$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json) Hash identifier: bpM+Kab0VKvXhqLli8ywmcUlZQBXJrrlQ0quaFL2uWM= Subject key identifier: 15:CE:A7:1B:02:B8:0C:8D:B8:32:62:B1:4F:D1:DD:F9:2C:AB:70:06 Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft Manifest number: 0243 Signing time: Thu 21 Nov 2024 01:21:20 +0000 Manifest this update: Thu 21 Nov 2024 01:21:20 +0000 Manifest next update: Thu 28 Nov 2024 01:21:20 +0000 Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: 6+1gaMDVPQYo3CWHAFbBa3hmJS+J6KDG7KED4xf2Yi0=) 2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: zUVl5DeV2betZU5hQ4iQSvT6ZzKQrdzXjnE3qS2LJSk=) 3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: I6dVpGCM55P59sT81mzHGHdXEzFaqKidoCFix5oxTTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Validity Not Before: Nov 21 01:21:20 2024 GMT Not After : Nov 28 01:21:20 2024 GMT Subject: CN=673e8b10-4e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:c9:14:e6:26:07:7a:8f:25:59:eb:4f:6e: e3:f6:68:25:49:21:08:9e:20:07:62:36:5a:d2:3b: bd:e0:aa:f7:aa:f4:a6:43:da:97:fe:80:d9:f0:e6: 10:f1:eb:d5:17:f5:d3:55:59:06:46:54:72:cb:07: 0d:ec:59:12:30:28:fa:57:38:40:1d:8f:c6:b5:40: b4:df:b4:85:2a:42:29:42:ce:ae:05:26:25:50:42: c7:86:1b:e8:8f:d0:39:3f:e0:12:48:8e:c5:e4:5b: ce:42:9d:03:8a:c7:95:a0:c0:69:c9:b5:52:cb:9b: 97:f7:5e:6c:c0:94:34:78:a1:68:24:de:63:f0:d3: c8:47:7a:36:5b:ba:2a:1d:ed:a6:b3:13:31:4e:51: da:40:78:6d:1b:47:8c:d0:61:b7:f8:11:ef:fe:bb: 5f:42:e5:f2:52:36:df:d0:80:82:2a:90:4c:c0:60: ef:4e:db:69:b5:04:ee:f3:be:bb:50:64:94:19:b2: 42:ae:eb:0a:9f:ca:bc:5c:92:b5:66:e6:b6:8a:f3: 8e:7a:2d:36:d8:47:d7:c5:18:39:39:6e:45:13:cf: 8a:c3:0c:07:fc:01:d7:c0:06:93:d0:e5:91:9f:6e: c3:01:21:ad:0e:b6:fd:ee:a4:ae:8d:2d:ee:22:03: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CE:A7:1B:02:B8:0C:8D:B8:32:62:B1:4F:D1:DD:F9:2C:AB:70:06 X509v3 Authority Key Identifier: keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a1:21:7b:b1:ed:62:ac:44:a2:81:f7:25:13:aa:c6:64:24: 79:e4:94:5d:7f:88:05:4a:b7:b7:a9:b9:51:3d:e6:38:64:87: b5:a4:da:ba:71:38:72:b0:1f:4b:6a:88:cb:d0:4a:67:98:28: 1b:51:f4:e9:de:86:a1:c7:51:b1:aa:a2:92:02:7c:1b:25:7d: e4:eb:fb:bc:ff:cc:2f:ac:44:87:f8:7c:e3:db:e0:0a:68:7d: 04:e1:da:70:f7:65:21:9f:0f:8a:18:56:f2:13:10:4e:0a:49: b4:39:ff:d7:09:c7:5f:e5:5f:15:4a:4f:3d:93:6f:37:d6:bd: 85:20:c5:2e:49:f4:e3:0c:58:18:e2:58:69:99:84:15:ea:4f: 92:19:da:ce:68:a1:91:19:41:90:e6:7d:d8:27:41:c8:c2:c4: a3:0d:93:eb:45:e4:51:ac:e2:59:8c:9c:80:1c:5c:30:02:64: c2:61:c1:6f:17:a4:2a:e3:94:c1:8c:d1:14:a7:97:db:83:fb: 8e:32:68:cf:e5:a6:b4:7f:d5:e7:8a:19:46:65:2c:97:30:49: 41:7d:13:1d:7e:66:7e:ac:e6:04:a8:57:54:1a:ab:32:a2:c2: 52:73:52:9d:0e:92:4a:9d:9a:3f:c9:54:e6:42:bf:9e:b5:2b: 8a:c5:9b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD QzFCRTFDMzgwHhcNMjQxMTIxMDEyMTIwWhcNMjQxMTI4MDEyMTIwWjAYMRYwFAYD VQQDEw02NzNlOGIxMC00ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ezJFOYmB3qPJVnrT27j9mglSSEIniAHYjZa0ju94Kr3qvSmQ9qX/oDZ8OYQ 8evVF/XTVVkGRlRyywcN7FkSMCj6VzhAHY/GtUC037SFKkIpQs6uBSYlUELHhhvo j9A5P+ASSI7F5FvOQp0DiseVoMBpybVSy5uX915swJQ0eKFoJN5j8NPIR3o2W7oq He2msxMxTlHaQHhtG0eM0GG3+BHv/rtfQuXyUjbf0ICCKpBMwGDvTttptQTu8767 UGSUGbJCrusKn8q8XJK1Zua2ivOOei022EfXxRg5OW5FE8+KwwwH/AHXwAaT0OWR n27DASGtDrb97qSujS3uIgN4cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXOpxsC uAyNuDJisU/R3fksq3AGMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyoSF7se1irESigfclE6rGZCR55JRdf4gFSre3qblRPeY4ZIe1pNq6 cThysB9LaojL0EpnmCgbUfTp3oahx1GxqqKSAnwbJX3k6/u8/8wvrESH+Hzj2+AK aH0E4dpw92Uhnw+KGFbyExBOCkm0Of/XCcdf5V8VSk89k2831r2FIMUuSfTjDFgY 4lhpmYQV6k+SGdrOaKGRGUGQ5n3YJ0HIwsSjDZPrReRRrOJZjJyAHFwwAmTCYcFv F6Qq45TBjNEUp5fbg/uOMmjP5aa0f9XnihlGZSyXMElBfRMdfmZ+rOYEqFdUGqsy osJSc1KdDpJKnZo/yVTmQr+etSuKxZtH -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:34 2024 by rpki-client on console-ams.rpki-client.org