$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: dDx9ql6FNUPsZ27XDDdEpkDlFKC+DJucuRoOOr/ZF0k= Subject key identifier: 9D:E7:AA:21:3C:48:1C:43:3D:32:9F:69:B3:E4:A5:A1:5B:27:91:E4 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 09DD Signing time: Sun 24 Nov 2024 19:35:21 +0000 Manifest this update: Sun 24 Nov 2024 19:35:21 +0000 Manifest next update: Sun 01 Dec 2024 19:35:21 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: knSE4Pf6iBoZx4Lx6uSWyBI03/+I5LICQuPfh8IsCGk=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: /HxqlitfofQG8bCIVxR7GjjRijymYFCA2ONzJT2hr1w=) 4: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: GmayiKETIiZ9Dddn74jDtmFnrHu5tuYrorPKMD9Py2g=) 5: F4FCC41E648311EC88370386C4F9AE02.roa (hash: 5pNjF8ltrq+R6UIemPSBKYZleMRlldkXP45kIszCmRk=) 6: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 33Lt9iacdoAJt5PFtlWSBj+z9HbFVVUjpu5jsfW7jp4=) 7: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: 3CHVCYcA7uR6YYnaviE1S/TMYRhsJjcvlmAm4mTQrmQ=) 8: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: ICd6VVGw9xVz+wcPqJ3UVJmdStRmzwwWVF/J8p4R2lY=) 9: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: 5cDMbBqP2e/j21s9fqpqtIuoXCOWr6gs9WfTIXKzVRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Nov 24 19:35:21 2024 GMT Not After : Dec 1 19:35:21 2024 GMT Subject: CN=67437ff9-fd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:af:00:e3:1e:f8:aa:bb:e7:b9:b2:1b:b5: 09:f0:01:80:28:8f:23:d5:22:69:65:90:f9:55:81: df:88:33:21:76:64:62:d2:b7:dc:02:5d:e0:2f:99: 2d:8d:17:32:50:2d:e8:e6:62:a0:5d:51:d8:0c:91: 32:1c:13:d4:38:c5:90:b0:eb:72:f8:df:63:ea:24: 15:de:68:15:f7:85:7e:a3:f9:45:24:64:bd:ce:12: 13:47:4a:2b:fc:f3:4d:40:52:5a:94:0b:d9:34:e4: 41:a7:f0:7f:7d:16:fc:1a:9b:87:8c:02:cb:4d:a4: 00:73:64:17:49:3f:db:6b:f3:03:fd:8c:86:32:03: 62:31:96:42:aa:b7:fb:64:d6:58:73:06:f1:ce:78: f3:87:4d:57:50:60:17:d0:84:cc:61:26:e0:87:34: 46:19:f4:18:69:8a:0c:33:b2:01:ac:48:43:29:52: 32:1a:55:27:5b:42:1d:23:52:af:9f:cf:a5:a9:bf: 54:6c:32:23:d2:d0:91:dd:d9:51:93:63:41:9f:48: 3c:e0:f5:05:04:8d:37:b1:14:ca:d6:be:90:67:29: 83:57:92:b1:19:00:55:01:41:e7:84:da:85:3b:f3: c9:06:e4:e5:9c:5a:e1:78:52:d0:d4:9c:92:e6:d1: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E7:AA:21:3C:48:1C:43:3D:32:9F:69:B3:E4:A5:A1:5B:27:91:E4 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c9:51:c6:a3:d4:cb:bd:51:35:36:88:e0:f8:7c:91:44:2e: f1:f0:c5:15:29:cf:27:09:a8:51:d8:b3:2c:f4:2f:ee:2e:00: 93:29:d4:f9:fc:73:ea:60:f1:95:53:e5:2c:9c:5b:a0:68:0c: 55:e1:1d:56:a1:d6:7f:45:be:27:61:64:60:75:88:6a:d9:54: 05:b2:18:32:c6:fe:40:f8:69:93:ab:97:58:44:db:e9:74:e8: 03:46:5d:b7:f2:a9:eb:72:aa:91:9a:92:2d:17:b2:26:85:fc: ce:fe:6e:cc:9f:5b:0b:5a:30:55:5c:27:1f:67:7c:ed:6f:46: 4b:2f:ee:25:03:0b:b3:49:b8:97:85:10:a6:f6:d2:1e:4a:cf: 8e:36:bd:1e:5e:89:06:58:83:75:93:b5:55:5e:4e:fe:e6:cb: c0:30:98:92:89:fe:d5:c9:87:30:e4:d2:3c:ce:c0:0c:a0:56: 1d:ae:23:c8:8a:47:c8:6f:f7:9f:de:f1:f6:db:ab:6c:90:6d: 75:ff:29:1b:a7:41:4b:a6:5e:3e:16:0e:be:17:bc:e4:d1:e0: 86:98:cb:60:dd:73:6f:c3:a9:cb:6d:88:5e:c0:f3:c3:4d:ec: 4e:53:3f:c5:43:b4:56:f1:74:ef:e0:ab:f5:df:9c:d4:97:28: 07:eb:1d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjQxMTI0MTkzNTIxWhcNMjQxMjAxMTkzNTIxWjAYMRYwFAYD VQQDEw02NzQzN2ZmOS1mZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GSvAOMe+Kq757myG7UJ8AGAKI8j1SJpZZD5VYHfiDMhdmRi0rfcAl3gL5kt jRcyUC3o5mKgXVHYDJEyHBPUOMWQsOty+N9j6iQV3mgV94V+o/lFJGS9zhITR0or /PNNQFJalAvZNORBp/B/fRb8GpuHjALLTaQAc2QXST/ba/MD/YyGMgNiMZZCqrf7 ZNZYcwbxznjzh01XUGAX0ITMYSbghzRGGfQYaYoMM7IBrEhDKVIyGlUnW0IdI1Kv n8+lqb9UbDIj0tCR3dlRk2NBn0g84PUFBI03sRTK1r6QZymDV5KxGQBVAUHnhNqF O/PJBuTlnFrheFLQ1JyS5tGG9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3nqiE8 SBxDPTKfabPkpaFbJ5HkMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiyVHGo9TLvVE1Nojg+HyRRC7x8MUVKc8nCahR2LMs9C/uLgCTKdT5 /HPqYPGVU+UsnFugaAxV4R1WodZ/Rb4nYWRgdYhq2VQFshgyxv5A+GmTq5dYRNvp dOgDRl238qnrcqqRmpItF7ImhfzO/m7Mn1sLWjBVXCcfZ3ztb0ZLL+4lAwuzSbiX hRCm9tIeSs+ONr0eXokGWIN1k7VVXk7+5svAMJiSif7VyYcw5NI8zsAMoFYdriPI ikfIb/ef3vH226tskG11/ykbp0FLpl4+Fg6+F7zk0eCGmMtg3XNvw6nLbYhewPPD TexOUz/FQ7RW8XTv4Kv135zUlygH6x2K -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:13 2024 by rpki-client on console-fra.rpki-client.org