$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json) Hash identifier: VyE8ZnOM1q5cp9V9oZQz9g7zpAfxK8RG5/b00vhEY1g= Subject key identifier: 75:76:99:CD:79:36:7C:4A:F0:7C:CB:C8:04:86:2F:CB:DD:B2:D1:F3 Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft Manifest number: 87 Signing time: Sat 23 Nov 2024 04:36:23 +0000 Manifest this update: Sat 23 Nov 2024 04:36:22 +0000 Manifest next update: Sat 30 Nov 2024 04:36:22 +0000 Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: 83YEGx3e7OvahxF0f4bLLYCKyhS0UPI49TBUA/8Dp1Q=) 2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: js9vpe12lmlRNYkEaZ6rykB6+CvjAADY23ufAT3PPlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Validity Not Before: Nov 23 04:36:22 2024 GMT Not After : Nov 30 04:36:22 2024 GMT Subject: CN=67415bc6-f6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:96:56:c3:f1:86:64:5d:e5:5a:a7:7e:b8: 1f:81:b9:81:83:1a:07:c5:51:34:0f:fc:50:b8:d9: bb:90:ee:59:54:d4:3e:1c:93:df:a7:4e:51:11:20: 7f:52:32:2c:e8:0a:ea:96:0c:11:27:26:31:d2:0e: d8:25:8c:53:1d:40:0d:3c:93:ac:ad:f0:60:b3:66: 4a:9c:a1:0f:54:37:45:87:25:da:8c:58:29:75:e2: 5c:8b:14:18:f3:36:63:6f:c2:c3:b4:f4:fa:41:f4: 94:9f:6e:66:cd:7f:d1:92:4d:8f:f7:ed:1f:f2:d0: 14:39:d9:f0:3f:05:af:fd:72:19:5c:c8:15:44:4c: c1:10:e8:2d:d7:74:28:06:f1:27:13:1d:19:77:a3: 32:da:97:9b:87:27:e2:a8:7d:70:c3:32:df:dc:c4: 85:84:72:17:96:ef:92:6f:3f:18:5b:4d:9a:eb:9c: ab:b7:d7:12:30:2e:d7:e7:67:d1:7e:88:1e:d5:bf: 36:5f:93:3f:f2:97:86:34:84:69:e8:f5:fd:72:84: 14:02:d4:a3:ff:15:f5:c2:a3:0c:b5:59:95:12:29: 05:69:be:67:c4:9d:20:8b:5f:aa:a8:64:ba:d2:d4: ed:fa:c5:e9:18:7c:f4:8b:3b:f2:a0:f2:48:bb:59: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:76:99:CD:79:36:7C:4A:F0:7C:CB:C8:04:86:2F:CB:DD:B2:D1:F3 X509v3 Authority Key Identifier: keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4b:46:7a:11:3e:50:d2:92:8c:8f:bd:87:14:20:66:50:88: 70:53:83:1f:3a:c8:8b:f5:d0:71:4c:43:59:3e:e6:5b:d8:f0: 0d:7e:fb:68:ee:c0:cf:f4:58:14:64:6d:c1:f3:28:28:e5:f7: 04:82:03:9c:cb:d5:a9:e0:b0:f3:f8:4a:56:e0:4b:a2:5f:02: de:9a:95:dd:7a:81:28:c2:2f:43:83:ea:0b:af:34:d8:4b:69: b5:bc:fb:bf:07:1d:c5:2c:23:2c:e2:9c:d4:b5:5b:6e:f0:d3: 3d:8a:8a:9d:e6:2e:dc:e9:80:26:39:fc:78:ef:0a:5c:71:73: 38:fa:64:1e:ba:b2:60:c6:01:03:f1:70:0e:17:01:9a:f2:77: 39:26:fd:30:21:9b:97:a3:b6:ca:c2:b7:23:ad:df:f6:9d:84: 8e:e1:98:45:70:9d:f3:06:8a:26:9e:9c:a2:a3:f3:2e:9a:87: 19:44:3e:04:6d:36:e9:41:2d:a0:59:a6:ec:c6:91:c7:61:24: 34:e7:91:a8:08:78:e0:c4:b1:5d:7d:c0:b6:aa:79:97:42:e2: e2:b9:9c:b4:2b:ac:32:d9:45:d5:9d:b6:8b:22:4d:b3:ff:35: b6:f8:cc:bb:95:3b:75:78:35:9a:49:fc:ec:71:25:eb:0f:07: 84:60:e8:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG OThFRDcwMUIwHhcNMjQxMTIzMDQzNjIyWhcNMjQxMTMwMDQzNjIyWjAYMRYwFAYD VQQDEw02NzQxNWJjNi1mNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVCWVsPxhmRd5VqnfrgfgbmBgxoHxVE0D/xQuNm7kO5ZVNQ+HJPfp05RESB/ UjIs6ArqlgwRJyYx0g7YJYxTHUANPJOsrfBgs2ZKnKEPVDdFhyXajFgpdeJcixQY 8zZjb8LDtPT6QfSUn25mzX/Rkk2P9+0f8tAUOdnwPwWv/XIZXMgVREzBEOgt13Qo BvEnEx0Zd6My2pebhyfiqH1wwzLf3MSFhHIXlu+Sbz8YW02a65yrt9cSMC7X52fR foge1b82X5M/8peGNIRp6PX9coQUAtSj/xX1wqMMtVmVEikFab5nxJ0gi1+qqGS6 0tTt+sXpGHz0izvyoPJIu1ne/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV2mc15 NnxK8HzLyASGL8vdstHzMB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3 YUxTVU1CV0hzOUw1anRjQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxS0Z6ET5Q0pKMj72HFCBmUIhwU4MfOsiL9dBxTENZPuZb2PANfvto 7sDP9FgUZG3B8ygo5fcEggOcy9Wp4LDz+EpW4EuiXwLempXdeoEowi9Dg+oLrzTY S2m1vPu/Bx3FLCMs4pzUtVtu8NM9ioqd5i7c6YAmOfx47wpccXM4+mQeurJgxgED 8XAOFwGa8nc5Jv0wIZuXo7bKwrcjrd/2nYSO4ZhFcJ3zBoomnpyio/MumocZRD4E bTbpQS2gWabsxpHHYSQ055GoCHjgxLFdfcC2qnmXQuLiuZy0K6wy2UXVnbaLIk2z /zW2+My7lTt1eDWaSfzscSXrDweEYOhJ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org