$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: cTaNCXiZrV125BhaypZ5Yu/c0SSKcGIZARMv7EMrIhQ= Subject key identifier: A7:1A:C5:1A:FA:F2:4A:14:47:33:E4:4E:0A:2F:23:50:E5:13:DC:86 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 021F Signing time: Sat 23 Nov 2024 01:28:43 +0000 Manifest this update: Sat 23 Nov 2024 01:28:43 +0000 Manifest next update: Sat 30 Nov 2024 01:28:43 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: sx/DBr+zEVaBstODCkbU7Yo36PekBMTMT1BHJINj19k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Nov 23 01:28:43 2024 GMT Not After : Nov 30 01:28:43 2024 GMT Subject: CN=67412fcb-b8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:d0:cc:5d:f3:57:ba:be:ca:14:24:3a:4c: 15:74:e5:1d:f2:38:ec:f6:b3:c6:ef:c4:f2:b6:33: 76:9f:83:d0:43:62:31:7a:36:34:1b:83:06:77:30: 1d:17:f4:0a:49:fc:10:d6:dd:e1:63:31:f0:6a:f3: df:6d:01:5f:28:f3:30:d0:17:3b:46:4f:a5:13:37: 92:29:46:18:b1:6d:86:3b:93:89:0a:b8:01:6a:9b: 8c:3b:67:1e:1a:eb:41:e5:41:61:24:20:ad:4e:39: 5d:d8:2e:9f:74:f1:81:31:9a:f5:5b:f2:4b:bd:1d: d3:ec:0a:e7:38:96:90:24:ac:fb:d4:e0:d4:12:13: 9c:ac:a9:ea:d9:2b:d9:1b:ea:ae:c6:1c:2e:3c:93: 67:e4:7d:d8:c0:94:99:21:6b:50:e8:b3:cd:d3:59: 16:36:c7:1d:19:85:cd:66:c8:6f:dc:68:85:4d:32: 3a:f8:bb:aa:35:de:6c:f6:3f:66:fc:17:68:e8:d2: e8:73:9f:cd:98:8d:58:1f:2e:85:d4:5a:d9:2a:b6: 54:8f:89:d7:68:1d:3e:15:9c:a8:d4:3d:b2:21:d8: 3c:d2:23:95:a7:9d:fa:27:7c:49:8a:83:c2:49:67: b0:35:c4:6d:69:0f:a4:48:b5:ca:86:f7:3d:43:14: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:C5:1A:FA:F2:4A:14:47:33:E4:4E:0A:2F:23:50:E5:13:DC:86 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:b3:32:e1:11:a0:3b:a8:aa:99:de:b4:2e:4c:46:e8:88: 8d:e3:63:38:e7:c1:9d:af:b3:29:c6:ea:2b:06:cd:d6:df:d1: db:6c:89:41:46:ec:01:34:37:60:32:ba:ce:8e:94:42:a7:fd: f4:2c:63:fc:74:27:9a:7c:4f:d2:05:0b:af:8b:55:32:d6:9d: 1a:65:89:11:a5:d8:b2:4f:43:1f:bb:7e:95:14:b2:c1:4e:6e: c5:f0:94:79:cb:7a:75:ea:24:75:23:7a:35:8d:bf:48:7d:14: 10:0e:ce:52:70:87:15:bb:b5:dc:91:fc:03:b7:06:c9:be:aa: 4e:2f:33:fe:f1:04:e3:34:1e:a4:c9:b3:61:fa:76:fb:28:9d: 83:70:91:43:e2:e5:28:0b:ec:48:93:77:33:fc:c5:b0:60:a3: 00:4c:01:7f:29:3c:cf:2f:89:bf:db:31:2c:a9:45:c5:68:d3: b1:85:89:ba:78:ee:07:02:5e:f9:86:e7:24:17:c3:9e:41:7d: e2:2e:59:a7:4f:d9:80:1b:3b:64:02:62:4a:d9:4e:0f:fc:a2: 59:09:af:b9:58:cc:f6:5b:5a:7f:b6:4d:df:f4:6e:f0:f5:41: c6:78:65:28:ab:23:93:a3:ee:3b:99:83:4f:c8:2c:57:77:17: c8:73:15:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjQxMTIzMDEyODQzWhcNMjQxMTMwMDEyODQzWjAYMRYwFAYD VQQDEw02NzQxMmZjYi1iOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4bQzF3zV7q+yhQkOkwVdOUd8jjs9rPG78TytjN2n4PQQ2IxejY0G4MGdzAd F/QKSfwQ1t3hYzHwavPfbQFfKPMw0Bc7Rk+lEzeSKUYYsW2GO5OJCrgBapuMO2ce GutB5UFhJCCtTjld2C6fdPGBMZr1W/JLvR3T7ArnOJaQJKz71ODUEhOcrKnq2SvZ G+quxhwuPJNn5H3YwJSZIWtQ6LPN01kWNscdGYXNZshv3GiFTTI6+LuqNd5s9j9m /Bdo6NLoc5/NmI1YHy6F1FrZKrZUj4nXaB0+FZyo1D2yIdg80iOVp536J3xJioPC SWewNcRtaQ+kSLXKhvc9QxTFuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcaxRr6 8koURzPkTgovI1DlE9yGMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXgbMy4RGgO6iqmd60LkxG6IiN42M458Gdr7MpxuorBs3W39HbbIlB RuwBNDdgMrrOjpRCp/30LGP8dCeafE/SBQuvi1Uy1p0aZYkRpdiyT0Mfu36VFLLB Tm7F8JR5y3p16iR1I3o1jb9IfRQQDs5ScIcVu7XckfwDtwbJvqpOLzP+8QTjNB6k ybNh+nb7KJ2DcJFD4uUoC+xIk3cz/MWwYKMATAF/KTzPL4m/2zEsqUXFaNOxhYm6 eO4HAl75huckF8OeQX3iLlmnT9mAGztkAmJK2U4P/KJZCa+5WMz2W1p/tk3f9G7w 9UHGeGUoqyOTo+47mYNPyCxXdxfIcxWG -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org