$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: sJKaXhAxL1Kk1HAniKsIilgbmpij12QrnJ9gYN1yA20= Subject key identifier: 52:03:1E:D5:B1:FE:F5:48:BB:D4:CD:9D:AF:AB:0D:2A:4A:92:F9:DA Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0CDF Signing time: Fri 22 Nov 2024 18:01:51 +0000 Manifest this update: Fri 22 Nov 2024 18:01:50 +0000 Manifest next update: Fri 29 Nov 2024 18:01:50 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: fN4GWwitnKAmrTbbVLwLcVwBfESWjQn+5CISkk9aMzY=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: XpzukYyNZ/USlf3Fohe5yi5HxUGnn2DRa9gERGthYj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Nov 22 18:01:50 2024 GMT Not After : Nov 29 18:01:50 2024 GMT Subject: CN=6740c70f-501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:cc:bc:fb:36:55:e7:80:c5:fd:68:ba:ff: d2:a3:5e:e5:c6:d0:d6:7c:59:af:72:5b:0a:c8:3c: 13:ca:1c:75:1f:4d:4f:84:6e:52:99:51:3d:30:ab: 8b:87:70:16:60:c4:51:ea:73:f9:e9:ba:01:21:dc: e7:ad:5d:f3:d9:c6:17:d8:03:bc:0d:4b:26:7f:71: f4:aa:16:d6:51:78:b9:06:68:fb:dd:a6:69:92:0f: 93:b9:bb:72:a8:da:b7:be:f4:05:ec:30:2e:fd:bb: ee:44:b2:6f:57:3d:72:ec:88:be:a8:fc:c5:f5:1d: 46:eb:5c:d0:4c:34:75:fe:17:fc:f5:d8:c2:ad:ca: 67:9f:ed:bb:ce:7f:70:33:2b:34:09:16:94:4a:f5: 68:22:bf:16:03:4e:23:20:9c:b8:1f:19:70:f3:f5: d0:9a:bb:61:e1:eb:55:46:28:88:3c:4e:90:23:57: 07:5b:05:7a:8c:e5:51:25:fb:a2:a3:64:10:f2:80: f7:7e:05:1a:27:f5:4b:e4:50:5c:2a:21:94:54:5c: 70:83:a1:84:62:96:19:c1:76:2f:f0:09:c1:35:11: 25:5c:c9:e7:08:ad:0f:2e:bd:cd:20:37:c8:ec:83: 4b:22:bc:4e:29:09:99:82:49:2c:45:a5:3f:14:50: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:03:1E:D5:B1:FE:F5:48:BB:D4:CD:9D:AF:AB:0D:2A:4A:92:F9:DA X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f9:dc:cb:2d:99:b4:57:d1:68:87:69:69:26:39:9f:ba:86: be:a3:48:35:9c:da:8a:67:a7:79:17:c9:67:c2:80:c9:ae:88: bc:ae:13:b6:4b:e9:1c:45:73:08:7b:a2:d0:84:25:de:a6:26: 6d:b1:b2:33:fd:f9:04:b5:d6:90:61:20:97:d5:38:3c:fd:1b: e6:f5:f6:c8:d1:9c:3c:95:30:54:7f:ea:16:11:04:ac:99:ee: d9:74:38:22:d8:6c:39:3d:fe:23:f5:85:8b:d8:34:a4:bc:d3: 97:30:18:91:65:c0:46:28:83:66:cd:79:73:cb:ad:15:c7:2d: 27:d6:47:90:f2:0e:73:c0:56:c8:52:de:d2:b5:c5:09:30:84: ea:98:cf:f0:3d:36:5d:03:53:f2:9c:e7:fd:8f:0a:bf:04:10: 97:e3:69:cf:16:e0:f3:bc:dc:5e:e5:1c:0c:85:51:7b:59:e5: ef:83:1f:76:12:8a:19:c5:f9:0c:c6:f3:26:67:37:0b:40:9a: 19:c7:c5:59:8f:f8:68:bc:1c:a4:02:a8:0e:d5:ca:f8:ae:a3: b8:b9:23:02:26:c4:d3:16:42:e8:a7:64:49:7a:73:4b:ae:04: 2d:c9:06:87:96:ea:f4:ee:7a:aa:77:ee:0c:dc:96:08:dc:f0: f8:d6:91:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjQxMTIyMTgwMTUwWhcNMjQxMTI5MTgwMTUwWjAYMRYwFAYD VQQDEw02NzQwYzcwZi01MDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnzMvPs2VeeAxf1ouv/So17lxtDWfFmvclsKyDwTyhx1H01PhG5SmVE9MKuL h3AWYMRR6nP56boBIdznrV3z2cYX2AO8DUsmf3H0qhbWUXi5Bmj73aZpkg+Tubty qNq3vvQF7DAu/bvuRLJvVz1y7Ii+qPzF9R1G61zQTDR1/hf89djCrcpnn+27zn9w Mys0CRaUSvVoIr8WA04jIJy4Hxlw8/XQmrth4etVRiiIPE6QI1cHWwV6jOVRJfui o2QQ8oD3fgUaJ/VL5FBcKiGUVFxwg6GEYpYZwXYv8AnBNRElXMnnCK0PLr3NIDfI 7INLIrxOKQmZgkksRaU/FFBMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIDHtWx /vVIu9TNna+rDSpKkvnaMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd+dzLLZm0V9Foh2lpJjmfuoa+o0g1nNqKZ6d5F8lnwoDJroi8rhO2 S+kcRXMIe6LQhCXepiZtsbIz/fkEtdaQYSCX1Tg8/Rvm9fbI0Zw8lTBUf+oWEQSs me7ZdDgi2Gw5Pf4j9YWL2DSkvNOXMBiRZcBGKINmzXlzy60Vxy0n1keQ8g5zwFbI Ut7StcUJMITqmM/wPTZdA1PynOf9jwq/BBCX42nPFuDzvNxe5RwMhVF7WeXvgx92 EooZxfkMxvMmZzcLQJoZx8VZj/hovBykAqgO1cr4rqO4uSMCJsTTFkLop2RJenNL rgQtyQaHlur07nqqd+4M3JYI3PD41pEM -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org