$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft File: JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json) Hash identifier: n42nkAvxiZGmgVCyi6Dl7Bz2JPPLFlIuKAekFYH7li4= Subject key identifier: 4D:91:71:22:10:B4:90:B4:6A:11:62:AC:C4:36:F6:9F:A5:45:70:8C Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft Manifest number: 0C38 Signing time: Fri 22 Nov 2024 18:11:23 +0000 Manifest this update: Fri 22 Nov 2024 18:11:22 +0000 Manifest next update: Fri 29 Nov 2024 18:11:22 +0000 Files and hashes: 1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: m9gJCJ9+HNk5RRl2kn8B54PaeCa9xVNOwK7rv81mGPQ=) 2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: naIqp1qIgirHYTXhnEIrxV9EWzLYh1BLi6TO8qJtCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Validity Not Before: Nov 22 18:11:22 2024 GMT Not After : Nov 29 18:11:22 2024 GMT Subject: CN=6740c94b-2bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b5:1d:88:4f:a0:95:6b:cb:36:96:c4:de:a9: 40:45:36:85:7a:9c:36:71:4a:fb:43:2f:b1:88:b3: 7c:2d:3a:09:10:f1:f0:b3:fb:21:21:f4:fe:43:f9: 03:8a:de:54:1e:d5:ce:66:ae:2f:2b:2f:51:7c:1f: 53:19:ad:1c:4f:cf:f8:f8:92:dc:82:e2:d5:1d:6d: ac:14:e7:4f:9b:92:a4:b7:0a:8c:00:c1:29:30:62: 25:16:c5:bf:d5:2e:19:b3:4f:2e:16:19:2e:d8:af: f5:0d:28:c3:40:64:95:9a:89:5d:00:e8:bc:f6:0d: da:f8:a6:78:ce:35:bb:0c:bf:4f:6c:c8:17:9a:f5: a2:3f:86:31:71:03:47:69:b5:93:2f:c8:d8:4c:89: 04:16:46:fd:ec:18:a7:fd:8d:27:c5:9e:6a:0c:60: cb:bb:33:5f:a8:33:af:ae:15:44:1c:36:75:63:d9: 8b:33:56:29:18:af:72:b0:50:20:74:e2:29:df:68: 7e:d8:9f:ba:41:9b:22:5a:56:4e:5e:e1:c5:06:84: 79:9f:0b:c7:71:23:76:9e:62:92:4b:ea:5d:db:da: 84:44:76:01:d8:dc:38:67:66:20:dd:c9:4d:d8:35: ea:a4:3e:5a:b9:2e:16:d1:fb:f9:eb:d9:9e:a9:62: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:91:71:22:10:B4:90:B4:6A:11:62:AC:C4:36:F6:9F:A5:45:70:8C X509v3 Authority Key Identifier: keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:db:b2:bb:8c:6c:32:b7:6a:49:cd:4f:44:9a:c8:47:11: 49:66:65:fd:6f:7d:14:01:02:87:0b:3b:60:d2:07:5f:bb:a6: a0:89:c5:93:1f:2d:d9:56:d5:f8:ea:c4:c2:6e:4d:2a:84:f7: bb:82:4c:d5:fb:40:ff:73:80:e7:4d:52:68:3c:2f:62:a7:14: 0e:45:8d:72:7e:9a:90:08:26:c4:54:ce:92:83:78:d1:eb:51: 7f:59:01:bc:51:3d:30:60:b8:83:43:6f:31:dd:ee:94:ac:cf: 77:d8:f9:87:dd:24:a5:b8:ad:d4:31:d4:5c:f6:93:a7:f3:4f: f1:10:13:df:a5:d0:17:44:4f:73:6d:ed:c2:30:d1:66:8e:f5: 2e:f4:ac:60:c3:a6:1e:1d:59:77:a7:94:24:c4:e9:f8:b6:11: e1:49:7d:1f:d4:02:1b:2b:e7:0b:ee:12:66:f0:fc:d0:c5:90: 94:68:e9:ca:fe:23:83:68:fb:ae:50:79:bf:a8:4f:18:9d:1a: 72:fb:5a:4c:34:7d:d8:a3:b3:69:52:f8:24:13:54:aa:3a:fc: 22:38:b9:47:e4:b6:d6:cc:54:ea:09:9b:ee:cc:78:fd:6f:83: 4d:5c:62:bf:e0:6d:1a:e9:9d:ed:d7:b5:2a:f7:c7:d7:fd:5d: da:ae:5f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD RjQxN0M5M0YwHhcNMjQxMTIyMTgxMTIyWhcNMjQxMTI5MTgxMTIyWjAYMRYwFAYD VQQDEw02NzQwYzk0Yi0yYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rUdiE+glWvLNpbE3qlARTaFepw2cUr7Qy+xiLN8LToJEPHws/shIfT+Q/kD it5UHtXOZq4vKy9RfB9TGa0cT8/4+JLcguLVHW2sFOdPm5KktwqMAMEpMGIlFsW/ 1S4Zs08uFhku2K/1DSjDQGSVmoldAOi89g3a+KZ4zjW7DL9PbMgXmvWiP4YxcQNH abWTL8jYTIkEFkb97Bin/Y0nxZ5qDGDLuzNfqDOvrhVEHDZ1Y9mLM1YpGK9ysFAg dOIp32h+2J+6QZsiWlZOXuHFBoR5nwvHcSN2nmKSS+pd29qERHYB2Nw4Z2Yg3clN 2DXqpD5auS4W0fv569meqWJIJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2RcSIQ tJC0ahFirMQ29p+lRXCMMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/3duyu4xsMrdqSc1PRJrIRxFJZmX9b30UAQKHCztg0gdfu6agicWT Hy3ZVtX46sTCbk0qhPe7gkzV+0D/c4DnTVJoPC9ipxQORY1yfpqQCCbEVM6Sg3jR 61F/WQG8UT0wYLiDQ28x3e6UrM932PmH3SSluK3UMdRc9pOn80/xEBPfpdAXRE9z be3CMNFmjvUu9Kxgw6YeHVl3p5QkxOn4thHhSX0f1AIbK+cL7hJm8PzQxZCUaOnK /iODaPuuUHm/qE8YnRpy+1pMNH3Yo7NpUvgkE1SqOvwiOLlH5LbWzFTqCZvuzHj9 b4NNXGK/4G0a6Z3t17Uq98fX/V3arl93 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org