$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft File: CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft (raw, json) Hash identifier: Ze8AuMZzkx1UcM98oB/nsd8fGan/8459w7iwNLFuPYE= Subject key identifier: C2:5E:C5:37:37:42:20:AD:D3:C2:B1:46:77:45:E8:F1:6B:13:4A:29 Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft Manifest number: 0412 Signing time: Fri 22 Nov 2024 23:58:21 +0000 Manifest this update: Fri 22 Nov 2024 23:58:21 +0000 Manifest next update: Fri 29 Nov 2024 23:58:21 +0000 Files and hashes: 1: CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl (hash: cccT6Q7uJA1xg495ha2RcgDh+GYo6pHA/8qYXQNglTE=) 2: 53D9F48C483911EC8AA7367DC4F9AE02.roa (hash: qSr6lj95A/mraI1SE7jPaKqVk8caHAftnBqBkJ269G4=) 3: 4CD16470A0D011EF832D061DC4F9AE02.roa (hash: AzTUGoVqad9XSia2Sk+nc3kQhk8MP6WcjRqo566173Q=) 4: 9D3B1594253C11ED9D3E1A23C4F9AE02.roa (hash: Y/YWXQNmdq/MuVZ9sNVXUauhk21JmUnbjwiCOkLsmPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED Validity Not Before: Nov 22 23:58:21 2024 GMT Not After : Nov 29 23:58:21 2024 GMT Subject: CN=67411a9d-cfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:32:68:06:6c:ce:e4:85:c0:81:ac:38:0b: e5:b8:ce:07:06:06:77:c8:9e:04:30:8a:c4:a6:d2: 75:d7:f3:bc:b9:98:25:aa:4c:31:0e:67:9b:01:5e: 35:51:6b:35:55:a2:48:e6:16:45:20:ac:df:02:99: 3c:17:91:69:0f:5a:16:b7:43:e3:39:c9:cd:66:8e: df:4c:75:07:29:d3:8a:9c:01:5a:39:28:50:91:b6: f8:cf:7d:f6:7a:0e:e5:cf:8d:f0:f1:3d:47:97:8f: c2:5c:17:2c:ad:f0:a5:6f:33:b8:29:53:68:7f:14: 1a:fe:7f:ac:10:bc:3c:67:03:2e:3c:07:51:cc:75: 4c:7a:ae:29:3f:9c:a3:30:d5:fb:a6:65:a4:6b:12: a8:d6:a8:46:73:ed:c9:7b:28:eb:10:b6:57:0c:f3: 6f:08:51:18:e7:22:a8:69:e7:7a:90:b6:bc:b4:25: a4:59:fc:d8:b6:44:62:19:23:93:23:ae:ab:d1:22: 49:66:ef:9c:54:37:22:a3:1e:18:73:1e:25:86:cf: ef:ce:98:84:90:04:42:bf:0f:b8:6a:6b:87:df:62: 4d:0d:7e:37:05:07:4a:e2:8e:17:58:d5:61:4d:2c: 93:d6:03:67:b2:fd:45:3a:27:2f:00:b1:a0:ed:12: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:C5:37:37:42:20:AD:D3:C2:B1:46:77:45:E8:F1:6B:13:4A:29 X509v3 Authority Key Identifier: keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:82:72:81:14:a3:d5:32:9d:91:bd:a7:f9:0d:f8:a0:ad: 76:90:ff:5d:b7:61:61:e9:27:80:b0:d1:3d:24:e6:f0:08:9e: 10:81:98:d0:64:43:f8:a2:ec:56:fe:95:75:12:51:fa:a4:3a: 81:eb:ff:9e:f9:e8:26:b6:6a:59:ea:3e:ab:7a:c3:6c:64:b5: ae:dc:2a:2a:55:76:90:90:e7:35:07:e8:b9:41:e7:36:c8:01: 97:df:01:ba:85:14:b2:14:cb:7d:6c:d3:12:1d:4e:0e:c9:41: d3:1b:2e:1d:4e:ed:52:ae:12:53:87:11:54:71:fa:a2:62:ef: 9f:64:e5:cf:13:d5:12:b7:97:38:de:5b:ed:4d:bb:74:fe:b7: d5:ce:e2:56:72:3d:83:c3:76:6b:0b:15:9a:15:e8:a6:6b:71: 91:39:41:8a:0c:e7:98:b0:69:36:73:07:cb:58:34:32:d8:d3: 74:4f:a8:b1:a7:7b:aa:5e:95:e7:f5:62:a8:5f:7c:1c:b0:65: fb:73:67:d8:63:36:46:bf:7f:2b:e9:5c:86:e3:48:11:d9:72: 6f:b0:31:29:3c:01:8d:23:fb:40:c4:20:c7:ed:1e:e9:71:19: ae:32:01:14:f6:ae:6b:b7:4a:48:3d:e3:e3:e2:8d:66:c2:6b: 19:06:43:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2OEYxMTAvBgNVBAUTKDA5QTdEMjI3RUUzNjIyMkVEOUYzQjk0MDhEOThFQ0Y5 MERFNkFERUQwHhcNMjQxMTIyMjM1ODIxWhcNMjQxMTI5MjM1ODIxWjAYMRYwFAYD VQQDEw02NzQxMWE5ZC1jZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEgyaAZszuSFwIGsOAvluM4HBgZ3yJ4EMIrEptJ11/O8uZglqkwxDmebAV41 UWs1VaJI5hZFIKzfApk8F5FpD1oWt0PjOcnNZo7fTHUHKdOKnAFaOShQkbb4z332 eg7lz43w8T1Hl4/CXBcsrfClbzO4KVNofxQa/n+sELw8ZwMuPAdRzHVMeq4pP5yj MNX7pmWkaxKo1qhGc+3JeyjrELZXDPNvCFEY5yKoaed6kLa8tCWkWfzYtkRiGSOT I66r0SJJZu+cVDciox4Ycx4lhs/vzpiEkARCvw+4amuH32JNDX43BQdK4o4XWNVh TSyT1gNnsv1FOicvALGg7RLL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJexTc3 QiCt08KxRndF6PFrE0opMB8GA1UdIwQYMBaAFAmn0ifuNiIu2fO5QI2Y7PkN5q3t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTY4Ri85QkNEQTIyODQ4 MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00MklpN1o4N2xBalpqcy1RM21y ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhZlNKLTQySWk3Wjg3bEFqWmpzLVEzbXJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTY4Ri85QkNEQTIyODQ4MzYxMUVDQjQyMDI5NTdDNEY5QUUwMi9DYWZTSi00Mklp N1o4N2xBalpqcy1RM21yZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAUYJygRSj1TKdkb2n+Q34oK12kP9dt2Fh6SeAsNE9JObwCJ4QgZjQ ZEP4ouxW/pV1ElH6pDqB6/+e+egmtmpZ6j6resNsZLWu3CoqVXaQkOc1B+i5Qec2 yAGX3wG6hRSyFMt9bNMSHU4OyUHTGy4dTu1SrhJThxFUcfqiYu+fZOXPE9USt5c4 3lvtTbt0/rfVzuJWcj2Dw3ZrCxWaFeima3GROUGKDOeYsGk2cwfLWDQy2NN0T6ix p3uqXpXn9WKoX3wcsGX7c2fYYzZGv38r6VyG40gR2XJvsDEpPAGNI/tAxCDH7R7p cRmuMgEU9q5rt0pIPePj4o1mwmsZBkOz -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org