$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: IIO71ETpKe1CWW6uiOcsE6NG+Y3AyHdDDWUxajkBt2A= Subject key identifier: 71:E8:E1:A5:B6:B7:50:7C:A0:A8:28:6C:BC:31:0D:30:23:75:39:7D Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 052B Signing time: Fri 22 Nov 2024 23:05:43 +0000 Manifest this update: Fri 22 Nov 2024 23:05:43 +0000 Manifest next update: Fri 29 Nov 2024 23:05:43 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: 1jgaM+zfdzTFQfGN/iOQ9ERuQzKd0aWPq6U5yALJU1M=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: bvi2PqNlW+oMVQ1UwJQ0bSEdv/ndyrJ9LYRWbNa29XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Nov 22 23:05:43 2024 GMT Not After : Nov 29 23:05:43 2024 GMT Subject: CN=67410e47-13f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:c4:55:42:20:53:a9:a2:a9:d1:cd:38:05: 87:53:59:38:55:ad:5e:88:74:7a:67:e6:8b:78:25: a1:71:d3:45:02:7d:ff:3f:dc:49:4c:4b:f5:63:26: b3:23:17:59:08:db:49:5b:75:87:ff:a1:9b:2b:33: e9:ee:cb:30:07:b7:11:35:2d:54:97:e7:5c:ae:58: 5b:89:1f:56:f8:ee:4b:53:bf:5e:72:c4:4f:00:3e: 65:65:c6:1f:0d:1d:68:60:d7:6d:ba:55:e2:ba:dd: 78:aa:6b:ff:4f:11:f3:cc:94:58:6a:60:f8:d5:ff: ad:91:ff:eb:a3:c5:a6:cd:43:22:6c:4e:df:27:f2: 90:08:ed:ce:38:2f:d8:f4:ef:a3:09:62:32:c4:a5: 4c:a3:03:3f:0e:8a:c3:87:a4:f1:b0:c1:0b:fb:e9: 4e:b1:8d:16:31:fd:97:63:b1:90:74:37:c3:3f:94: 7e:53:2b:54:90:2d:64:62:a3:c2:8a:91:97:a8:9f: b3:51:59:48:f4:ac:b6:31:04:3c:31:1c:44:54:d7: cd:c1:e9:d3:50:1a:01:2d:0f:c2:55:15:8f:81:ec: 79:6c:a7:47:4c:13:e7:74:a6:86:5e:8f:c2:33:ed: f3:a4:e7:6d:1b:3e:a5:3a:7f:c9:6b:c9:09:7e:7a: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:E1:A5:B6:B7:50:7C:A0:A8:28:6C:BC:31:0D:30:23:75:39:7D X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:57:0e:8d:c2:a3:3b:b4:02:79:3d:5a:c4:78:34:41:c8:e1: 93:af:50:dd:3b:b9:55:ee:ad:13:9e:f3:9e:3b:72:11:44:ec: d9:d9:6e:af:fe:d9:62:d7:94:36:27:eb:a9:35:d9:81:18:90: 56:b8:d1:41:a6:97:50:a3:9b:32:19:2e:70:be:45:a8:aa:97: c8:7e:58:20:b9:2d:fe:58:e5:d1:82:5d:c3:a0:85:5d:66:b7: f6:a1:26:3c:19:e3:19:b5:99:ff:e7:ec:36:6c:9c:e6:97:76: 36:5f:f5:d0:34:94:70:9a:73:6a:ba:31:51:e0:6e:9d:65:29: eb:b3:6c:61:e4:21:8f:3f:b2:c4:20:f0:53:b8:61:ef:2c:42: ac:d0:23:de:d5:e9:4e:2a:00:4d:87:fa:3a:af:37:9a:64:d0: b8:58:b6:88:d6:0b:cc:f9:2a:5b:67:e1:41:12:3f:60:36:70: 0a:5c:eb:49:5e:8c:77:56:4f:33:d1:c2:9e:4d:b8:c0:39:24: 5b:94:2b:30:aa:63:9d:b6:08:3b:e2:25:aa:e4:11:b7:29:89: f4:03:fe:39:ad:65:b8:cc:19:c4:27:2b:de:3f:34:45:4c:28: ff:d6:d7:e0:31:9e:57:ec:84:75:a9:79:5a:84:b0:42:97:0e: 7a:b4:35:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjQxMTIyMjMwNTQzWhcNMjQxMTI5MjMwNTQzWjAYMRYwFAYD VQQDEw02NzQxMGU0Ny0xM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQDEVUIgU6miqdHNOAWHU1k4Va1eiHR6Z+aLeCWhcdNFAn3/P9xJTEv1Yyaz IxdZCNtJW3WH/6GbKzPp7sswB7cRNS1Ul+dcrlhbiR9W+O5LU79ecsRPAD5lZcYf DR1oYNdtulXiut14qmv/TxHzzJRYamD41f+tkf/ro8WmzUMibE7fJ/KQCO3OOC/Y 9O+jCWIyxKVMowM/DorDh6TxsMEL++lOsY0WMf2XY7GQdDfDP5R+UytUkC1kYqPC ipGXqJ+zUVlI9Ky2MQQ8MRxEVNfNwenTUBoBLQ/CVRWPgex5bKdHTBPndKaGXo/C M+3zpOdtGz6lOn/Ja8kJfnoogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHo4aW2 t1B8oKgobLwxDTAjdTl9MB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVw6NwqM7tAJ5PVrEeDRByOGTr1DdO7lV7q0TnvOeO3IRROzZ2W6v /tli15Q2J+upNdmBGJBWuNFBppdQo5syGS5wvkWoqpfIflgguS3+WOXRgl3DoIVd Zrf2oSY8GeMZtZn/5+w2bJzml3Y2X/XQNJRwmnNqujFR4G6dZSnrs2xh5CGPP7LE IPBTuGHvLEKs0CPe1elOKgBNh/o6rzeaZNC4WLaI1gvM+SpbZ+FBEj9gNnAKXOtJ Xox3Vk8z0cKeTbjAOSRblCswqmOdtgg74iWq5BG3KYn0A/45rWW4zBnEJyvePzRF TCj/1tfgMZ5X7IR1qXlahLBClw56tDW7 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org