$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: BaHD8QNfHWv9o0W87bPE0kDwGGm+wPDd8Uey7L6blvg= Subject key identifier: 1C:34:22:F0:5A:D4:60:D6:CE:04:CE:84:B3:82:FD:F3:D6:28:98:AF Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 0122 Signing time: Thu 21 Nov 2024 03:11:48 +0000 Manifest this update: Thu 21 Nov 2024 03:11:47 +0000 Manifest next update: Thu 28 Nov 2024 03:11:47 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: dbF4ctgWJJvhWBgui1xuGaxoaN8bTMWiXoyzKPcVEY8=) 2: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 3: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 4: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Nov 21 03:11:47 2024 GMT Not After : Nov 28 03:11:47 2024 GMT Subject: CN=673ea4f3-b76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:a9:ef:5b:97:e1:48:72:8d:54:5b:c9:df: de:5f:22:cd:65:9c:55:0b:c5:2f:48:d8:87:f5:cc: 83:e8:73:d2:06:96:d6:2a:c3:40:87:37:39:78:e8: c5:94:14:04:66:bf:c3:fd:a0:c5:c4:54:6c:a8:8e: 9e:2a:ba:65:9d:51:8a:98:6c:99:19:fc:8c:ad:15: d7:4e:20:d8:7a:b7:4a:6b:5b:97:00:04:51:a4:b4: 11:28:86:7c:8f:fd:a9:8d:f4:fa:a7:aa:66:fd:b1: 09:83:5c:ac:08:37:12:ae:1d:50:cd:01:d6:fd:2d: d6:56:0d:f2:51:99:7f:f1:b6:92:98:b6:b3:91:cf: e4:ff:97:9b:3f:46:c9:bb:b4:cd:cd:52:9a:ff:ef: 88:68:10:e1:72:00:62:69:3d:93:41:40:03:1e:c9: db:ba:8a:0e:3c:1a:e1:37:84:fc:9b:1d:01:ff:8e: 65:63:c5:26:ee:c1:b0:68:18:98:b3:fa:3b:cc:9a: 0b:8f:ac:99:6d:32:de:92:38:7d:f5:9e:ae:e4:e8: ea:8c:52:fa:86:17:6c:44:0b:3d:92:22:86:84:1b: 15:d1:89:1d:40:6a:c5:f4:97:a1:3d:10:c8:7b:a8: ed:0b:f3:bc:42:19:7e:a1:8a:9c:f3:73:b9:a1:24: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:22:F0:5A:D4:60:D6:CE:04:CE:84:B3:82:FD:F3:D6:28:98:AF X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bc:ce:72:64:08:a6:f4:59:03:a8:39:fe:e5:88:ed:bb:86: 51:9d:74:7f:21:06:5c:17:48:13:a0:0f:59:96:23:bd:de:18: 36:94:92:cc:75:b6:50:12:37:77:23:34:ae:68:51:db:74:a6: fb:dc:53:7b:11:75:04:a8:54:5d:48:08:51:82:b9:ba:e4:ba: 07:dc:ed:6d:06:25:5d:9b:16:06:ee:5e:86:7f:9a:2d:bb:64: 33:27:b9:67:1d:40:99:dd:d2:35:cc:eb:35:23:4a:b2:bf:91: b1:a7:49:5c:e9:27:a2:c3:d3:2e:ec:44:85:ea:7a:f3:f3:13: f5:62:3a:16:c0:72:ca:87:c5:85:60:82:1e:a4:80:bc:6b:cd: 37:63:2f:67:4a:da:46:c1:02:f2:9d:ee:9c:fc:40:bc:36:41: 28:a9:02:51:26:25:13:9b:09:cf:8f:ed:0b:f4:14:5a:b7:df: 5b:40:48:b2:69:c3:98:a0:c7:61:49:09:a5:70:58:0f:21:8c: 5f:3b:22:58:f0:bc:99:6c:1f:a1:27:1f:04:ab:bf:fc:cf:91: 76:aa:0c:9c:46:39:65:a2:13:f5:7c:90:16:ce:2c:d7:57:fa: d5:cf:33:41:65:bb:a6:69:a6:88:06:62:e8:17:0f:d3:14:6c: 8a:48:f9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjQxMTIxMDMxMTQ3WhcNMjQxMTI4MDMxMTQ3WjAYMRYwFAYD VQQDEw02NzNlYTRmMy1iNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70Kp71uX4UhyjVRbyd/eXyLNZZxVC8UvSNiH9cyD6HPSBpbWKsNAhzc5eOjF lBQEZr/D/aDFxFRsqI6eKrplnVGKmGyZGfyMrRXXTiDYerdKa1uXAARRpLQRKIZ8 j/2pjfT6p6pm/bEJg1ysCDcSrh1QzQHW/S3WVg3yUZl/8baSmLazkc/k/5ebP0bJ u7TNzVKa/++IaBDhcgBiaT2TQUADHsnbuooOPBrhN4T8mx0B/45lY8Um7sGwaBiY s/o7zJoLj6yZbTLekjh99Z6u5OjqjFL6hhdsRAs9kiKGhBsV0YkdQGrF9JehPRDI e6jtC/O8Qhl+oYqc83O5oSROVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBw0IvBa 1GDWzgTOhLOC/fPWKJivMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkvM5yZAim9FkDqDn+5Yjtu4ZRnXR/IQZcF0gToA9ZliO93hg2lJLM dbZQEjd3IzSuaFHbdKb73FN7EXUEqFRdSAhRgrm65LoH3O1tBiVdmxYG7l6Gf5ot u2QzJ7lnHUCZ3dI1zOs1I0qyv5Gxp0lc6Seiw9Mu7ESF6nrz8xP1YjoWwHLKh8WF YIIepIC8a803Yy9nStpGwQLyne6c/EC8NkEoqQJRJiUTmwnPj+0L9BRat99bQEiy acOYoMdhSQmlcFgPIYxfOyJY8LyZbB+hJx8Eq7/8z5F2qgycRjllohP1fJAWzizX V/rVzzNBZbumaaaIBmLoFw/TFGyKSPkh -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org