$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: 4hMUKuSCshJlutqS/G5ZIx7Rfy6/8XiBaYpMpnmrxiY= Subject key identifier: CF:01:82:E7:CE:94:79:54:05:76:39:CA:5B:77:CF:23:4B:7F:57:DB Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1B9B Signing time: Fri 22 Nov 2024 16:14:27 +0000 Manifest this update: Fri 22 Nov 2024 16:14:27 +0000 Manifest next update: Fri 29 Nov 2024 16:14:27 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: CNBwXWsDF/xq0fjeeaeI4l7aBMV6sEoLQ9pjH56VvII=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7091 (0x1bb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: Nov 22 16:14:27 2024 GMT Not After : Nov 29 16:14:27 2024 GMT Subject: CN=6740ade3-6c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:6b:57:f1:d4:1b:0f:5c:04:49:61:3c:21: 71:56:8e:6d:32:69:fb:a9:d9:2c:9a:de:e5:1c:82: 2b:eb:a0:0d:16:fb:5a:ac:64:b2:b3:47:91:22:0f: 31:0c:4c:5d:21:d0:c3:14:ee:8f:c5:a0:5c:6b:56: 1f:44:1f:00:07:e3:20:e7:da:4b:84:6a:73:ec:28: 5f:3e:2a:87:39:b6:94:24:86:16:29:70:17:eb:5e: 46:e8:fe:de:48:19:ba:77:7a:9a:cb:34:18:d8:8e: 4f:4a:80:dc:26:d4:24:c5:af:2f:a5:52:ad:d9:ee: 68:e9:e0:f9:6d:dd:2e:78:16:6e:72:56:42:71:3f: 9b:11:1f:cb:26:26:7e:d3:d9:b6:ef:5c:cb:6a:e9: 03:39:f0:b0:f3:f2:02:27:f5:49:bc:bf:cc:d4:ae: a4:4e:98:81:87:d5:1f:fa:ea:bc:ae:e2:65:5f:d3: 1c:a7:2c:0f:6b:2c:e6:42:9f:95:e6:d9:0e:67:0d: f2:27:18:9b:26:73:31:69:72:96:66:d3:e5:de:fb: d4:c4:68:7c:95:3f:d5:0f:a3:5d:cc:d5:c3:f8:ed: 2e:89:17:42:ce:f6:1b:3e:8f:e7:62:06:94:5e:52: 09:21:bd:4c:cd:1b:9e:2f:e8:b5:20:e1:1e:90:99: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:01:82:E7:CE:94:79:54:05:76:39:CA:5B:77:CF:23:4B:7F:57:DB X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1e:90:c9:f9:58:fb:4a:dd:c8:a6:2b:62:a8:75:1d:fd:42: 97:35:b2:db:90:13:26:98:d1:4f:42:d9:bf:e8:cf:c4:ee:2b: fd:9c:43:c9:ba:3e:d8:9c:15:80:cf:b3:59:5d:f4:a0:87:b7: 2f:48:87:d0:50:6c:a0:e8:fd:37:bb:67:f3:ba:86:2d:89:90: bc:c6:a0:86:f2:61:95:a0:11:2e:e3:da:ba:44:3d:26:24:5b: 04:82:63:f2:e9:25:a9:95:0d:f5:c0:66:ae:77:73:50:f4:bb: ff:99:cf:8b:42:64:09:c1:3f:7a:c9:16:7f:c3:b4:d5:9e:20: 0f:da:9b:6e:4b:be:df:b3:5e:d3:5e:13:a8:d4:e2:0a:f6:58: 49:40:d3:94:f8:cd:68:f8:b0:9f:9f:b8:2d:f4:5f:8a:18:f1: a5:02:10:02:a2:7a:8c:8e:47:fc:67:65:75:cb:3c:56:7e:3c: b1:f4:d2:0d:3a:aa:0e:ab:ad:e4:d0:f8:3a:08:d9:76:c8:57: c1:d9:be:65:c5:ab:49:9c:8b:cd:32:cb:75:63:2e:4a:5d:a8: af:f5:b0:76:46:69:88:15:7e:1f:3a:2f:ca:2a:fb:72:d7:df: 5f:bf:34:2e:ee:5a:b2:05:a2:5c:47:0b:5f:5a:1e:a6:94:af: e6:bf:23:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjQxMTIyMTYxNDI3WhcNMjQxMTI5MTYxNDI3WjAYMRYwFAYD VQQDEw02NzQwYWRlMy02YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/JrV/HUGw9cBElhPCFxVo5tMmn7qdksmt7lHIIr66ANFvtarGSys0eRIg8x DExdIdDDFO6PxaBca1YfRB8AB+Mg59pLhGpz7ChfPiqHObaUJIYWKXAX615G6P7e SBm6d3qayzQY2I5PSoDcJtQkxa8vpVKt2e5o6eD5bd0ueBZuclZCcT+bER/LJiZ+ 09m271zLaukDOfCw8/ICJ/VJvL/M1K6kTpiBh9Uf+uq8ruJlX9McpywPayzmQp+V 5tkOZw3yJxibJnMxaXKWZtPl3vvUxGh8lT/VD6NdzNXD+O0uiRdCzvYbPo/nYgaU XlIJIb1MzRueL+i1IOEekJmsxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8BgufO lHlUBXY5ylt3zyNLf1fbMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCHpDJ+Vj7St3IpitiqHUd/UKXNbLbkBMmmNFPQtm/6M/E7iv9nEPJ uj7YnBWAz7NZXfSgh7cvSIfQUGyg6P03u2fzuoYtiZC8xqCG8mGVoBEu49q6RD0m JFsEgmPy6SWplQ31wGaud3NQ9Lv/mc+LQmQJwT96yRZ/w7TVniAP2ptuS77fs17T XhOo1OIK9lhJQNOU+M1o+LCfn7gt9F+KGPGlAhAConqMjkf8Z2V1yzxWfjyx9NIN OqoOq63k0Pg6CNl2yFfB2b5lxatJnIvNMst1Yy5KXaiv9bB2RmmIFX4fOi/KKvty 199fvzQu7lqyBaJcRwtfWh6mlK/mvyMp -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org