$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: ou3igZwAYsz2moVDuZdaAV8XhrFxqMk8D46b3hOS/7g= Subject key identifier: 1E:48:6C:FE:02:E3:2E:91:6A:48:15:91:39:3D:25:BA:E7:71:B9:1F Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: DB Signing time: Sat 23 Nov 2024 03:45:40 +0000 Manifest this update: Sat 23 Nov 2024 03:45:39 +0000 Manifest next update: Sat 30 Nov 2024 03:45:39 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: +j/qVrNwWLLJfeiOPrkTLGG4jqrniIen8E43/hncqic=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: 8PpMQcwgyZDensMES5SphGUs7cJ+1Igr/jYNKPqOVGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: Nov 23 03:45:39 2024 GMT Not After : Nov 30 03:45:39 2024 GMT Subject: CN=67414fe3-f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:2c:8a:55:f6:a8:4f:64:94:6b:90:7c:eb: c2:7c:a4:26:ed:3d:52:11:54:16:27:f8:bd:fd:59: 97:f1:95:2e:db:fa:89:0f:e9:2c:aa:57:b8:5a:6b: 83:ac:42:5e:26:d8:08:1c:ce:9a:4e:ab:88:c3:39: 96:4f:32:57:a7:ef:52:ae:8d:0f:74:24:8c:bb:8f: 88:36:f5:af:9d:bd:c6:e6:15:01:bd:8d:d4:39:79: 8f:1c:0a:0c:a1:6e:20:35:3d:2c:fa:e0:08:5d:96: 16:5d:6a:c3:2e:cc:da:4e:50:3f:23:cd:fc:b6:3a: 91:f6:8f:28:07:39:d5:88:52:c8:e0:dc:21:a9:d1: 3b:91:8c:70:d0:85:26:cf:d2:b8:e2:6e:51:2b:33: c9:e2:9b:0a:b9:c2:b7:00:3e:3b:fc:97:fe:df:37: 34:98:00:c3:87:c4:a0:c6:cf:ed:00:51:95:ac:d6: 68:6a:84:7e:9b:e4:93:c9:0e:7d:de:a8:9a:3d:d5: ac:87:09:ac:1d:18:0e:1f:9d:14:cd:ad:b8:f7:2e: 64:0f:ae:c8:b0:64:bd:08:a8:d3:0d:67:90:c6:46: 08:9e:f0:7c:45:4a:60:7e:f7:ce:3b:84:ef:ef:cb: 2a:86:09:bf:5d:a5:d5:15:2a:cd:5b:13:2a:90:29: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:6C:FE:02:E3:2E:91:6A:48:15:91:39:3D:25:BA:E7:71:B9:1F X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ae:70:b7:12:7c:32:4d:fc:8f:51:c8:34:0e:19:98:3b:9f: 66:a3:65:a5:9b:64:5b:0d:a4:72:85:fc:ff:7b:d8:eb:2f:9c: ca:c4:49:20:39:9e:01:68:ce:bd:d8:2c:1a:7e:26:4d:a1:e1: 05:a1:6b:bf:62:9c:95:cd:84:b7:f8:68:12:4a:92:80:07:9b: 77:3c:87:7e:fe:f8:62:dd:b5:5d:29:5f:c5:af:40:e3:e1:80: 1d:fc:89:78:3f:4c:a9:8c:94:3f:26:17:ea:b5:3a:c9:56:7e: 13:a3:b6:e8:7d:90:ef:bc:25:45:b0:a1:1d:a4:43:2e:7d:13: 7e:25:52:4e:4b:f1:0e:51:6b:4b:31:52:f6:6e:48:b0:6a:3c: 48:0e:1b:2e:bf:f4:d5:2a:03:13:9f:76:b8:07:86:37:68:e4: 35:55:2e:0b:cd:23:d6:1d:9b:95:30:fd:ea:6e:0c:bb:d3:8b: fc:60:c6:2c:a0:83:b5:6b:47:6b:2d:47:5e:69:d1:78:8e:9b: 05:19:8f:5e:dd:f9:6f:52:34:9d:c2:25:29:be:85:e1:89:2e: 40:08:41:fc:db:92:53:aa:60:5e:4e:69:78:63:af:9c:84:8e: 72:f9:73:38:4f:2d:b7:f4:46:58:e0:e3:6b:17:dd:90:83:86: ab:2a:10:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjQxMTIzMDM0NTM5WhcNMjQxMTMwMDM0NTM5WjAYMRYwFAYD VQQDEw02NzQxNGZlMy1mN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sosilX2qE9klGuQfOvCfKQm7T1SEVQWJ/i9/VmX8ZUu2/qJD+ksqle4WmuD rEJeJtgIHM6aTquIwzmWTzJXp+9Sro0PdCSMu4+INvWvnb3G5hUBvY3UOXmPHAoM oW4gNT0s+uAIXZYWXWrDLszaTlA/I838tjqR9o8oBznViFLI4NwhqdE7kYxw0IUm z9K44m5RKzPJ4psKucK3AD47/Jf+3zc0mADDh8Sgxs/tAFGVrNZoaoR+m+STyQ59 3qiaPdWshwmsHRgOH50Uza249y5kD67IsGS9CKjTDWeQxkYInvB8RUpgfvfOO4Tv 78sqhgm/XaXVFSrNWxMqkCnR0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5IbP4C 4y6RakgVkTk9JbrncbkfMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCrnC3EnwyTfyPUcg0DhmYO59mo2Wlm2RbDaRyhfz/e9jrL5zKxEkg OZ4BaM692CwafiZNoeEFoWu/YpyVzYS3+GgSSpKAB5t3PId+/vhi3bVdKV/Fr0Dj 4YAd/Il4P0ypjJQ/JhfqtTrJVn4To7bofZDvvCVFsKEdpEMufRN+JVJOS/EOUWtL MVL2bkiwajxIDhsuv/TVKgMTn3a4B4Y3aOQ1VS4LzSPWHZuVMP3qbgy704v8YMYs oIO1a0drLUdeadF4jpsFGY9e3flvUjSdwiUpvoXhiS5ACEH825JTqmBeTml4Y6+c hI5y+XM4Ty239EZY4ONrF92Qg4arKhDw -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org