e2:95:2e: 98:23:90:54:10:69:12:bf:84:c5:31:76:e0:2b:c0:a6:4c:e9: 96:de:35:c2:42:80:69:e3:30:ca:3a:70:3c:57:df:ae:8f:b1: 5c:81:97:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjQxMTIyMTgzNjI1WhcNMjQxMTI5MTgzNjI1WjAYMRYwFAYD VQQDEw02NzQwY2YyYS03OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAl2tI6ei0pFmWB8mGlW4Ci60GXlb8k3OpVb4Vio+ZkvM3TjxbH1RqLvc32F tJ2eQ66PeXlkFj5nxHaMF/MNrgvJ02I61amkz+BQndXRXarQTtRh33VSfgr4NgfQ 8mcnY+d63ECAE14MxlXv1oYbwXlFhgtcs4qtLxhjRtQ4gomk0whiuBK5P3OEsejz s3P4cNrRi3lI5xhdqEpulvwpYdpf1xvvs1dzGu5yXaI3FuLF610IgfzfvSIns3hx SRdYRQ9wUWMO27X1tX02OT64GRZOFzGoC/x9nA/VVI3iEww3Um+CtZN+PK/dWpSy ukT/Bw4+9CGZgxx7X+P2IOFXswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJk6bGS9 nQ7VNq2Tq+rYCJwfrqFlMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlzApZcpGVQ+9pxWKiHt3cA3+YIDL1NKQz3VZeqtgs1UclFC+AKefC fkwgafr3KVLBhtVUgGJX82hzxHNCJ9or8jrJvHjqAhbl5rqV6rLqYybMy2NIKw0l ZHLu2RtIOH2ZsxH7kdBY3uTvL4QsyghRrste3CkTaIy1eV/Rx7yCYxHjiGPUsrBx sMud1MUXyDiOOKzuof0j5iKkNw6tNzxyTIuczwa340t2/QlYCI+OFnlG2tY88P5Q LxW7tnuq4VHTf25qRxL89n608SUaUnm1gO4pVLvilS6YI5BUEGkSv4TFMXbgK8Cm TOmW3jXCQoBp4zDKOnA8V9+uj7FcgZdD -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org