$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: Kp28tswZrfdSSLM/2WncOvm2xGe+6R237XQd5436FQU= Subject key identifier: 33:43:F7:02:BD:2F:15:CB:55:AE:0B:C6:46:DE:10:52:BE:37:28:3F Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 342C Signing time: Fri 22 Nov 2024 15:09:36 +0000 Manifest this update: Fri 22 Nov 2024 15:09:35 +0000 Manifest next update: Fri 29 Nov 2024 15:09:35 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: kN+Pcr2MWz5lNRxpw0pnzC8yP3QtmhwJxQapeuEDKsM=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: EjYfF7OUsi1m/NUaj/yuG72bh8shIim1EGJED8rB8hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Nov 22 15:09:35 2024 GMT Not After : Nov 29 15:09:35 2024 GMT Subject: CN=67409eb0-01a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:03:87:7a:49:7b:85:ca:e1:9d:83:ec:f7: 9d:a0:4e:3b:f6:ff:ee:8d:4f:7c:5f:23:2f:49:d3: 57:ac:92:a8:63:c6:f0:d3:3c:51:e2:77:96:54:9a: ab:db:a9:21:24:dd:8a:d3:ed:2a:37:15:b2:ce:3c: 53:fd:b3:e4:1f:93:6f:b1:ea:1e:7e:13:f0:17:36: f9:d3:a9:5f:19:cf:fb:72:ff:36:1f:33:a7:41:e5: e0:83:28:79:05:75:ff:b8:f2:2c:a9:6a:16:26:62: e4:da:9a:04:cf:bf:85:6f:b2:a3:81:e4:88:01:1d: c1:26:d3:b3:f2:65:94:0c:f8:a2:b2:02:83:2a:56: ab:a5:1d:20:81:7f:c3:bd:db:97:ff:ed:14:2f:0f: d6:d0:28:b0:f6:85:16:5d:a1:09:e2:d9:84:24:bd: 56:39:65:94:79:d7:0e:c7:8a:58:01:46:d7:f8:06: 86:9c:ed:60:33:7c:f2:17:52:8a:66:86:75:81:80: e6:eb:81:7e:66:ec:bd:54:77:5f:d4:07:02:16:04: ea:ea:43:c2:fd:a2:97:c8:cf:27:35:5f:32:3a:45: 41:b0:67:08:61:74:a5:16:15:8e:22:92:b5:1d:11: 6f:0b:d0:ca:8d:0f:10:19:7d:f2:08:b6:a8:7a:bb: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:43:F7:02:BD:2F:15:CB:55:AE:0B:C6:46:DE:10:52:BE:37:28:3F X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:5b:95:65:42:13:86:88:7c:56:cf:b1:a9:01:7c:df:c6: e1:f7:b9:50:8f:35:ac:d9:6d:fa:c0:ad:1c:8b:47:6c:e2:89: cd:08:0f:44:68:10:4d:36:8a:0f:97:97:73:8c:3e:51:34:14: c1:ec:52:76:ec:cf:0d:a5:cd:5f:bb:5f:b4:02:6a:0f:a1:fb: 51:62:db:ac:6c:09:06:fa:91:d3:03:e2:40:90:44:e1:4a:f9: 3f:e4:78:89:19:d9:d6:26:6f:31:67:b8:49:9a:78:46:dd:f4: bc:07:16:a1:f4:19:61:c8:56:60:79:62:dd:77:63:b2:96:b2: ba:74:5a:a8:70:1f:97:3d:29:46:66:97:a4:69:42:63:15:4d: 68:56:f6:7f:6b:ae:ad:62:30:86:22:a5:36:a0:46:b8:ce:3d: 3e:15:a1:55:ce:14:e6:df:e4:76:72:4e:3a:cb:68:39:a1:a7: cd:b2:eb:d9:bb:f8:c4:80:6d:bb:2d:16:c6:55:cb:c0:34:58: dd:08:b0:8a:5a:9f:43:f0:a0:64:6b:66:aa:ef:44:7f:15:5e: 62:77:2b:2e:cf:8a:71:23:46:6a:38:d3:6b:f9:5d:7d:f9:ea: d8:94:7b:9c:b9:c9:3e:7e:90:69:ed:53:67:41:46:cc:3d:c5: 1e:0d:0b:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjQxMTIyMTUwOTM1WhcNMjQxMTI5MTUwOTM1WjAYMRYwFAYD VQQDEw02NzQwOWViMC0wMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69sDh3pJe4XK4Z2D7PedoE479v/ujU98XyMvSdNXrJKoY8bw0zxR4neWVJqr 26khJN2K0+0qNxWyzjxT/bPkH5NvseoefhPwFzb506lfGc/7cv82HzOnQeXggyh5 BXX/uPIsqWoWJmLk2poEz7+Fb7KjgeSIAR3BJtOz8mWUDPiisgKDKlarpR0ggX/D vduX/+0ULw/W0Ciw9oUWXaEJ4tmEJL1WOWWUedcOx4pYAUbX+AaGnO1gM3zyF1KK ZoZ1gYDm64F+Zuy9VHdf1AcCFgTq6kPC/aKXyM8nNV8yOkVBsGcIYXSlFhWOIpK1 HRFvC9DKjQ8QGX3yCLaoervngwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDND9wK9 LxXLVa4LxkbeEFK+Nyg/MB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMPFuVZUIThoh8Vs+xqQF838bh97lQjzWs2W36wK0ci0ds4onNCA9E aBBNNooPl5dzjD5RNBTB7FJ27M8Npc1fu1+0AmoPoftRYtusbAkG+pHTA+JAkETh Svk/5HiJGdnWJm8xZ7hJmnhG3fS8Bxah9BlhyFZgeWLdd2OylrK6dFqocB+XPSlG ZpekaUJjFU1oVvZ/a66tYjCGIqU2oEa4zj0+FaFVzhTm3+R2ck46y2g5oafNsuvZ u/jEgG27LRbGVcvANFjdCLCKWp9D8KBka2aq70R/FV5idysuz4pxI0ZqONNr+V19 +erYlHucuck+fpBp7VNnQUbMPcUeDQtm -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org