$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: zkcAWhabaqeSZLtIXe7y1oKdNIn+tArthwOBPmOsaWE= Subject key identifier: EC:90:6F:54:F8:45:6D:53:47:3A:C8:D1:5F:C8:D1:2E:13:73:19:3C Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 1F Signing time: Sun 15 Sep 2024 10:20:11 +0000 Manifest this update: Sun 15 Sep 2024 10:20:10 +0000 Manifest next update: Sun 22 Sep 2024 10:20:10 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: qVyWtwPlPFR66wlnBqZ21h3JOdZ95Al5J6D/iM5cipk=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Sep 15 10:20:10 2024 GMT Not After : Sep 22 10:20:10 2024 GMT Subject: CN=66e6b4db-9669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:c7:d1:22:4e:ff:d8:63:31:90:ab:f3:d8: 9f:00:8c:a6:2e:fb:d1:10:73:b0:19:a3:ee:ee:85: 26:90:1d:b8:da:0a:e0:c3:51:1f:06:0d:55:52:b2: 4c:f3:f8:cc:62:d9:49:81:e4:63:40:6d:c0:1d:49: f0:1b:88:0f:13:6c:ba:cd:9e:7c:89:fa:66:9c:c2: fd:9e:5d:38:78:81:7e:a6:d5:a8:c5:d7:db:5e:a9: fb:aa:9e:6c:52:21:c7:eb:d1:15:e6:66:db:62:04: a0:51:af:41:aa:04:56:61:64:ff:4e:4a:26:e2:46: e5:ec:2b:f7:d2:9b:36:b5:10:fa:d6:f2:a9:68:2a: 93:59:f9:1f:14:8e:30:6b:49:0e:13:83:a9:dd:e5: e1:24:90:15:e4:4b:36:6f:7f:e8:5d:c0:98:87:13: 91:76:be:bf:c3:44:22:69:c3:05:74:51:9a:5b:a3: 15:b4:ed:84:e4:87:02:60:06:55:7d:62:2e:2c:35: 30:ee:4b:42:cc:d2:0c:b6:6d:e4:a3:46:ec:ac:ad: da:3f:94:be:db:9e:ca:58:4d:47:89:6f:40:ad:17: b8:0d:c8:1f:40:68:2e:19:a2:76:03:bf:04:ad:c9: 59:ff:cf:af:30:f4:48:07:dc:e0:aa:10:10:47:04: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:6F:54:F8:45:6D:53:47:3A:C8:D1:5F:C8:D1:2E:13:73:19:3C X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:48:35:c3:d8:ab:12:e3:d7:c6:bf:fc:a2:0b:f9:fa:4c:35: 47:e8:d1:32:01:37:80:99:10:26:48:57:52:fa:6e:b3:44:f8: 99:bd:d6:26:fc:59:2d:e1:99:46:b8:a0:24:7d:07:39:5a:ef: 33:f5:b5:12:e5:c8:4e:ca:06:82:23:22:9a:fe:bf:d3:f7:1d: 9c:9e:b1:c6:00:c6:4c:e5:5f:c1:94:5f:2c:07:4f:46:48:93: cc:9a:f1:7b:a0:9a:7c:9c:e1:65:8e:86:0e:98:d2:8c:9a:0b: 91:23:11:e3:7c:b3:70:b3:ad:5b:d6:29:07:b4:7d:d5:92:e9: fc:ee:a0:ab:d9:b7:c3:6e:b1:b5:fc:55:e6:97:e0:91:41:25: db:42:16:41:8a:a8:9e:71:52:be:94:36:e7:00:1a:93:4d:d3: 93:f5:68:de:df:2f:f7:5a:a6:5d:36:c8:5b:94:0f:23:81:7c: 34:44:2a:27:48:39:b4:99:56:57:62:68:f3:b2:62:0e:b6:88: ba:18:a5:76:03:41:25:35:8b:2b:a6:b5:49:cb:61:d0:fd:03: 02:b4:f9:9e:ac:78:c3:ef:6b:ab:71:11:8d:da:a5:7e:a6:54: 97:ee:88:b6:b0:f2:96:d4:d7:d3:69:14:99:89:d1:c4:41:16: 3c:4f:93:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJEMTExMC8GA1UEBRMoOEU1MjYxMjNFRjUyQ0Y4NDk1NTgyNkEyNzI4QTMzMDc1 N0YxRTgwQzAeFw0yNDA5MTUxMDIwMTBaFw0yNDA5MjIxMDIwMTBaMBgxFjAUBgNV BAMTDTY2ZTZiNGRiLTk2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEwMfRIk7/2GMxkKvz2J8AjKYu+9EQc7AZo+7uhSaQHbjaCuDDUR8GDVVSskzz +Mxi2UmB5GNAbcAdSfAbiA8TbLrNnnyJ+macwv2eXTh4gX6m1ajF19teqfuqnmxS Icfr0RXmZttiBKBRr0GqBFZhZP9OSibiRuXsK/fSmza1EPrW8qloKpNZ+R8UjjBr SQ4Tg6nd5eEkkBXkSzZvf+hdwJiHE5F2vr/DRCJpwwV0UZpboxW07YTkhwJgBlV9 Yi4sNTDuS0LM0gy2beSjRuysrdo/lL7bnspYTUeJb0CtF7gNyB9AaC4ZonYDvwSt yVn/z68w9EgH3OCqEBBHBGTTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7JBvVPhF bVNHOsjRX8jRLhNzGTwwHwYDVR0jBBgwFoAUjlJhI+9Sz4SVWCaicoozB1fx6Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkQxL0NGRUI4REFBNDVB ODExRUY5NUM2RkQyREM0RjlBRTAyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamxKaEktOVN6NFNWV0NhaWNvb3pCMWZ4NkF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkQxL0NGRUI4REFBNDVBODExRUY5NUM2RkQyREM0RjlBRTAyL2psSmhJLTlTejRT VldDYWljb296QjFmeDZBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9INcPYqxLj18a//KIL+fpMNUfo0TIBN4CZECZIV1L6brNE+Jm91ib8 WS3hmUa4oCR9Bzla7zP1tRLlyE7KBoIjIpr+v9P3HZyescYAxkzlX8GUXywHT0ZI k8ya8Xugmnyc4WWOhg6Y0oyaC5EjEeN8s3CzrVvWKQe0fdWS6fzuoKvZt8NusbX8 VeaX4JFBJdtCFkGKqJ5xUr6UNucAGpNN05P1aN7fL/dapl02yFuUDyOBfDREKidI ObSZVldiaPOyYg62iLoYpXYDQSU1iyumtUnLYdD9AwK0+Z6seMPva6txEY3apX6m VJfuiLaw8pbU19NpFJmJ0cRBFjxPkxc= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:43 2024 by rpki-client on console-fra.rpki-client.org