$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: ttGfdIKw+DGYnBUj7YtUuHFa7thcSro1Sh+EExN1/9c= Subject key identifier: 89:77:A5:2F:F0:E2:54:C4:47:ED:2F:C4:7D:25:98:AF:32:B8:CD:B2 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 32 Signing time: Sat 09 Nov 2024 05:36:27 +0000 Manifest this update: Sat 09 Nov 2024 05:36:26 +0000 Manifest next update: Sat 16 Nov 2024 05:36:26 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: eC6M8nY/96e8O+U2PfTwaonu8DosUl4IDTlzi0hRxuo=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 Nov 2024 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Nov 9 05:36:26 2024 GMT Not After : Nov 16 05:36:26 2024 GMT Subject: CN=672ef4db-f030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:26:1b:25:18:50:78:59:34:23:fb:a5:c0: e0:18:54:65:96:95:96:7a:d5:cd:d6:eb:2e:91:a7: ed:e0:d1:cd:41:cf:50:bb:19:7d:b3:50:56:29:21: f5:9a:c3:d4:d6:3a:69:12:38:a0:80:51:fb:01:a2: c4:5a:69:01:c5:f3:fe:aa:e5:71:59:82:43:da:8e: d7:94:c7:e2:03:4f:ad:6e:d7:f7:35:42:f0:98:87: 45:64:f7:d7:89:22:88:ff:8c:85:1f:46:09:05:67: 62:13:de:42:0d:ed:49:0d:5d:0b:94:2e:53:73:24: 55:fe:2c:3e:99:69:31:4b:17:34:6e:58:b5:11:99: 54:b7:30:ab:46:ca:91:3a:7e:41:2c:14:45:92:67: 88:4b:bf:8a:b1:bf:d6:92:49:e7:2c:da:56:24:07: 02:bb:d0:5a:76:de:cc:27:03:43:ea:43:5b:b3:3e: 89:3c:41:fb:51:1b:d0:38:0f:55:da:67:ba:a5:3b: a0:ed:8e:46:74:6d:8a:79:93:4d:62:a0:bb:26:0d: 00:ee:2b:88:41:ca:61:e6:4f:bd:e7:7c:9b:2d:02: 91:22:ec:85:6b:5e:6d:5b:b1:92:57:90:25:8e:a2: f6:69:51:d4:cb:80:ee:f7:54:1f:b9:85:03:75:3d: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:A5:2F:F0:E2:54:C4:47:ED:2F:C4:7D:25:98:AF:32:B8:CD:B2 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4f:ee:e7:f1:7b:99:cf:ae:8a:65:4b:6f:2b:4d:38:e8:7b: 66:01:bb:e4:5a:6c:4f:cf:b0:81:4c:21:b9:0d:c1:23:83:7f: 27:e9:99:94:69:eb:07:e0:96:8a:8a:02:7f:7b:4b:f3:71:f4: 46:04:6a:6e:5e:d9:64:80:36:b2:fb:fd:20:a7:99:e5:48:f7: 22:07:16:79:db:2c:ad:01:0d:c6:40:ea:ba:68:e9:02:f5:dd: 6a:d3:ae:1b:95:d7:06:a3:18:91:71:25:55:c5:c7:ec:52:77: bc:80:73:21:9a:f4:2a:ad:57:ef:77:35:1a:3c:23:c6:f0:23: dc:c7:fc:0d:ca:08:3d:2a:9c:d2:1a:fa:3a:6b:50:96:51:1e: 25:12:63:03:e2:72:aa:92:6e:12:3c:bf:ad:67:a7:11:9f:0d: 16:37:58:f2:ea:b6:07:2b:7c:d9:5f:db:50:b3:82:e3:35:ac: 34:76:78:18:45:d2:10:e1:d3:9a:7b:5e:69:b0:da:51:f1:65: b8:05:78:63:bc:3e:c4:06:a0:4b:d6:88:91:06:5c:58:9e:6c: 85:35:8c:14:6c:05:ce:ca:80:8e:a3:f0:bb:25:05:43:aa:b5: 6b:2b:f7:49:38:82:7e:8a:6a:fd:37:df:91:5f:db:fa:f9:3d: 9d:de:c1:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjUzQjExMC8GA1UEBRMoOEQ5NzE3NzI3RDZFOEVFQjIzODA3QjMxM0MwNThEMDM1 NkZGRTE2MjAeFw0yNDExMDkwNTM2MjZaFw0yNDExMTYwNTM2MjZaMBgxFjAUBgNV BAMTDTY3MmVmNGRiLWYwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8DiYbJRhQeFk0I/ulwOAYVGWWlZZ61c3W6y6Rp+3g0c1Bz1C7GX2zUFYpIfWa w9TWOmkSOKCAUfsBosRaaQHF8/6q5XFZgkPajteUx+IDT61u1/c1QvCYh0Vk99eJ Ioj/jIUfRgkFZ2IT3kIN7UkNXQuULlNzJFX+LD6ZaTFLFzRuWLURmVS3MKtGypE6 fkEsFEWSZ4hLv4qxv9aSSecs2lYkBwK70Fp23swnA0PqQ1uzPok8QftRG9A4D1Xa Z7qlO6DtjkZ0bYp5k01ioLsmDQDuK4hBymHmT73nfJstApEi7IVrXm1bsZJXkCWO ovZpUdTLgO73VB+5hQN1PZhhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiXelL/Di VMRH7S/EfSWYrzK4zbIwHwYDVR0jBBgwFoAUjZcXcn1ujusjgHsxPAWNA1b/4WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNTNCLzIwMzIzQTgyNTlE RDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalpjWGNuMXVqdXNqZ0hzeFBBV05BMWJfNFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NTNCLzIwMzIzQTgyNTlERDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVz amdIc3hQQVdOQTFiXzRXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhP7ufxe5nProplS28rTTjoe2YBu+RabE/PsIFMIbkNwSODfyfpmZRp 6wfgloqKAn97S/Nx9EYEam5e2WSANrL7/SCnmeVI9yIHFnnbLK0BDcZA6rpo6QL1 3WrTrhuV1wajGJFxJVXFx+xSd7yAcyGa9CqtV+93NRo8I8bwI9zH/A3KCD0qnNIa +jprUJZRHiUSYwPicqqSbhI8v61npxGfDRY3WPLqtgcrfNlf21CzguM1rDR2eBhF 0hDh05p7Xmmw2lHxZbgFeGO8PsQGoEvWiJEGXFiebIU1jBRsBc7KgI6j8LslBUOq tWsr90k4gn6Kav0335Ff2/r5PZ3ewW4= -----END CERTIFICATE-----Generated at Sat Nov 9 08:09:53 2024 by rpki-client on console-ams.rpki-client.org