$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: 3Ob7yPaHJxaNjGLEp4HO+ZhxRU4lGlql1ow8ysxB8do= Subject key identifier: D9:9B:34:7F:22:F4:40:CE:94:78:67:46:21:E9:6E:3E:9A:EA:04:87 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 04B2 Signing time: Sat 23 Nov 2024 00:14:25 +0000 Manifest this update: Sat 23 Nov 2024 00:14:24 +0000 Manifest next update: Sat 30 Nov 2024 00:14:24 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: sUzwrMl3FbzciKjfho0LtUflGVLWPNCivQDSDTUN9xA=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: xKArmrduSBI+gGo62RSF6mCGFoJkOu3mNzVbjwogvU0=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: FOhpYe5DK9I/QvT8DCyDAdniDFXXS6XAPszrK91CJRI=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: 3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: Mehq2UCt1CiOt2/FTfT15J6Iwk1nsNkmhPQP9ob7BYA=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: JirC+a3hnrfRs218btabHTFrtTd+AmDYvGFRmHD+9Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Nov 23 00:14:24 2024 GMT Not After : Nov 30 00:14:24 2024 GMT Subject: CN=67411e60-5d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:66:ca:2b:e6:19:f2:25:a3:26:95:75:cd:7a: f9:1f:83:05:51:16:30:51:f0:2a:9f:6d:c1:ee:91: 45:20:bf:65:af:b0:29:9f:6b:0d:47:0c:d7:46:9d: 5b:55:41:30:54:f8:d6:3c:cc:a7:30:b3:6e:2c:62: 2f:35:45:ab:3c:d1:40:c9:92:8b:85:79:72:5c:3b: 9a:9b:e7:b3:b7:4d:49:91:38:83:02:99:90:03:8f: a9:32:b6:39:ae:1a:47:04:64:8a:d3:e6:f6:60:34: e3:0f:2f:97:b1:47:64:c3:24:7c:54:1f:39:cb:27: a1:ca:59:b3:1a:99:91:28:09:16:a5:c2:d1:6c:bd: 2f:32:7a:7e:c3:89:c3:25:85:ca:e8:44:73:f9:9d: a6:e1:90:de:ac:a1:77:b2:61:69:91:fb:9f:98:e8: 29:7c:cf:26:be:50:82:8f:a2:e9:cd:c5:c6:eb:15: 7a:25:95:2b:73:d8:92:db:d5:52:15:61:f8:15:c5: 1e:d0:8b:fb:9f:83:d8:eb:55:d8:5a:3e:aa:d9:72: 3d:28:2e:2a:56:2d:7d:96:2d:aa:88:d7:c9:77:58: 46:84:15:a7:df:52:30:a7:69:15:a8:a1:4a:32:5d: a7:b4:36:44:38:72:69:63:1a:c1:9e:58:21:ee:e8: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9B:34:7F:22:F4:40:CE:94:78:67:46:21:E9:6E:3E:9A:EA:04:87 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f6:f4:59:eb:dc:61:7a:ee:99:50:cc:99:0b:02:1d:f3:88: 89:d3:50:fa:9d:31:e7:a6:c1:40:7c:46:f8:ed:06:3a:09:a4: d5:84:bd:b9:0b:e9:2b:87:e8:fc:92:ac:71:ee:5e:a8:e1:46: c0:57:c2:df:48:32:15:49:43:94:42:4e:1b:cf:44:d5:d1:ec: 50:61:a8:93:cc:fe:f0:ef:c3:3a:f1:4c:19:b9:83:6d:d5:6d: 96:1b:e6:d6:90:0f:8c:f4:ba:2f:87:52:08:1f:8b:30:74:a9: 7b:48:99:71:54:f3:f2:57:83:de:d4:be:2e:81:11:52:cd:5e: cd:93:96:97:e2:8d:aa:d6:df:f8:96:c8:2c:d5:ca:52:fb:0d: f0:4c:0f:e2:e5:f4:44:45:b1:39:54:8f:9f:7e:26:42:04:c7: 4e:76:7c:25:aa:21:9a:62:7c:d1:68:87:a6:f0:52:a6:d0:f7: 64:74:c4:e0:e5:e6:43:8e:69:78:4a:b0:1d:fd:1b:70:f3:67: b4:96:00:be:82:1e:94:b4:60:a9:04:9e:54:25:c4:4e:fc:17: 33:6a:3e:b5:3a:59:ab:a6:23:ed:9a:28:f7:e0:b6:6d:7d:a9: fc:db:e3:86:34:24:4b:65:a8:c2:4a:95:1f:45:c4:4a:16:5e: fc:52:14:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjQxMTIzMDAxNDI0WhcNMjQxMTMwMDAxNDI0WjAYMRYwFAYD VQQDEw02NzQxMWU2MC01ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WbKK+YZ8iWjJpV1zXr5H4MFURYwUfAqn23B7pFFIL9lr7Apn2sNRwzXRp1b VUEwVPjWPMynMLNuLGIvNUWrPNFAyZKLhXlyXDuam+ezt01JkTiDApmQA4+pMrY5 rhpHBGSK0+b2YDTjDy+XsUdkwyR8VB85yyehylmzGpmRKAkWpcLRbL0vMnp+w4nD JYXK6ERz+Z2m4ZDerKF3smFpkfufmOgpfM8mvlCCj6LpzcXG6xV6JZUrc9iS29VS FWH4FcUe0Iv7n4PY61XYWj6q2XI9KC4qVi19li2qiNfJd1hGhBWn31Iwp2kVqKFK Ml2ntDZEOHJpYxrBnlgh7uiOTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmbNH8i 9EDOlHhnRiHpbj6a6gSHMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU9vRZ69xheu6ZUMyZCwId84iJ01D6nTHnpsFAfEb47QY6CaTVhL25 C+krh+j8kqxx7l6o4UbAV8LfSDIVSUOUQk4bz0TV0exQYaiTzP7w78M68UwZuYNt 1W2WG+bWkA+M9Lovh1IIH4swdKl7SJlxVPPyV4Pe1L4ugRFSzV7Nk5aX4o2q1t/4 lsgs1cpS+w3wTA/i5fRERbE5VI+ffiZCBMdOdnwlqiGaYnzRaIem8FKm0PdkdMTg 5eZDjml4SrAd/Rtw82e0lgC+gh6UtGCpBJ5UJcRO/Bczaj61OlmrpiPtmij34LZt fan82+OGNCRLZajCSpUfRcRKFl78UhSY -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org