$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: DZPxDvjrCjNfbgKXBlZ1TIBKsjh8ApjhQLcMmUPtQ2k= Subject key identifier: FF:CB:D0:87:D3:43:D2:A0:45:96:69:E6:50:74:B1:F8:1B:8C:F2:6B Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 053E Signing time: Mon 02 Dec 2024 23:10:32 +0000 Manifest this update: Mon 02 Dec 2024 23:10:32 +0000 Manifest next update: Mon 09 Dec 2024 23:10:32 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: U6QKmTZWe/n1C40QyNJ+7k5xgtVO++j+4TyKStnDaIY=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: qaeGdkz012FrKWtlkq0B4YBPdMLXCpKw3cBwXCpQET8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Dec 2024 23:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Dec 2 23:10:32 2024 GMT Not After : Dec 9 23:10:32 2024 GMT Subject: CN=674e3e68-40a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:d3:1c:3a:64:03:56:49:b6:66:3e:54:f1: f1:4a:2e:d3:21:93:d6:b2:9f:3f:42:30:9c:95:e3: 73:7c:a3:a0:27:ee:ce:b2:64:f9:eb:1c:f0:54:c5: f8:51:0c:5c:55:93:2a:3f:1c:21:21:45:d3:24:ee: 6c:57:52:c4:d7:a8:d1:e6:d7:80:5a:df:af:85:76: 21:0b:7a:b4:bd:57:de:8f:4b:1e:ac:4f:11:62:69: 93:d7:d5:1f:cd:03:31:5f:18:29:b5:c7:93:f5:f2: 77:94:fa:b3:4f:e6:48:3c:77:f1:78:21:f2:e5:dd: 37:79:de:94:53:7f:07:16:13:ee:6c:40:3c:67:fc: 4f:13:0b:ba:87:3c:78:73:0c:04:36:c6:3e:39:c9: 1c:69:19:45:45:90:5a:59:7b:21:5e:51:66:8b:85: 35:05:7b:7e:d4:ea:fd:40:13:2d:25:b0:72:a1:30: df:0a:01:31:60:1a:ce:8d:13:3e:91:7f:03:ab:bf: b2:50:09:f3:db:71:b3:75:da:41:dc:de:f2:fb:cd: 7c:97:c0:d8:64:b1:ac:84:af:85:b7:ef:48:11:86: 4c:63:96:b5:b5:12:1b:43:9d:3c:2f:b9:69:30:1a: 1d:6b:80:3a:c1:2b:1d:f8:ac:d7:73:92:e1:a6:60: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CB:D0:87:D3:43:D2:A0:45:96:69:E6:50:74:B1:F8:1B:8C:F2:6B X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:95:b1:8a:24:a5:94:e6:db:64:46:1e:76:eb:6e:98:ab:48: 26:38:17:02:f8:ab:99:91:14:7b:70:d6:16:8a:1f:3f:c4:88: 2f:d0:78:49:02:81:89:a0:69:b9:17:5f:35:03:1c:1b:0f:1f: 49:64:ab:2a:fe:03:a2:61:c6:c1:da:3e:e8:93:4a:4f:6d:ec: 05:5a:19:f4:c0:ef:50:e6:b2:64:38:55:ab:52:ad:2e:20:9b: 4a:d5:c9:36:bf:2f:2e:0a:fa:f4:65:1f:66:31:de:e7:da:f5: 4b:d7:b4:9c:71:8a:11:28:68:da:58:92:96:6d:cc:8b:27:95: f8:3c:d4:0f:a8:4e:e9:f6:6b:2e:c1:2d:fc:cd:2c:4a:14:44: 14:6a:57:af:a0:a8:e5:14:06:b5:e9:d0:6c:63:5d:2b:76:41: 98:dd:29:b5:75:04:b3:dd:75:92:0b:db:dc:c8:b8:57:41:56: 17:07:20:77:dc:8b:f8:1b:ba:a6:d4:4b:23:75:21:25:b2:16: 60:c3:b4:44:4e:22:45:58:8f:1d:3c:85:fb:f3:9f:06:dd:5b: b4:49:0d:29:56:41:96:58:d1:5c:c5:43:01:2e:69:24:92:ca: f9:32:3c:6a:ec:22:2e:34:69:4b:ed:de:21:a7:fa:25:c5:0c: 4b:b0:37:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjQxMjAyMjMxMDMyWhcNMjQxMjA5MjMxMDMyWjAYMRYwFAYD VQQDEw02NzRlM2U2OC00MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAvTHDpkA1ZJtmY+VPHxSi7TIZPWsp8/QjCcleNzfKOgJ+7OsmT56xzwVMX4 UQxcVZMqPxwhIUXTJO5sV1LE16jR5teAWt+vhXYhC3q0vVfej0serE8RYmmT19Uf zQMxXxgptceT9fJ3lPqzT+ZIPHfxeCHy5d03ed6UU38HFhPubEA8Z/xPEwu6hzx4 cwwENsY+OckcaRlFRZBaWXshXlFmi4U1BXt+1Or9QBMtJbByoTDfCgExYBrOjRM+ kX8Dq7+yUAnz23GzddpB3N7y+818l8DYZLGshK+Ft+9IEYZMY5a1tRIbQ508L7lp MBoda4A6wSsd+KzXc5LhpmDpWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/L0IfT Q9KgRZZp5lB0sfgbjPJrMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBblbGKJKWU5ttkRh52626Yq0gmOBcC+KuZkRR7cNYWih8/xIgv0HhJ AoGJoGm5F181AxwbDx9JZKsq/gOiYcbB2j7ok0pPbewFWhn0wO9Q5rJkOFWrUq0u IJtK1ck2vy8uCvr0ZR9mMd7n2vVL17SccYoRKGjaWJKWbcyLJ5X4PNQPqE7p9msu wS38zSxKFEQUalevoKjlFAa16dBsY10rdkGY3Sm1dQSz3XWSC9vcyLhXQVYXByB3 3Iv4G7qm1EsjdSElshZgw7RETiJFWI8dPIX7858G3Vu0SQ0pVkGWWNFcxUMBLmkk ksr5Mjxq7CIuNGlL7d4hp/olxQxLsDfF -----END CERTIFICATE-----Generated at Tue Dec 3 00:49:54 2024 by rpki-client on console-fra.rpki-client.org