$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: n6mU+RghR+qfkdisoBX8uZb/IfFsEMu3VjdjYHrHTnw= Subject key identifier: 27:85:39:42:D4:9E:4C:06:A3:37:DE:71:30:AE:A1:83:4E:E3:04:E5 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 073D Signing time: Fri 22 Nov 2024 21:09:49 +0000 Manifest this update: Fri 22 Nov 2024 21:09:48 +0000 Manifest next update: Fri 29 Nov 2024 21:09:48 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: x8YCn2FVkLq+9YDLEV+1BWNXfvNH7s4SHu6aIMCepTE=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Nov 22 21:09:48 2024 GMT Not After : Nov 29 21:09:48 2024 GMT Subject: CN=6740f31c-938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:08:66:2a:eb:0b:0b:9f:48:ac:96:01:c5:11: eb:cb:18:64:3a:42:46:cd:67:b7:d9:84:0a:2b:83: a0:32:7e:a5:ed:77:b4:3e:f9:81:00:4f:d8:e7:c0: 8a:dd:2e:ab:b2:85:1a:d5:ee:80:9b:11:c4:c0:d3: 1e:35:1c:fb:6a:38:64:c5:7f:ad:95:a6:32:5c:f7: 91:cc:c0:96:3a:f6:dd:7f:4c:84:b4:3a:4c:6c:52: e1:2c:ce:d8:16:50:d2:8b:81:1a:3c:95:3f:e0:89: bf:87:0a:59:d6:25:93:3b:19:e1:84:3e:82:c1:b4: 9d:b3:bf:db:d4:e2:15:90:d4:a2:35:f4:a2:a8:7e: 27:be:7c:70:78:c4:2e:a3:d2:5a:29:b7:19:8d:51: 17:6f:8b:fb:0b:be:50:90:19:bc:a9:6c:4f:4f:52: 59:f3:0a:75:9e:b9:9e:b7:63:ff:1d:7a:a0:67:3d: a4:59:48:6b:2c:f6:91:7a:39:fd:39:7c:8d:8f:6b: 29:7d:be:ed:45:69:dc:c7:3e:2a:05:32:9c:0a:7e: a3:be:19:36:1b:73:99:8b:c8:85:93:92:fa:30:4e: 91:c6:ca:e6:71:72:9d:ef:cd:35:e8:ec:e4:b1:76: b8:24:0f:c2:c4:d2:39:c2:11:e9:f7:e8:dd:c2:5b: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:39:42:D4:9E:4C:06:A3:37:DE:71:30:AE:A1:83:4E:E3:04:E5 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:dd:5c:ea:b8:ee:53:e9:2d:0a:3e:e2:4b:7e:ac:3c:68:b6: 42:a9:e3:23:76:88:68:60:32:14:d5:96:b7:b2:90:33:f1:28: e9:b0:e9:b8:60:ec:fa:87:af:78:1c:e0:20:3f:43:66:c6:e4: 16:35:ec:23:5c:08:30:54:84:90:0c:cf:90:0b:0b:09:57:94: 5b:19:45:2f:d2:98:87:6f:d3:35:9d:90:68:2a:f7:9e:b4:98: 37:44:1d:73:32:90:71:49:3b:6f:93:3a:71:fc:fe:62:bb:9d: 72:6e:c6:f2:7b:92:4f:7d:d7:d7:c8:15:5c:59:bf:24:11:cd: 3a:56:75:e0:63:e7:a2:dc:b8:76:d0:4a:78:ef:1b:60:8c:cf: 15:05:eb:44:d0:b3:66:27:0c:db:df:46:aa:7f:3f:fe:12:1e: 1a:97:89:4c:ca:cc:1f:2b:f8:44:25:df:8b:55:46:97:af:e4: 85:87:6c:72:14:63:f9:bf:5e:29:6e:6e:c0:24:21:2a:c6:ea: 2d:b9:7b:9f:91:77:60:17:23:bf:e8:55:6d:87:89:57:7b:f6: 30:18:13:8b:bf:33:4c:41:17:50:57:48:a3:fb:91:33:e8:56: f7:08:72:ad:7a:86:d1:86:b3:da:d4:46:a3:4d:a0:a4:85:4d: 09:4e:2b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjQxMTIyMjEwOTQ4WhcNMjQxMTI5MjEwOTQ4WjAYMRYwFAYD VQQDEw02NzQwZjMxYy05MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QhmKusLC59IrJYBxRHryxhkOkJGzWe32YQKK4OgMn6l7Xe0PvmBAE/Y58CK 3S6rsoUa1e6AmxHEwNMeNRz7ajhkxX+tlaYyXPeRzMCWOvbdf0yEtDpMbFLhLM7Y FlDSi4EaPJU/4Im/hwpZ1iWTOxnhhD6CwbSds7/b1OIVkNSiNfSiqH4nvnxweMQu o9JaKbcZjVEXb4v7C75QkBm8qWxPT1JZ8wp1nrmet2P/HXqgZz2kWUhrLPaRejn9 OXyNj2spfb7tRWncxz4qBTKcCn6jvhk2G3OZi8iFk5L6ME6RxsrmcXKd78016Ozk sXa4JA/CxNI5whHp9+jdwluR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeFOULU nkwGozfecTCuoYNO4wTlMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA3VzquO5T6S0KPuJLfqw8aLZCqeMjdohoYDIU1Za3spAz8SjpsOm4 YOz6h694HOAgP0NmxuQWNewjXAgwVISQDM+QCwsJV5RbGUUv0piHb9M1nZBoKvee tJg3RB1zMpBxSTtvkzpx/P5iu51ybsbye5JPfdfXyBVcWb8kEc06VnXgY+ei3Lh2 0Ep47xtgjM8VBetE0LNmJwzb30aqfz/+Eh4al4lMyswfK/hEJd+LVUaXr+SFh2xy FGP5v14pbm7AJCEqxuotuXufkXdgFyO/6FVth4lXe/YwGBOLvzNMQRdQV0ij+5Ez 6Fb3CHKteobRhrPa1EajTaCkhU0JTise -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org