$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: tYpr/wc6iFXo3bMIVgnRm9kRENDeEfzdhTc6kYSSNtI= Subject key identifier: BE:4E:BF:BF:8A:9F:D3:E6:7C:81:A7:22:DE:B2:15:E1:00:E0:A9:D7 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 044F Signing time: Wed 20 Nov 2024 23:45:34 +0000 Manifest this update: Wed 20 Nov 2024 23:45:33 +0000 Manifest next update: Wed 27 Nov 2024 23:45:33 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: k1I/V8dVMfRGbA1yw83GnilmTpfaO4a/Au8f9tRDS1U=) 2: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: M28GSpsob0GcZZ2QTl/qwtN101CbqZ2q8yG6EV5VT+A=) 3: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: FoYRsCuS7R3h5SKIzMxx0ziFPmPriW5U+D3CqE4wpEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Nov 20 23:45:33 2024 GMT Not After : Nov 27 23:45:33 2024 GMT Subject: CN=673e749e-fce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:83:23:fe:0a:56:5c:0d:5c:c9:1d:ca:9f: 50:ce:7d:5d:e0:6a:5e:e2:e4:72:33:74:2e:f5:99: 65:a4:46:be:19:dd:d7:f4:84:f1:39:cb:12:ec:8d: 7f:37:fd:77:42:54:d9:3b:40:78:9e:22:32:07:7a: de:7e:4a:d0:50:d6:b7:b3:b6:18:0b:b2:f2:a2:3e: 73:03:d0:5f:57:96:99:11:f3:be:49:75:94:b2:43: 04:e2:14:6f:7c:07:05:de:e7:29:fb:b4:ed:84:6d: ce:3b:bc:97:b1:3d:25:74:01:38:51:e7:0d:c3:e3: 3e:1a:60:5e:31:49:71:d1:cd:dd:3b:e0:b6:4f:5a: 77:e0:ef:ed:b6:f4:c3:1d:cf:4a:b4:3c:99:27:ed: a0:cd:da:0f:a9:fb:d4:42:37:c3:e3:76:ed:1e:58: 03:45:25:f1:7f:de:7c:1a:56:c8:a1:28:ac:49:ba: 29:eb:7b:51:ed:8d:74:0a:c2:1a:56:17:dd:65:88: 7c:62:57:d6:55:09:58:2c:8f:3e:d8:2c:9d:11:11: d2:e3:bc:1b:81:26:27:38:9f:90:cb:8c:eb:a1:fb: 72:c7:b4:24:9b:dd:dd:8d:b9:53:86:21:e8:c8:bc: bd:d2:f2:24:ae:87:e3:db:f3:67:8f:06:95:42:ea: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:BF:BF:8A:9F:D3:E6:7C:81:A7:22:DE:B2:15:E1:00:E0:A9:D7 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6b:af:bf:06:99:41:f4:b9:8e:47:e9:8b:3d:86:cf:27:d8: 0e:38:e0:3a:eb:52:0a:51:91:f3:af:5e:91:c0:2a:ec:cf:be: ca:ef:21:ad:10:01:70:24:94:3a:da:33:38:7b:62:92:bf:be: 2d:70:ec:5f:62:5b:59:22:7e:83:f1:fb:23:37:71:98:1d:ff: 26:89:6c:5c:c5:c7:51:0f:4f:11:c6:e7:4a:60:89:14:76:dd: 5c:dc:04:33:ff:de:b3:f3:fa:b5:9a:70:00:e4:3d:91:b1:cd: b9:95:3c:78:e4:9a:b6:2e:ef:18:16:cc:b7:40:48:68:dc:42: 79:99:a6:77:ae:45:ea:c3:62:52:b0:a4:4c:1a:13:29:50:96: 60:f6:3c:f2:6a:ac:c0:60:1c:3a:fe:d7:05:2b:a1:95:c0:71: 58:fc:1a:18:2d:2f:ca:fd:ff:af:e9:e7:59:c5:17:97:c6:cd: 9a:7b:f0:06:54:09:34:ac:d5:b9:9b:fd:18:85:d9:f6:6a:ba: 63:2f:fd:02:e0:bc:36:55:cf:bb:56:6b:2c:47:5e:75:b2:83: d0:0a:c4:5e:50:06:2f:ec:da:81:9e:ab:7e:ce:a3:fd:5b:24: 06:24:d1:7e:0b:45:b2:d5:c8:af:46:3d:3e:91:5d:af:ac:b5: d1:01:63:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjQxMTIwMjM0NTMzWhcNMjQxMTI3MjM0NTMzWjAYMRYwFAYD VQQDEw02NzNlNzQ5ZS1mY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfODI/4KVlwNXMkdyp9Qzn1d4Gpe4uRyM3Qu9ZllpEa+Gd3X9ITxOcsS7I1/ N/13QlTZO0B4niIyB3refkrQUNa3s7YYC7Lyoj5zA9BfV5aZEfO+SXWUskME4hRv fAcF3ucp+7TthG3OO7yXsT0ldAE4UecNw+M+GmBeMUlx0c3dO+C2T1p34O/ttvTD Hc9KtDyZJ+2gzdoPqfvUQjfD43btHlgDRSXxf958GlbIoSisSbop63tR7Y10CsIa VhfdZYh8YlfWVQlYLI8+2CydERHS47wbgSYnOJ+Qy4zroftyx7Qkm93djblThiHo yLy90vIkrofj2/NnjwaVQuqxWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5Ov7+K n9PmfIGnIt6yFeEA4KnXMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZa6+/BplB9LmOR+mLPYbPJ9gOOOA661IKUZHzr16RwCrsz77K7yGt EAFwJJQ62jM4e2KSv74tcOxfYltZIn6D8fsjN3GYHf8miWxcxcdRD08RxudKYIkU dt1c3AQz/96z8/q1mnAA5D2Rsc25lTx45Jq2Lu8YFsy3QEho3EJ5maZ3rkXqw2JS sKRMGhMpUJZg9jzyaqzAYBw6/tcFK6GVwHFY/BoYLS/K/f+v6edZxReXxs2ae/AG VAk0rNW5m/0Yhdn2arpjL/0C4Lw2Vc+7VmssR151soPQCsReUAYv7NqBnqt+zqP9 WyQGJNF+C0Wy1civRj0+kV2vrLXRAWPj -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org