$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json) Hash identifier: l+N4m6V6l1Zq2CdXcyDmQStcuIPCb1QNkMZjkAvpAUc= Subject key identifier: C7:34:A6:6B:A8:37:64:71:33:3A:E7:88:E5:4D:42:D2:4A:17:29:70 Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Certificate serial: 0309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft Manifest number: 0304 Signing time: Sat 23 Nov 2024 00:47:53 +0000 Manifest this update: Sat 23 Nov 2024 00:47:52 +0000 Manifest next update: Sat 30 Nov 2024 00:47:52 +0000 Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: ovp/2RLxXbcVVxdip/hTktXZP7man6ZN7S6XNRXn6+o=) 2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Validity Not Before: Nov 23 00:47:52 2024 GMT Not After : Nov 30 00:47:52 2024 GMT Subject: CN=67412638-0b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:d0:f4:47:f7:46:3d:f0:6c:40:66:c8:09: 06:e9:2e:0b:4d:9e:e7:ec:91:79:ed:d4:2d:4e:d2: 6c:10:39:63:38:f7:cd:99:47:f9:9b:b8:20:ba:84: e9:11:bc:2a:8d:7a:f4:43:59:29:1b:00:5c:84:2a: 02:63:80:33:f2:0e:61:15:1a:b2:d2:9a:6a:99:41: 60:c5:7a:0f:b5:1a:de:6e:6c:1b:77:4e:05:bd:ab: 7a:59:69:14:5d:37:de:9f:e2:0a:e8:ca:74:c8:be: 29:12:33:a7:51:c1:9e:06:f0:1f:db:75:c5:57:d8: 9b:0b:e1:ae:fe:8e:84:ea:6b:ce:84:a3:15:a6:d7: 6b:eb:4f:df:ec:78:3b:13:83:ae:d7:48:c5:d7:7e: 2e:28:c2:e4:ea:a6:af:df:56:64:72:50:35:af:1e: 33:47:87:fc:ee:94:65:61:ca:f0:a4:76:b9:94:f5: b2:40:94:85:d4:b4:82:8c:2c:bd:af:75:e0:0d:51: b4:53:56:61:ea:8f:01:a5:e1:14:b3:71:a8:60:30: 04:1d:ff:7d:b5:a9:be:d9:06:9d:a3:bb:d2:05:3d: 77:f5:2b:36:97:74:85:0f:50:66:c3:6a:a8:13:50: b0:4d:7f:74:0d:6d:6c:5f:03:51:5a:ae:45:87:5c: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:34:A6:6B:A8:37:64:71:33:3A:E7:88:E5:4D:42:D2:4A:17:29:70 X509v3 Authority Key Identifier: keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ea:df:28:46:75:d9:b7:a9:3a:46:87:04:47:aa:18:f5:bf: 78:9d:eb:6d:b6:40:05:ce:bc:5a:d5:61:f6:36:ef:6d:2b:eb: 0b:3d:ab:1e:10:a7:f3:86:cd:38:c9:15:14:ad:32:75:10:4e: 8b:37:8d:10:00:5d:9c:28:42:ed:1d:c0:ab:fa:04:e5:1b:09: ff:21:a2:bc:67:05:86:65:be:a0:fb:cc:70:6d:99:ea:29:f8: 4c:e6:30:6d:96:14:21:64:3c:e0:bd:81:93:c8:7c:66:0f:79: 38:92:87:4e:1e:74:5a:5c:e6:3b:fe:0e:40:cd:24:a1:dc:fb: c5:34:81:f4:ae:77:6e:4e:49:45:82:6e:0f:b1:56:eb:47:23: 41:d5:86:fb:de:56:e5:60:9c:40:e4:2d:41:d5:0e:6d:34:d7: c9:f0:a6:ba:05:26:e3:2c:6c:2a:46:5c:d0:a4:5d:39:5f:20: 8d:5f:07:65:30:77:db:d7:db:30:dc:36:07:e7:98:0d:7f:54: f5:e4:59:11:bc:c5:42:25:80:df:99:2f:ac:cc:f0:9d:03:41: 6e:be:52:d3:6a:7b:c3:1d:d1:46:63:ed:a2:10:dd:7f:d5:42: 78:bb:1a:7f:c0:b5:c2:a7:71:19:61:7f:da:79:7f:87:d8:bc: 11:8f:74:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG MDkwNzREM0QwHhcNMjQxMTIzMDA0NzUyWhcNMjQxMTMwMDA0NzUyWjAYMRYwFAYD VQQDEw02NzQxMjYzOC0wYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSbQ9Ef3Rj3wbEBmyAkG6S4LTZ7n7JF57dQtTtJsEDljOPfNmUf5m7gguoTp EbwqjXr0Q1kpGwBchCoCY4Az8g5hFRqy0ppqmUFgxXoPtRrebmwbd04Fvat6WWkU XTfen+IK6Mp0yL4pEjOnUcGeBvAf23XFV9ibC+Gu/o6E6mvOhKMVptdr60/f7Hg7 E4Ou10jF134uKMLk6qav31ZkclA1rx4zR4f87pRlYcrwpHa5lPWyQJSF1LSCjCy9 r3XgDVG0U1Zh6o8BpeEUs3GoYDAEHf99tam+2Qado7vSBT139Ss2l3SFD1Bmw2qo E1CwTX90DW1sXwNRWq5Fh1xD0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc0pmuo N2RxMzrniOVNQtJKFylwMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV6t8oRnXZt6k6RocER6oY9b94netttkAFzrxa1WH2Nu9tK+sLPase EKfzhs04yRUUrTJ1EE6LN40QAF2cKELtHcCr+gTlGwn/IaK8ZwWGZb6g+8xwbZnq KfhM5jBtlhQhZDzgvYGTyHxmD3k4kodOHnRaXOY7/g5AzSSh3PvFNIH0rnduTklF gm4PsVbrRyNB1Yb73lblYJxA5C1B1Q5tNNfJ8Ka6BSbjLGwqRlzQpF05XyCNXwdl MHfb19sw3DYH55gNf1T15FkRvMVCJYDfmS+szPCdA0FuvlLTanvDHdFGY+2iEN1/ 1UJ4uxp/wLXCp3EZYX/aeX+H2LwRj3SW -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:30 2024 by rpki-client on console-fra.rpki-client.org