$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: ZOA9+Ulv5qY2Kk4Td0Pr6YMGpck7zmA+8qtfv2eBplU= Subject key identifier: B0:F9:6B:E5:3F:58:EE:CB:09:94:08:99:09:02:7D:95:C8:FA:6F:C3 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 23 Signing time: Thu 19 Sep 2024 06:05:57 +0000 Manifest this update: Thu 19 Sep 2024 06:05:57 +0000 Manifest next update: Thu 26 Sep 2024 06:05:57 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: 2tBDmsRbv73bBf0v+sPlVj/Vg/PDaUycQFrggHt4yFY=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Sep 19 06:05:57 2024 GMT Not After : Sep 26 06:05:57 2024 GMT Subject: CN=66ebbf45-170c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:8f:c4:ca:c1:e3:3f:06:54:01:8d:3c:39: bd:45:09:40:d4:28:57:e7:90:65:10:c3:85:b3:a0: e9:d5:c5:98:4d:bc:ed:25:4a:d4:05:14:c6:1b:1d: 5f:93:31:ac:a5:00:43:88:22:83:9f:02:9a:e8:9a: ac:2a:a0:44:64:22:38:9a:c0:8a:0f:06:37:b3:79: dc:9c:16:64:76:bd:3a:1a:ef:99:c1:45:ee:5d:a5: 43:53:ee:bc:06:bc:bb:ca:d8:c5:7d:56:af:39:ac: 42:c4:2e:16:24:f9:6b:0b:21:3e:99:46:30:a5:eb: ec:a3:76:06:cb:2f:3d:0b:e6:f5:5b:7f:97:4e:96: de:5a:bb:b5:d4:38:03:95:83:d3:d9:f0:c1:49:0a: 0f:ff:45:45:30:45:6b:88:52:ae:86:03:f5:b8:8e: 2b:c3:76:10:61:c3:26:b1:9b:a9:6c:43:7e:45:90: 05:18:4f:b6:66:db:e2:32:38:f9:b2:ad:9a:2a:1d: c2:e7:e1:eb:93:1c:d9:36:9d:96:ca:b3:12:76:3c: 27:f8:fd:ab:c1:f7:76:41:49:cc:cd:b3:4f:de:0a: a0:ba:d4:9f:4f:8b:8d:56:01:aa:d3:73:85:7d:b8: 3d:2d:e2:6a:45:4a:33:aa:80:c6:82:b5:fa:e4:56: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:6B:E5:3F:58:EE:CB:09:94:08:99:09:02:7D:95:C8:FA:6F:C3 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8e:d5:87:b9:fe:06:50:29:7a:77:24:89:b4:d1:63:07:4e: cd:4f:09:17:db:f7:65:8a:1c:51:1d:47:9f:25:df:5d:2b:8e: c2:08:24:a9:7b:59:1b:58:61:4f:d8:5e:83:b8:df:54:30:87: 5a:5b:f3:dd:66:3e:cb:3b:9a:53:0b:b8:db:98:c9:f4:67:f8: d5:52:9b:6c:d8:e2:73:7e:6f:51:42:fc:e9:8c:47:ed:65:fa: bd:18:a9:42:0d:07:c2:f3:da:02:3d:e8:49:ac:ee:03:98:f4: df:48:05:02:81:cd:88:40:ea:b3:c8:90:2c:b9:c4:57:5d:bb: 1d:e4:1c:22:e7:36:b0:d5:5b:42:59:48:b5:1f:12:3c:ea:30: 42:6a:4c:38:d5:3c:7d:32:ed:45:ec:e2:c7:82:65:10:05:5e: 6d:d0:52:9b:68:79:63:40:63:32:b4:b9:65:4e:61:78:9a:a3: f0:02:a3:d0:90:98:c9:73:ca:0e:7e:9b:b8:42:9a:35:25:a1: 78:86:9b:b6:0a:fd:da:fc:a9:01:43:73:e3:cc:5e:71:bd:49: 2d:1c:79:5a:0f:e4:38:7b:ee:0c:24:d6:f0:89:b4:6e:ee:7f: 83:02:fe:36:14:fb:64:a8:db:9b:3e:63:c4:65:bb:ed:e3:4b: ad:f4:e3:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkRBOTExMC8GA1UEBRMoMjQ5MjBDNURGOTg5RkNDRDk5MEIwOEE4RjA0NzlFQTRB RkIzNjE5ODAeFw0yNDA5MTkwNjA1NTdaFw0yNDA5MjYwNjA1NTdaMBgxFjAUBgNV BAMTDTY2ZWJiZjQ1LTE3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDILI/EysHjPwZUAY08Ob1FCUDUKFfnkGUQw4WzoOnVxZhNvO0lStQFFMYbHV+T MaylAEOIIoOfApromqwqoERkIjiawIoPBjezedycFmR2vToa75nBRe5dpUNT7rwG vLvK2MV9Vq85rELELhYk+WsLIT6ZRjCl6+yjdgbLLz0L5vVbf5dOlt5au7XUOAOV g9PZ8MFJCg//RUUwRWuIUq6GA/W4jivDdhBhwyaxm6lsQ35FkAUYT7Zm2+IyOPmy rZoqHcLn4euTHNk2nZbKsxJ2PCf4/avB93ZBSczNs0/eCqC61J9Pi41WAarTc4V9 uD0t4mpFSjOqgMaCtfrkVmz3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsPlr5T9Y 7ssJlAiZCQJ9lcj6b8MwHwYDVR0jBBgwFoAUJJIMXfmJ/M2ZCwio8EeepK+zYZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCREE5LzJFMENCNTVFNDRC RDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstella Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSkpJTVhmbUpfTTJaQ3dpbzhFZWVwSy16WVpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC REE5LzJFMENCNTVFNDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00y WkN3aW84RWVlcEstellaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHKO1Ye5/gZQKXp3JIm00WMHTs1PCRfb92WKHFEdR58l310rjsIIJKl7 WRtYYU/YXoO431Qwh1pb891mPss7mlMLuNuYyfRn+NVSm2zY4nN+b1FC/OmMR+1l +r0YqUINB8Lz2gI96Ems7gOY9N9IBQKBzYhA6rPIkCy5xFddux3kHCLnNrDVW0JZ SLUfEjzqMEJqTDjVPH0y7UXs4seCZRAFXm3QUptoeWNAYzK0uWVOYXiao/ACo9CQ mMlzyg5+m7hCmjUloXiGm7YK/dr8qQFDc+PMXnG9SS0ceVoP5Dh77gwk1vCJtG7u f4MC/jYU+2So25s+Y8Rlu+3jS63041A= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:43 2024 by rpki-client on console-fra.rpki-client.org