$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: IxmUqy486XLceHozr5bvFQgivNXY9BU/24zDk56aKGw= Subject key identifier: 57:85:8B:96:80:A5:87:9D:56:FB:DC:D5:B8:74:C1:77:85:3F:B8:5A Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0BFB Signing time: Fri 22 Nov 2024 18:18:36 +0000 Manifest this update: Fri 22 Nov 2024 18:18:36 +0000 Manifest next update: Fri 29 Nov 2024 18:18:35 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: mFXWkPXooxxmEIR7vb+p5bgC/g9JyUSOzT+vCwr/334=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: heoR7cbCAdRuieyY3U1k5gd6HHX/KbWqrL6G/wYFWbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Nov 22 18:18:36 2024 GMT Not After : Nov 29 18:18:35 2024 GMT Subject: CN=6740cafc-3242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:24:bf:02:41:a9:76:7c:80:fc:9b:fc:e5: 35:0c:be:24:15:63:f6:1b:3a:d1:5a:08:ed:83:16: 77:07:93:dc:25:d2:5e:46:33:d3:84:79:b9:7f:c9: c3:86:03:9e:5a:3c:1e:21:ec:8e:2d:52:96:e5:2f: dd:81:b0:52:ef:ff:ae:8f:e3:cd:23:1e:65:82:b8: 26:7e:09:9c:c9:22:5d:1f:ef:02:92:df:04:a4:55: fa:24:07:74:e3:f6:b5:d2:40:26:f8:cf:d9:26:7a: b9:4f:08:ef:c4:d9:6d:79:2d:2f:30:99:03:06:09: fd:82:a3:12:28:09:a8:97:67:d4:2f:b2:11:5f:68: cd:8d:c5:4c:f2:95:f6:af:42:3f:f8:78:ea:32:40: 76:8a:cf:4b:85:56:0f:87:2c:7a:5f:ab:06:f0:9c: 60:d0:85:d6:3e:01:9b:a6:45:db:0e:d5:92:a4:02: 7a:8a:12:3f:71:b6:88:ad:98:a9:b7:5a:4f:16:9e: 72:10:50:32:3f:b6:05:06:43:e3:ce:f7:64:f0:40: 49:e6:83:16:11:d3:92:30:a7:75:02:a1:d8:de:f4: 04:aa:9b:69:62:12:1e:73:14:39:4a:82:aa:cf:27: 4a:42:51:86:43:3a:f4:b6:f4:56:77:70:87:58:77: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:8B:96:80:A5:87:9D:56:FB:DC:D5:B8:74:C1:77:85:3F:B8:5A X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:33:76:cb:0d:a8:0c:61:4a:a4:f8:c1:fe:7f:1c:3f:e3:0e: 7d:a8:a9:1b:9b:a9:31:8f:a5:39:bf:09:c2:cc:fd:f1:e7:8d: 5f:6c:de:f3:a5:e9:88:42:28:37:94:89:12:40:af:9e:1b:f0: ee:fc:88:6e:a4:a6:29:7e:13:40:45:35:d9:19:27:7f:6f:a6: 12:f3:db:39:16:24:f4:95:f4:27:de:87:df:f7:ba:79:c1:70: 40:a0:17:7d:9f:35:36:30:4e:d6:a4:0b:f7:f7:66:7b:35:fa: b6:90:47:bf:d1:9d:8c:d1:55:32:80:8b:a2:e1:c6:d7:95:b9: 8d:2c:74:42:97:c2:19:d4:cc:8f:0d:3e:72:d5:1f:92:65:e7: 9d:c1:81:5c:70:b9:99:be:31:d0:0c:ef:2f:5a:13:d0:a8:9e: 5b:e2:31:c2:48:3d:0d:54:d8:92:98:ed:d5:be:d3:90:12:6d: 82:3a:a5:21:ec:98:82:83:9b:e5:af:fc:56:a5:ad:b2:b8:79: 5d:c1:24:3e:e6:42:95:c0:58:0a:21:2c:f4:d7:b4:93:26:18: b0:3b:72:71:db:12:a4:41:2c:84:b8:20:94:1b:70:19:59:fa: 46:a0:b5:a4:01:7f:98:4f:34:0c:0f:7c:12:86:44:fd:b3:66: 95:df:a1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjQxMTIyMTgxODM2WhcNMjQxMTI5MTgxODM1WjAYMRYwFAYD VQQDEw02NzQwY2FmYy0zMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiEkvwJBqXZ8gPyb/OU1DL4kFWP2GzrRWgjtgxZ3B5PcJdJeRjPThHm5f8nD hgOeWjweIeyOLVKW5S/dgbBS7/+uj+PNIx5lgrgmfgmcySJdH+8Ckt8EpFX6JAd0 4/a10kAm+M/ZJnq5TwjvxNlteS0vMJkDBgn9gqMSKAmol2fUL7IRX2jNjcVM8pX2 r0I/+HjqMkB2is9LhVYPhyx6X6sG8Jxg0IXWPgGbpkXbDtWSpAJ6ihI/cbaIrZip t1pPFp5yEFAyP7YFBkPjzvdk8EBJ5oMWEdOSMKd1AqHY3vQEqptpYhIecxQ5SoKq zydKQlGGQzr0tvRWd3CHWHeq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeFi5aA pYedVvvc1bh0wXeFP7haMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaM3bLDagMYUqk+MH+fxw/4w59qKkbm6kxj6U5vwnCzP3x541fbN7z pemIQig3lIkSQK+eG/Du/IhupKYpfhNARTXZGSd/b6YS89s5FiT0lfQn3off97p5 wXBAoBd9nzU2ME7WpAv392Z7Nfq2kEe/0Z2M0VUygIui4cbXlbmNLHRCl8IZ1MyP DT5y1R+SZeedwYFccLmZvjHQDO8vWhPQqJ5b4jHCSD0NVNiSmO3VvtOQEm2COqUh 7JiCg5vlr/xWpa2yuHldwSQ+5kKVwFgKISz017STJhiwO3Jx2xKkQSyEuCCUG3AZ WfpGoLWkAX+YTzQMD3wShkT9s2aV36EE -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org