$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: Fz6YK4wsdKMWX+t7zV+EUZ/ZnxohWY2FA0Ekl4zYzn0= Subject key identifier: 3F:DD:5F:C5:4E:E2:FD:A0:32:65:F5:48:83:3C:A5:00:BF:3D:65:02 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 0482 Signing time: Sun 03 Dec 2023 00:54:20 +0000 Manifest this update: Sun 03 Dec 2023 00:54:20 +0000 Manifest next update: Sun 10 Dec 2023 00:54:20 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: drGo5+61Czvohzr5LJJ0k42DkcqIMDh3xxC79cQdpg8=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: ehZYYx43mekOxtMZbB8Kac2HEglrGzpg/NH8QtK7MkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Dec 2023 23:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Dec 3 00:54:20 2023 GMT Not After : Dec 10 00:54:20 2023 GMT Subject: CN=656bd1bc-9326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:36:3b:28:1e:cf:9f:e0:99:d7:f1:7e:25: 04:80:21:20:c9:68:94:54:49:5c:57:57:ca:c5:ab: 42:a1:f1:5a:8b:1a:f9:b0:4b:2b:3d:2b:d3:7d:05: 31:cf:46:31:48:f4:ae:47:e8:14:aa:06:6f:10:32: 71:cc:a6:16:67:a7:02:60:8a:87:f9:b9:23:2e:d9: 0c:b0:9e:f4:9a:81:da:8e:52:a1:35:1b:e2:ad:e2: 07:7e:df:fb:79:bf:6e:ba:4f:7e:a0:28:d9:45:55: 10:15:ca:ce:03:b1:a1:e1:00:51:4c:16:4c:99:e4: 90:05:00:45:90:90:73:3e:b6:c5:fb:8d:1c:c7:3e: 3b:f2:9e:07:1a:3e:e4:99:a0:14:fc:63:6c:f0:fe: 5c:c3:25:2e:26:3a:1b:ca:92:ff:b9:33:f1:b3:1d: 43:bb:3d:5e:b9:16:4c:8f:dc:9c:c4:29:ab:47:5f: 81:21:2b:4c:37:57:8e:37:36:c3:6e:77:89:05:a5: 1a:d7:2e:f4:35:2a:92:8b:53:1f:8f:a8:db:8c:30: 01:50:b9:f9:5e:91:64:61:45:10:52:59:cd:5a:2f: 82:48:5b:7b:ef:ff:c7:c6:44:23:2d:b7:cb:b6:d0: 3c:08:6b:6f:03:21:e3:23:29:ad:0b:d5:6b:6d:bb: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:5F:C5:4E:E2:FD:A0:32:65:F5:48:83:3C:A5:00:BF:3D:65:02 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:59:f8:58:a2:15:17:52:5e:58:7e:41:10:d1:d3:ca:48:b3: e0:4c:40:ad:95:0f:aa:a4:bd:93:c7:34:51:43:a0:a6:9d:bd: 22:52:02:44:a1:44:e7:17:63:7f:93:06:ef:78:23:bd:78:26: 1e:78:31:e4:73:08:13:70:9c:42:55:b7:d7:fd:a1:a3:f8:16: e3:ac:33:db:69:51:08:ba:51:55:bc:f0:1d:21:44:43:7c:d5: dd:97:58:f1:e0:8c:4b:3f:da:62:97:af:2e:7a:6e:09:69:ca: 68:13:40:44:87:0c:1b:1f:07:34:de:c7:db:24:f5:91:7e:89: 87:60:74:f4:e5:dd:b0:29:c7:a1:d3:51:d4:55:21:28:35:81: 17:62:e0:74:1e:e6:86:29:d7:f4:d8:5d:a7:49:1c:dc:43:d8: 8d:fd:18:56:1a:02:c3:5d:77:ec:ca:b8:db:eb:6c:cb:93:18: b8:41:fa:98:0e:74:3c:bf:48:db:ec:ce:76:5c:5a:ef:5c:dc: c6:75:1e:13:e1:af:ba:53:8b:b3:d6:5d:d5:98:85:36:a2:4f: d7:28:0e:48:4d:4c:23:c6:55:c8:07:6c:6b:49:5a:05:c8:00: f4:87:ff:52:d7:35:0b:a1:84:6e:04:12:7f:ae:ca:16:8f:34: d0:be:94:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjMxMjAzMDA1NDIwWhcNMjMxMjEwMDA1NDIwWjAYMRYwFAYD VQQDEw02NTZiZDFiYy05MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGM2Oygez5/gmdfxfiUEgCEgyWiUVElcV1fKxatCofFaixr5sEsrPSvTfQUx z0YxSPSuR+gUqgZvEDJxzKYWZ6cCYIqH+bkjLtkMsJ70moHajlKhNRvireIHft/7 eb9uuk9+oCjZRVUQFcrOA7Gh4QBRTBZMmeSQBQBFkJBzPrbF+40cxz478p4HGj7k maAU/GNs8P5cwyUuJjobypL/uTPxsx1Duz1euRZMj9ycxCmrR1+BIStMN1eONzbD bneJBaUa1y70NSqSi1Mfj6jbjDABULn5XpFkYUUQUlnNWi+CSFt77//HxkQjLbfL ttA8CGtvAyHjIymtC9VrbbvbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/dX8VO 4v2gMmX1SIM8pQC/PWUCMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCWfhYohUXUl5YfkEQ0dPKSLPgTECtlQ+qpL2TxzRRQ6Cmnb0iUgJE oUTnF2N/kwbveCO9eCYeeDHkcwgTcJxCVbfX/aGj+BbjrDPbaVEIulFVvPAdIURD fNXdl1jx4IxLP9pil68uem4JacpoE0BEhwwbHwc03sfbJPWRfomHYHT05d2wKceh 01HUVSEoNYEXYuB0HuaGKdf02F2nSRzcQ9iN/RhWGgLDXXfsyrjb62zLkxi4QfqY DnQ8v0jb7M52XFrvXNzGdR4T4a+6U4uz1l3VmIU2ok/XKA5ITUwjxlXIB2xrSVoF yAD0h/9S1zULoYRuBBJ/rsoWjzTQvpQf -----END CERTIFICATE-----Generated at Sun Dec 3 01:18:10 2023 by rpki-client on console-ams.rpki-client.org