$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: 3EtIMJKOUZ1HuPFjNpuB7s1mNqzDDyyNzw6tAGOBeVw= Subject key identifier: 84:3D:35:B7:21:7C:9B:2D:94:5F:44:76:E0:06:BC:76:1E:50:C9:13 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 01E2 Signing time: Sat 23 Nov 2024 01:40:55 +0000 Manifest this update: Sat 23 Nov 2024 01:40:54 +0000 Manifest next update: Sat 30 Nov 2024 01:40:54 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: d2V76V19YmrQBQ8NAxS30rpH9AfkpQsLSJ1jvxMsbSY=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: b+ElwuF9IlWpzIoG0CUYL1FRlttNp8NqrlKlsKBQkCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Nov 23 01:40:54 2024 GMT Not After : Nov 30 01:40:54 2024 GMT Subject: CN=674132a7-6243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:ab:c8:c6:9b:62:11:a8:d6:3f:5b:33:eb: 72:ba:77:5e:d3:44:d5:98:09:32:50:55:9a:4a:5c: 0e:6e:bd:4a:6f:a9:b7:45:bc:c7:d9:32:9e:2e:4a: 67:f1:35:68:de:d6:db:5a:9c:3f:89:21:76:07:4e: b8:28:db:7d:18:62:18:ed:2f:17:f6:47:d6:f4:1e: b1:6b:28:f5:84:b7:e0:b5:dd:f0:ee:a0:f6:13:1a: d0:1a:64:5c:69:72:e4:89:bb:ac:6a:c9:7b:a1:5a: 41:2b:00:12:f3:92:9c:95:9b:3f:91:14:f0:28:c7: a4:2d:bd:a6:ac:57:d2:84:1e:80:5b:7b:fe:cd:70: 97:9a:e8:5b:9a:1e:d1:ae:71:5b:cd:34:35:e4:50: 0a:e0:66:91:c6:e4:e9:4d:db:2a:dc:0c:29:67:1b: 30:e6:c2:5d:cb:fc:e3:4e:34:85:03:18:2d:98:af: a5:57:92:2b:31:b8:52:8d:77:6c:8e:42:26:74:1a: 42:f0:f8:42:e0:08:9e:12:70:bd:d4:7b:62:93:96: a7:01:01:b2:6c:83:81:3b:16:a3:ef:84:9c:bd:85: a3:d9:5b:23:b0:8f:ad:68:75:83:23:03:fc:f0:26: ba:ae:8f:21:ef:50:f9:63:04:bd:8f:5e:12:ec:22: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3D:35:B7:21:7C:9B:2D:94:5F:44:76:E0:06:BC:76:1E:50:C9:13 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ed:6e:40:46:20:30:52:a9:18:40:9f:31:30:a5:bb:e4:99: 04:76:43:89:51:7c:30:d4:47:c6:1b:7f:e5:05:c7:bb:ab:f9: 0f:0f:2a:b8:73:b9:ad:0a:f1:f1:4b:26:46:99:92:b0:24:6e: ab:bb:3b:7b:b0:e3:d8:84:0d:a6:cc:72:60:c3:57:8e:08:25: a5:c4:a1:c5:a5:6d:7c:07:41:1d:29:c0:c1:32:d4:b8:69:67: a4:30:e3:de:d8:d5:93:c3:dc:c3:22:4c:0f:20:fa:39:02:06: 3a:e5:5d:a0:44:7a:90:d7:39:76:fa:21:1c:59:aa:cd:46:99: 74:2c:b5:63:b6:5d:f6:fd:aa:1a:ea:a1:46:f0:e1:56:5a:1d: 83:7f:db:91:42:b4:66:ef:07:78:20:56:15:c1:40:03:29:aa: 9b:19:9d:cb:6a:34:52:57:ab:ff:b3:a5:13:e7:85:2d:10:df: ac:1e:4d:25:80:38:73:77:d7:85:09:c2:87:f1:12:7a:98:5d: 4b:54:b5:50:b5:95:d5:d8:48:48:85:09:af:e0:9e:55:8c:b7: ce:80:4d:70:78:26:20:65:b2:4f:5d:20:2d:71:35:86:d1:c7: 59:06:87:c2:50:33:72:a0:22:37:7a:b5:64:d1:b3:70:74:6a: 5f:2f:e8:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjQxMTIzMDE0MDU0WhcNMjQxMTMwMDE0MDU0WjAYMRYwFAYD VQQDEw02NzQxMzJhNy02MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv+ryMabYhGo1j9bM+tyunde00TVmAkyUFWaSlwObr1Kb6m3RbzH2TKeLkpn 8TVo3tbbWpw/iSF2B064KNt9GGIY7S8X9kfW9B6xayj1hLfgtd3w7qD2ExrQGmRc aXLkibusasl7oVpBKwAS85KclZs/kRTwKMekLb2mrFfShB6AW3v+zXCXmuhbmh7R rnFbzTQ15FAK4GaRxuTpTdsq3AwpZxsw5sJdy/zjTjSFAxgtmK+lV5IrMbhSjXds jkImdBpC8PhC4AieEnC91Htik5anAQGybIOBOxaj74ScvYWj2VsjsI+taHWDIwP8 8Ca6ro8h71D5YwS9j14S7CJtfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ9Nbch fJstlF9EduAGvHYeUMkTMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC77W5ARiAwUqkYQJ8xMKW75JkEdkOJUXww1EfGG3/lBce7q/kPDyq4 c7mtCvHxSyZGmZKwJG6ruzt7sOPYhA2mzHJgw1eOCCWlxKHFpW18B0EdKcDBMtS4 aWekMOPe2NWTw9zDIkwPIPo5AgY65V2gRHqQ1zl2+iEcWarNRpl0LLVjtl32/aoa 6qFG8OFWWh2Df9uRQrRm7wd4IFYVwUADKaqbGZ3LajRSV6v/s6UT54UtEN+sHk0l gDhzd9eFCcKH8RJ6mF1LVLVQtZXV2EhIhQmv4J5VjLfOgE1weCYgZbJPXSAtcTWG 0cdZBofCUDNyoCI3erVk0bNwdGpfL+ix -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org