$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: dJ8HpMIJf3s5w09Q99kL4AMTK2bPEifJuwc8s19h34k= Subject key identifier: B1:12:84:8B:A3:31:BC:D5:6A:36:3A:C2:C2:BD:83:64:60:6D:BB:15 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 085C Signing time: Fri 22 Nov 2024 20:25:06 +0000 Manifest this update: Fri 22 Nov 2024 20:25:06 +0000 Manifest next update: Fri 29 Nov 2024 20:25:06 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: +QbnJWQfX1QG6eaD4b+umjuC54/7vWYh+tjkRQgGluQ=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Nov 22 20:25:06 2024 GMT Not After : Nov 29 20:25:06 2024 GMT Subject: CN=6740e8a2-5077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:39:da:1e:00:a7:bc:9c:1e:00:4d:03:b6: 3f:25:3f:84:cf:e2:60:7e:4d:11:46:8c:0e:81:06: 17:b8:50:fb:2e:5a:f1:89:3b:47:a5:4b:11:81:6f: 47:30:15:4c:b7:df:83:b9:9b:37:16:77:75:8e:08: 43:18:cb:ae:f9:30:b8:93:ed:bc:b2:2a:40:3a:8b: e4:f8:c2:6d:d7:f1:5c:ec:c5:0f:68:05:da:de:0e: b2:1f:f6:65:a6:1a:32:57:7d:d6:a6:fb:f1:cd:49: 86:78:4d:d5:14:a7:04:73:a6:89:76:d0:e2:1f:ad: b8:f4:3d:2d:e2:95:e1:60:67:c0:b8:d7:16:2b:52: c0:dc:9b:47:5a:54:0c:68:06:d8:16:9c:58:85:8f: 39:00:e8:cd:95:cf:e2:b3:c8:bb:c7:97:bf:b8:9a: d2:1a:ed:82:7f:e6:e5:2d:b5:46:e3:84:f0:c4:ff: db:ff:cc:14:6a:98:cf:d2:a2:2c:70:d0:e2:d1:6c: d1:e2:bf:c3:16:db:69:c5:32:90:7a:81:27:d6:8a: b4:55:ca:b3:66:21:8e:7e:62:95:00:a5:6f:81:2c: e8:1d:95:92:8d:a7:05:c6:45:58:76:59:d7:9f:a4: b4:1f:f9:e2:38:d8:16:4c:7d:a5:04:0f:e7:73:9d: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:12:84:8B:A3:31:BC:D5:6A:36:3A:C2:C2:BD:83:64:60:6D:BB:15 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f0:d1:35:81:fd:3b:14:52:0d:2f:6a:35:a7:05:5a:20:17: 70:2b:68:d2:8a:51:74:14:90:2c:d9:8a:83:95:0d:91:c7:2b: 1e:77:d7:99:8d:93:e4:28:43:1c:fd:50:92:2d:3b:48:97:95: da:18:6b:bf:bc:ce:94:47:94:fb:b3:fd:d8:87:3b:12:e2:b2: 39:5a:ca:6b:e6:6d:79:58:96:77:fe:a7:3d:ca:d0:56:ef:67: bc:23:94:5e:7a:b7:13:b2:90:16:01:1e:ec:f7:47:54:a0:bb: 5f:6f:85:bd:10:51:aa:f9:c7:ed:f7:af:01:35:63:a7:54:bf: 31:f0:46:7e:ca:a1:d4:ee:4e:b1:ae:ff:d7:6e:5c:14:5e:7e: 64:34:14:a1:22:95:f5:6b:9c:57:33:95:f4:86:e7:04:67:a1: ce:4e:a7:07:bc:6a:b2:cf:7c:6b:d0:ac:78:83:7d:4a:2b:89: 56:9f:ae:ef:49:ff:44:42:99:ed:d1:a4:8e:93:d7:fc:cf:87: 5a:2f:76:86:7c:fc:38:d3:05:cb:1c:23:f7:00:f1:e9:4e:2f: c0:14:a6:ac:eb:bb:64:65:3e:13:99:c8:fb:65:d5:3b:a3:a7: 54:6c:12:93:26:da:2b:ab:8c:5e:3f:10:61:d5:2b:96:b0:4e: 36:ee:11:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjQxMTIyMjAyNTA2WhcNMjQxMTI5MjAyNTA2WjAYMRYwFAYD VQQDEw02NzQwZThhMi01MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL852h4Ap7ycHgBNA7Y/JT+Ez+Jgfk0RRowOgQYXuFD7LlrxiTtHpUsRgW9H MBVMt9+DuZs3Fnd1jghDGMuu+TC4k+28sipAOovk+MJt1/Fc7MUPaAXa3g6yH/Zl phoyV33WpvvxzUmGeE3VFKcEc6aJdtDiH6249D0t4pXhYGfAuNcWK1LA3JtHWlQM aAbYFpxYhY85AOjNlc/is8i7x5e/uJrSGu2Cf+blLbVG44TwxP/b/8wUapjP0qIs cNDi0WzR4r/DFttpxTKQeoEn1oq0VcqzZiGOfmKVAKVvgSzoHZWSjacFxkVYdlnX n6S0H/niONgWTH2lBA/nc52L9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEShIuj MbzVajY6wsK9g2RgbbsVMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN8NE1gf07FFINL2o1pwVaIBdwK2jSilF0FJAs2YqDlQ2Rxysed9eZ jZPkKEMc/VCSLTtIl5XaGGu/vM6UR5T7s/3YhzsS4rI5Wspr5m15WJZ3/qc9ytBW 72e8I5ReercTspAWAR7s90dUoLtfb4W9EFGq+cft968BNWOnVL8x8EZ+yqHU7k6x rv/XblwUXn5kNBShIpX1a5xXM5X0hucEZ6HOTqcHvGqyz3xr0Kx4g31KK4lWn67v Sf9EQpnt0aSOk9f8z4daL3aGfPw40wXLHCP3APHpTi/AFKas67tkZT4Tmcj7ZdU7 o6dUbBKTJtorq4xePxBh1SuWsE427hFb -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org