$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: ccQFMkfB1y3L5dKs6D7vIn90C4qBVlbt9ySukOm+8Kg= Subject key identifier: 53:79:68:D3:FD:6D:02:30:60:D9:DC:31:EC:0B:73:78:7D:FA:41:46 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 0461 Signing time: Fri 22 Nov 2024 23:41:59 +0000 Manifest this update: Fri 22 Nov 2024 23:41:59 +0000 Manifest next update: Fri 29 Nov 2024 23:41:59 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: 32TxOPg625E9vrbRbALClboebXl0mFmyP9j1A/Ja6DM=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: m/3ymxdJG8CXZbfb70uX2NUY/PGPgWmUyTPz+BVxJ1w=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: l5THryZWDs9PaYkc4EAibFlrwJ85CdhXihjnSzgLwkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: Nov 22 23:41:59 2024 GMT Not After : Nov 29 23:41:59 2024 GMT Subject: CN=674116c7-9780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:57:b4:d3:04:e3:2d:0c:42:72:a5:80:1a: c8:9d:cf:41:ee:7b:53:24:61:03:2f:46:fc:28:4d: 31:69:2b:08:c3:39:da:ef:d2:02:7d:32:7e:94:fc: 8f:50:ff:55:e0:77:2f:7f:f8:46:65:d4:5c:e2:3a: fb:69:75:5e:45:73:a5:bf:ee:a7:3d:eb:c5:da:e7: 26:ba:da:03:8f:0d:ab:20:89:f2:8e:0d:ca:0a:bc: 7d:56:0e:1c:d0:eb:db:83:c5:b3:34:db:15:af:d0: 88:e5:c3:37:1f:eb:2b:3b:3b:79:03:86:13:cc:f2: 96:17:d5:37:0e:a8:b7:c2:26:77:88:46:fd:3e:74: e3:66:0d:74:19:83:93:a0:b4:48:03:c2:7d:de:18: 76:4d:b7:92:8c:4f:d9:19:a7:9a:2b:84:f8:e3:57: d5:da:73:40:a3:67:4f:dd:57:d3:38:05:aa:db:3d: 6e:52:b0:4b:e1:ee:85:08:33:65:65:a9:03:d8:ac: 90:95:55:99:1f:9d:55:ee:b2:6b:9a:6b:19:9d:de: fa:33:9b:97:3d:fc:b0:a0:56:6b:a6:7b:29:6f:f9: 7a:75:49:65:be:2b:38:49:5d:42:7f:cb:c6:66:9d: ec:73:36:82:78:ee:e1:60:52:a1:22:59:e0:d6:55: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:79:68:D3:FD:6D:02:30:60:D9:DC:31:EC:0B:73:78:7D:FA:41:46 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bc:d4:13:b5:38:10:95:9d:4b:35:a7:24:ac:e0:d0:4b:fd: df:0f:45:78:ef:68:81:c7:90:50:a3:1d:6f:30:56:3a:30:b5: ba:91:d4:18:1b:02:10:2b:8d:5c:35:77:41:42:d7:cc:b1:ee: da:88:2c:08:67:29:94:d6:56:97:ba:93:f1:4a:03:4a:1a:57: 1f:00:73:49:29:09:44:72:0c:6c:75:e5:64:b5:2d:9a:40:02: f3:52:e2:71:88:14:10:01:53:4a:bd:fb:89:9a:a8:b0:7d:80: 65:06:5a:9e:61:75:a6:38:d3:9f:76:10:e4:dc:3a:94:bd:2a: fc:6c:19:6d:1a:3f:1d:07:28:4b:1f:9f:0d:6e:43:59:46:d1: 36:d0:f0:73:d9:3a:c1:0b:c3:05:c0:24:76:e0:e5:c3:b9:fc: 32:8d:aa:ed:71:27:db:0f:35:c6:27:06:ac:8e:b7:c2:e8:bd: 18:ab:de:32:74:db:e2:04:d1:90:14:8a:c2:ff:ab:9c:86:52: 56:8d:a6:0a:7b:11:7b:c3:dc:80:20:4c:44:c9:96:02:66:25: 56:74:f5:99:dd:1c:cc:65:ff:6a:db:46:d8:99:1d:60:5e:c4: f9:83:0d:6c:0a:c7:6b:0b:3b:c2:43:f7:73:c3:bb:30:a0:f5: 3a:04:ac:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjQxMTIyMjM0MTU5WhcNMjQxMTI5MjM0MTU5WjAYMRYwFAYD VQQDEw02NzQxMTZjNy05NzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SpXtNME4y0MQnKlgBrInc9B7ntTJGEDL0b8KE0xaSsIwzna79ICfTJ+lPyP UP9V4Hcvf/hGZdRc4jr7aXVeRXOlv+6nPevF2ucmutoDjw2rIInyjg3KCrx9Vg4c 0Ovbg8WzNNsVr9CI5cM3H+srOzt5A4YTzPKWF9U3Dqi3wiZ3iEb9PnTjZg10GYOT oLRIA8J93hh2TbeSjE/ZGaeaK4T441fV2nNAo2dP3VfTOAWq2z1uUrBL4e6FCDNl ZakD2KyQlVWZH51V7rJrmmsZnd76M5uXPfywoFZrpnspb/l6dUllvis4SV1Cf8vG Zp3sczaCeO7hYFKhIlng1lXk4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN5aNP9 bQIwYNncMewLc3h9+kFGMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvNQTtTgQlZ1LNackrODQS/3fD0V472iBx5BQox1vMFY6MLW6kdQY GwIQK41cNXdBQtfMse7aiCwIZymU1laXupPxSgNKGlcfAHNJKQlEcgxsdeVktS2a QALzUuJxiBQQAVNKvfuJmqiwfYBlBlqeYXWmONOfdhDk3DqUvSr8bBltGj8dByhL H58NbkNZRtE20PBz2TrBC8MFwCR24OXDufwyjartcSfbDzXGJwasjrfC6L0Yq94y dNviBNGQFIrC/6uchlJWjaYKexF7w9yAIExEyZYCZiVWdPWZ3RzMZf9q20bYmR1g XsT5gw1sCsdrCzvCQ/dzw7swoPU6BKzT -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org