$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: 5tVkDJLRo0YEePgU8uYZWfdb97DTVNgbzFnIgaT9jYo= Subject key identifier: DF:0A:21:A4:64:87:C2:12:FF:71:A6:68:3C:AA:78:23:AC:B6:AB:2A Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0D62 Signing time: Fri 22 Nov 2024 17:55:47 +0000 Manifest this update: Fri 22 Nov 2024 17:55:46 +0000 Manifest next update: Fri 29 Nov 2024 17:55:46 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: fB4V8JhuLLNmmDLED6oHY5gMC32IHqLaGmehSMJySLQ=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Nov 22 17:55:46 2024 GMT Not After : Nov 29 17:55:46 2024 GMT Subject: CN=6740c5a3-a579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:62:3e:14:41:c1:99:51:ab:9d:62:4f:1a: 46:f4:c4:7d:9e:f2:44:05:58:02:57:1e:d2:92:e7: 2c:6c:7c:66:27:51:c5:d7:ba:56:8e:5e:93:f2:70: 3c:ef:ca:be:8a:12:d0:d7:ad:b2:55:11:d2:01:37: dc:9c:45:04:a0:4d:6f:c8:fa:46:7c:02:e0:5b:01: 69:12:bc:47:da:2b:08:77:56:11:b6:59:50:fd:e1: af:a7:3a:d6:fb:1b:41:82:a9:9d:61:9d:ce:2a:f2: 33:5a:af:6e:a3:3b:ea:90:fa:40:6d:f2:d2:ba:e1: d3:3e:6c:41:80:44:ab:77:0d:d1:d7:ea:b7:3b:0f: 19:43:05:27:6c:15:eb:9a:8d:19:53:2b:94:a3:3b: c9:36:15:fb:38:4c:65:72:fc:9c:17:84:d4:5a:e3: 4d:d4:27:47:87:f3:c3:bd:a5:9c:a9:ee:d4:34:a7: 31:4c:bf:9a:d7:b2:8a:39:e4:45:1a:ae:96:ad:71: 27:7f:55:71:c6:d5:63:a5:9b:21:3c:5b:1c:59:a1: 72:2b:bb:b2:39:ed:5c:80:82:a9:7c:50:e9:93:b8: b6:ff:86:1e:81:c1:14:e0:a1:7a:62:31:7c:67:5e: c7:c7:aa:f4:40:fa:49:ee:d9:b1:ef:cf:d3:32:2d: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0A:21:A4:64:87:C2:12:FF:71:A6:68:3C:AA:78:23:AC:B6:AB:2A X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:04:6c:05:6c:00:e8:a9:5e:b5:b3:fc:96:7e:9a:9e:bb: 56:f4:5b:78:56:1e:80:e3:bc:4b:4d:0f:aa:21:46:1a:d5:08: 65:c9:5e:ea:48:78:1e:e5:28:e8:a3:b8:05:d4:34:b0:19:0e: 5a:6a:8f:50:30:78:04:2f:84:de:3b:03:61:f2:d3:d8:8e:ad: 16:a5:9d:c7:b6:98:d3:70:b2:25:6c:f4:e2:cf:3a:a0:a9:d9: c1:8a:0d:0c:13:1f:ee:3d:70:7a:0c:b8:e2:5f:f0:ae:f5:eb: 3a:03:a6:6a:8b:36:c9:52:b7:0a:14:9d:83:55:2f:17:5c:e0: ab:d4:66:41:d4:e7:fe:d8:b9:48:18:44:f9:fc:23:a2:b0:f6: 85:2d:8e:0e:50:48:fd:c9:0b:54:56:f4:cb:3c:40:44:17:03: 87:af:6d:59:46:b2:71:c1:14:49:c8:f3:16:b1:ed:ce:6f:6b: ea:b0:7d:0e:4f:69:f0:0a:01:d2:40:09:11:9b:e6:c2:73:fc: fd:98:6a:da:cc:0f:33:e8:a5:7b:51:46:f1:28:a8:91:91:ed: c3:eb:0b:78:32:01:da:8c:c7:20:e6:6b:d2:a9:0b:9c:be:24: 0e:58:87:b2:36:18:e2:61:27:52:61:6f:bb:e7:7b:05:a6:5b: 42:b9:05:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjQxMTIyMTc1NTQ2WhcNMjQxMTI5MTc1NTQ2WjAYMRYwFAYD VQQDEw02NzQwYzVhMy1hNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbhiPhRBwZlRq51iTxpG9MR9nvJEBVgCVx7SkucsbHxmJ1HF17pWjl6T8nA8 78q+ihLQ162yVRHSATfcnEUEoE1vyPpGfALgWwFpErxH2isId1YRtllQ/eGvpzrW +xtBgqmdYZ3OKvIzWq9uozvqkPpAbfLSuuHTPmxBgESrdw3R1+q3Ow8ZQwUnbBXr mo0ZUyuUozvJNhX7OExlcvycF4TUWuNN1CdHh/PDvaWcqe7UNKcxTL+a17KKOeRF Gq6WrXEnf1VxxtVjpZshPFscWaFyK7uyOe1cgIKpfFDpk7i2/4YegcEU4KF6YjF8 Z17Hx6r0QPpJ7tmx78/TMi2GRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8KIaRk h8IS/3GmaDyqeCOstqsqMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXSgRsBWwA6KletbP8ln6anrtW9Ft4Vh6A47xLTQ+qIUYa1QhlyV7q SHge5Sjoo7gF1DSwGQ5aao9QMHgEL4TeOwNh8tPYjq0WpZ3HtpjTcLIlbPTizzqg qdnBig0MEx/uPXB6DLjiX/Cu9es6A6ZqizbJUrcKFJ2DVS8XXOCr1GZB1Of+2LlI GET5/COisPaFLY4OUEj9yQtUVvTLPEBEFwOHr21ZRrJxwRRJyPMWse3Ob2vqsH0O T2nwCgHSQAkRm+bCc/z9mGrazA8z6KV7UUbxKKiRke3D6wt4MgHajMcg5mvSqQuc viQOWIeyNhjiYSdSYW+753sFpltCuQWY -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org