$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: TzunIkWwF1vuIlXtwyTpcKuBb3kh3anfh1XcK0dP0M8= Subject key identifier: 5E:58:91:2B:7F:82:F2:D4:E4:25:39:07:E2:BE:1D:93:0F:02:0D:C1 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 0538 Signing time: Wed 20 Nov 2024 23:03:23 +0000 Manifest this update: Wed 20 Nov 2024 23:03:22 +0000 Manifest next update: Wed 27 Nov 2024 23:03:22 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: iPA7eVUTX/Q4YWIh+pddntolRTO641EidSlgUe2WuGQ=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: qaeGdkz012FrKWtlkq0B4YBPdMLXCpKw3cBwXCpQET8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Nov 20 23:03:22 2024 GMT Not After : Nov 27 23:03:22 2024 GMT Subject: CN=673e6abb-d1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:a1:1c:b2:db:17:38:90:5c:3c:08:ef:27: 68:d2:91:0c:5f:84:58:fc:20:79:d3:55:79:31:14: 94:13:32:03:91:d1:f9:fb:62:87:fb:23:c6:1c:04: 58:4a:38:81:cc:60:4d:e7:cc:f2:7d:c4:c1:bf:bc: e0:2b:a7:e7:48:2a:c2:69:6a:fc:41:a8:3d:7d:23: 41:48:eb:31:5e:1f:89:47:45:2b:52:cb:c8:70:16: 4c:f7:ab:cd:34:69:dc:f8:7d:20:7f:19:ac:e7:c7: 76:22:ce:df:19:ca:85:e2:9f:b1:8c:f1:0a:7c:44: 3d:78:92:90:66:17:1c:21:15:30:52:81:9e:ca:73: c7:86:b2:17:e4:9d:a1:cf:d5:a7:14:0a:37:5f:87: e5:8c:ab:4c:1d:50:f5:a2:c8:70:89:35:25:c1:16: 9b:46:87:3f:b2:bd:39:a4:f8:1a:8b:be:3c:89:6f: b5:4f:8a:0b:5e:33:be:5c:7a:03:51:6e:51:5e:c3: 64:03:75:49:60:fc:b8:83:ff:9d:0d:f3:42:1c:f1: a6:aa:14:3d:43:f1:f0:6a:49:6e:f1:5c:5e:8f:76: e9:2a:90:66:c6:ea:64:60:be:41:26:46:36:bb:af: f3:f7:00:e4:48:f3:f4:a7:1a:bd:a9:5d:fd:6c:1e: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:58:91:2B:7F:82:F2:D4:E4:25:39:07:E2:BE:1D:93:0F:02:0D:C1 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9f:c2:b3:ef:f1:72:f7:fb:73:c1:a0:cb:06:ae:ae:fa:45: d1:44:b3:fd:c4:40:eb:ef:dd:0c:c1:ad:24:d2:98:95:5c:19: 1e:f2:82:b9:4d:3c:c2:87:97:e9:4a:39:90:4a:1c:12:2e:b5: a1:c3:1b:f4:01:19:e5:24:9d:f1:fd:8c:ab:ef:dc:8b:67:53: 93:ad:80:d4:15:25:6f:e4:ab:e3:45:c5:16:d7:0a:39:1b:a9: 16:e5:7f:26:d1:c7:2b:79:fd:fd:de:18:66:12:58:a9:1c:a5: 89:90:65:e2:10:d0:3b:f5:99:8d:69:ed:7f:02:47:fe:1d:17: 59:8a:9e:ce:40:5c:38:96:fa:25:a2:c0:9a:63:a7:89:99:84: 7b:b5:85:f3:62:28:36:3b:b4:6d:60:38:ee:ca:71:f5:32:12: 7a:7d:2a:cd:58:ba:4d:80:dd:8c:ee:cb:a6:d8:14:c2:99:0c: 6a:4c:95:29:97:d1:24:66:4b:d6:c2:04:08:a0:3a:52:d9:a4: c4:e6:f3:1f:0f:1c:55:f8:3d:a6:79:fb:6a:ee:0d:c6:b9:42: 81:bb:ee:38:b6:32:b4:6c:33:3d:33:22:67:d9:04:13:b2:24: 99:d3:76:01:65:3c:8f:c7:b8:0a:45:c2:ae:47:2f:d9:c0:16: c5:e5:78:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjQxMTIwMjMwMzIyWhcNMjQxMTI3MjMwMzIyWjAYMRYwFAYD VQQDEw02NzNlNmFiYi1kMWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR2hHLLbFziQXDwI7ydo0pEMX4RY/CB501V5MRSUEzIDkdH5+2KH+yPGHARY SjiBzGBN58zyfcTBv7zgK6fnSCrCaWr8Qag9fSNBSOsxXh+JR0UrUsvIcBZM96vN NGnc+H0gfxms58d2Is7fGcqF4p+xjPEKfEQ9eJKQZhccIRUwUoGeynPHhrIX5J2h z9WnFAo3X4fljKtMHVD1oshwiTUlwRabRoc/sr05pPgai748iW+1T4oLXjO+XHoD UW5RXsNkA3VJYPy4g/+dDfNCHPGmqhQ9Q/Hwaklu8Vxej3bpKpBmxupkYL5BJkY2 u6/z9wDkSPP0pxq9qV39bB6uAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5YkSt/ gvLU5CU5B+K+HZMPAg3BMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGn8Kz7/Fy9/tzwaDLBq6u+kXRRLP9xEDr790Mwa0k0piVXBke8oK5 TTzCh5fpSjmQShwSLrWhwxv0ARnlJJ3x/Yyr79yLZ1OTrYDUFSVv5KvjRcUW1wo5 G6kW5X8m0ccref393hhmElipHKWJkGXiENA79ZmNae1/Akf+HRdZip7OQFw4lvol osCaY6eJmYR7tYXzYig2O7RtYDjuynH1MhJ6fSrNWLpNgN2M7sum2BTCmQxqTJUp l9EkZkvWwgQIoDpS2aTE5vMfDxxV+D2meftq7g3GuUKBu+44tjK0bDM9MyJn2QQT siSZ03YBZTyPx7gKRcKuRy/ZwBbF5Xgx -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:40 2024 by rpki-client on console-ams.rpki-client.org