$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: DUru/pHJKRcftaK56BahTkVwMoG2qKFrW0VPTCcQmw8= Subject key identifier: D1:7F:96:4B:14:22:41:1B:55:34:9B:55:D2:AD:8A:06:E9:64:DE:58 Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 0121 Signing time: Thu 21 Nov 2024 03:00:00 +0000 Manifest this update: Thu 21 Nov 2024 03:00:00 +0000 Manifest next update: Thu 28 Nov 2024 03:00:00 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: SggG0k3NcF6DRiHQifqDkdRUET2jYxyq2a0EBzdDF2s=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: m4/XYPyR0t0QTdVUGQuibqisDKdS4FjJbYWDjlXAYpQ=) 3: EC081D70FA4811EDA9C77777C4F9AE02.roa (hash: uOURo9p9h7PukY6N/mlaaUWR4t1hYqlrzWQoyxCS6ME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Nov 21 03:00:00 2024 GMT Not After : Nov 28 03:00:00 2024 GMT Subject: CN=673ea230-0803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:85:b3:8a:62:28:17:1f:e6:b9:c6:ca:89: 4c:f9:c9:9b:a9:fe:4c:f1:a7:ff:26:b0:79:5e:20: a4:22:5d:5c:df:02:22:58:0b:a7:07:ed:3b:d7:f4: f9:46:08:4f:46:10:7a:94:2f:dd:de:b1:20:07:bb: 62:00:c2:15:9c:3c:bb:f6:a1:78:3b:73:9c:1e:36: 23:58:12:27:f3:5c:cd:e1:2b:28:5a:bd:20:34:c7: 41:bd:00:48:77:92:23:8e:45:54:c6:96:e4:fd:13: 93:fc:55:ee:12:17:07:63:db:be:6e:71:ca:b7:b9: 8d:e2:cd:5c:39:85:d9:e4:d6:93:bf:74:5f:61:c4: 6e:78:2b:a8:fc:d9:df:a9:59:dd:27:f9:a9:3b:1b: d6:76:ef:82:50:88:f0:7b:27:0f:0b:6a:e0:57:3d: 23:65:09:1d:9d:9e:be:de:e7:a6:d7:f2:ab:f9:4b: 9e:9c:89:58:cf:0e:98:74:c1:97:b9:e7:89:84:e5: c0:2a:4b:fa:7a:ee:ca:00:a6:5f:3d:97:e5:09:cb: 9f:98:f5:45:5b:d2:8b:0c:95:93:9f:7c:2a:03:30: 06:06:8c:5c:f6:7d:f0:66:5a:6e:bb:f5:73:c0:b5: 8f:65:85:6e:65:a8:9f:7c:43:35:05:3f:c2:55:c2: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7F:96:4B:14:22:41:1B:55:34:9B:55:D2:AD:8A:06:E9:64:DE:58 X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f9:8a:4a:b5:27:44:40:2e:cc:80:af:68:78:84:7e:d4:53: f0:02:09:6e:2b:ec:5b:73:0e:4d:2c:e7:38:30:39:67:96:be: e9:01:04:50:2a:43:26:60:cb:74:38:2b:fa:70:d6:c2:f5:7e: 4f:e0:62:9d:fc:12:03:2a:67:13:92:34:53:16:ae:f8:77:34: 52:5c:ff:db:19:39:03:d5:39:68:66:be:e2:d8:e8:ff:f4:eb: 49:6c:5a:30:a0:4e:e1:32:32:e6:cc:4b:b3:eb:19:c1:fa:80: 67:79:6b:c7:17:8d:af:a2:c2:4c:9d:e1:22:6c:2a:9e:cc:e8: 01:35:d2:2f:98:cd:10:cf:d8:f7:50:2c:f9:47:28:3a:ef:45: 76:ca:59:50:c6:f7:be:10:73:68:d6:0a:f0:51:6b:55:fb:6a: 26:d7:ae:e5:09:84:db:f7:4c:2d:c6:3d:63:89:27:37:6f:58: b2:05:fa:56:ad:7d:a5:fd:9a:b3:da:cc:bf:0d:d3:b0:32:98: ac:34:e1:be:84:e1:0f:46:0d:d4:57:df:2c:d4:4f:52:e1:f2: 92:66:76:73:9b:da:f1:27:04:cb:25:d4:22:95:0a:22:c9:2a: 99:c4:80:9a:b9:54:5e:1b:37:b3:d2:84:46:7c:07:ac:42:d7: 6e:4c:66:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjQxMTIxMDMwMDAwWhcNMjQxMTI4MDMwMDAwWjAYMRYwFAYD VQQDEw02NzNlYTIzMC0wODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqCFs4piKBcf5rnGyolM+cmbqf5M8af/JrB5XiCkIl1c3wIiWAunB+071/T5 RghPRhB6lC/d3rEgB7tiAMIVnDy79qF4O3OcHjYjWBIn81zN4SsoWr0gNMdBvQBI d5IjjkVUxpbk/ROT/FXuEhcHY9u+bnHKt7mN4s1cOYXZ5NaTv3RfYcRueCuo/Nnf qVndJ/mpOxvWdu+CUIjweycPC2rgVz0jZQkdnZ6+3uem1/Kr+UuenIlYzw6YdMGX ueeJhOXAKkv6eu7KAKZfPZflCcufmPVFW9KLDJWTn3wqAzAGBoxc9n3wZlpuu/Vz wLWPZYVuZaiffEM1BT/CVcL0zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF/lksU IkEbVTSbVdKtigbpZN5YMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3+YpKtSdEQC7MgK9oeIR+1FPwAgluK+xbcw5NLOc4MDlnlr7pAQRQ KkMmYMt0OCv6cNbC9X5P4GKd/BIDKmcTkjRTFq74dzRSXP/bGTkD1TloZr7i2Oj/ 9OtJbFowoE7hMjLmzEuz6xnB+oBneWvHF42vosJMneEibCqezOgBNdIvmM0Qz9j3 UCz5Ryg670V2yllQxve+EHNo1grwUWtV+2om167lCYTb90wtxj1jiSc3b1iyBfpW rX2l/Zqz2sy/DdOwMpisNOG+hOEPRg3UV98s1E9S4fKSZnZzm9rxJwTLJdQilQoi ySqZxICauVReGzez0oRGfAesQtduTGY7 -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org