$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: e/GuV+utfqLEyVL0dmype1Wu9/TwvO/NaWn7qxxRgOY= Subject key identifier: B0:D0:12:E5:C1:BF:6E:88:39:66:E3:49:B4:3E:AE:6F:40:5C:C3:FF Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 179F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 1783 Signing time: Fri 22 Nov 2024 16:36:07 +0000 Manifest this update: Fri 22 Nov 2024 16:36:07 +0000 Manifest next update: Fri 29 Nov 2024 16:36:07 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: X79M7Eg4EdXAzJQ/bU6bncfgmOlevcd14riL4TKhwP8=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: AJVJFbnvPCGmDcQ1w9Ifor0vZahtLKDl6qkkbnsRLEw=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6047 (0x179f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Nov 22 16:36:07 2024 GMT Not After : Nov 29 16:36:07 2024 GMT Subject: CN=6740b2f7-83d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:cd:eb:e8:f8:3b:b8:e4:48:ac:d5:d2:c1: 22:74:13:ad:20:10:f5:3a:e0:5a:6b:95:28:34:c1: a8:bd:26:24:e9:ee:17:76:6a:9a:0d:19:26:a0:bf: b6:4c:ee:0c:5b:ab:d4:e9:fd:47:7b:e8:ba:19:ee: 95:f7:f4:0f:f8:74:5b:ef:52:bd:32:b7:c3:16:27: 8d:ea:71:81:ac:6f:89:aa:c0:21:f8:80:a0:6e:be: 52:87:0b:83:99:46:1e:d9:79:14:2a:64:e8:ce:ac: 06:57:9e:95:eb:c2:49:a2:cc:9b:e1:95:52:4e:89: d8:5f:1b:57:e7:64:31:99:cc:ae:92:f2:9c:57:95: 70:e5:0c:46:38:fa:48:36:af:67:fe:03:e3:6d:78: 28:1f:a7:35:94:6d:27:da:0b:26:48:07:40:4b:fc: 0e:0f:97:b4:b5:e3:fe:5e:72:10:14:bc:b5:fd:7e: 5f:80:87:0c:0e:f7:5f:8c:8e:a1:70:67:36:d9:ff: 7f:23:75:89:17:4f:68:6b:4b:15:14:5c:86:22:c3: aa:e2:36:40:c2:e9:51:98:be:62:18:54:e1:f4:1a: 04:b1:86:56:8d:69:31:01:da:10:a4:9c:72:a2:6c: 1c:1b:da:15:d8:41:38:34:28:38:b7:ac:a9:46:fd: 9c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:12:E5:C1:BF:6E:88:39:66:E3:49:B4:3E:AE:6F:40:5C:C3:FF X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e8:d4:e9:bd:32:6d:58:2f:ff:bf:44:9c:ac:f8:be:a6:b6: ec:61:20:a9:a6:5c:9b:36:ca:bd:6c:79:d4:6c:e8:53:cf:eb: 71:01:3e:d1:49:42:62:68:bf:5a:cd:d2:8c:86:7b:20:64:c3: a4:22:44:3a:2c:4e:be:7d:c0:ab:4a:51:be:97:e8:c4:35:69: b9:cf:f6:42:c5:48:29:af:ff:d7:71:fe:3d:ae:03:c3:fb:ca: 2e:9e:bc:bb:30:97:f0:8a:9a:65:b9:cd:c4:0f:2f:f8:ee:c9: 65:09:5d:77:4a:d4:cb:d3:1c:91:83:35:de:6b:09:5a:f7:53: 31:3f:16:97:4a:6c:b6:c8:57:12:ba:2f:c1:ec:de:70:7e:bf: ab:15:08:8c:67:6f:13:29:cc:77:c8:1b:5c:d2:3e:96:93:a8: 79:5b:ca:db:08:16:71:cb:c3:25:03:75:d0:d0:df:5f:8c:fa: 82:e7:36:5f:91:44:d1:af:d5:94:72:1b:96:76:16:54:a8:19: a0:a2:67:46:04:06:23:a7:fa:43:ad:1f:f6:50:20:be:86:58: 5d:cc:e2:14:26:71:26:38:9a:4c:7e:f5:5d:b7:d3:0d:18:f3: 14:c6:a6:7a:55:80:5c:35:91:65:0b:67:a3:04:d5:64:39:33: dc:41:5e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjQxMTIyMTYzNjA3WhcNMjQxMTI5MTYzNjA3WjAYMRYwFAYD VQQDEw02NzQwYjJmNy04M2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRLN6+j4O7jkSKzV0sEidBOtIBD1OuBaa5UoNMGovSYk6e4XdmqaDRkmoL+2 TO4MW6vU6f1He+i6Ge6V9/QP+HRb71K9MrfDFieN6nGBrG+JqsAh+ICgbr5ShwuD mUYe2XkUKmTozqwGV56V68JJosyb4ZVSTonYXxtX52QxmcyukvKcV5Vw5QxGOPpI Nq9n/gPjbXgoH6c1lG0n2gsmSAdAS/wOD5e0teP+XnIQFLy1/X5fgIcMDvdfjI6h cGc22f9/I3WJF09oa0sVFFyGIsOq4jZAwulRmL5iGFTh9BoEsYZWjWkxAdoQpJxy omwcG9oV2EE4NCg4t6ypRv2cKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDQEuXB v26IOWbjSbQ+rm9AXMP/MB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq6NTpvTJtWC//v0ScrPi+prbsYSCpplybNsq9bHnUbOhTz+txAT7R SUJiaL9azdKMhnsgZMOkIkQ6LE6+fcCrSlG+l+jENWm5z/ZCxUgpr//Xcf49rgPD +8ounry7MJfwippluc3EDy/47sllCV13StTL0xyRgzXeawla91MxPxaXSmy2yFcS ui/B7N5wfr+rFQiMZ28TKcx3yBtc0j6Wk6h5W8rbCBZxy8MlA3XQ0N9fjPqC5zZf kUTRr9WUchuWdhZUqBmgomdGBAYjp/pDrR/2UCC+hlhdzOIUJnEmOJpMfvVdt9MN GPMUxqZ6VYBcNZFlC2ejBNVkOTPcQV5x -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org