$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft File: JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json) Hash identifier: otqu9lDXdzx0IPd0UA6eJOz2qP7O0XQb1BZEuYwLo8c= Subject key identifier: 2B:72:83:B9:3F:B7:65:D4:4B:E6:03:1E:6C:E7:74:B0:C8:8B:E7:0B Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft Manifest number: 02CD Signing time: Thu 21 Nov 2024 00:58:12 +0000 Manifest this update: Thu 21 Nov 2024 00:58:11 +0000 Manifest next update: Thu 28 Nov 2024 00:58:11 +0000 Files and hashes: 1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: Kcybr+KQdTJMfOW3b0QMpnx9o/d1ejhnbIx7KD6ltbY=) 2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: oin8yL4zYDT5x3oDTyMv4sXImYqYMHrbBoNIU14DFXM=) 3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: Pu4w4wkedRnsQN+HZTdNYqSgNqHGpxwniheL32YgYjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Validity Not Before: Nov 21 00:58:11 2024 GMT Not After : Nov 28 00:58:11 2024 GMT Subject: CN=673e85a3-9ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:cc:94:1b:e9:d1:91:81:19:12:68:52:40: 86:26:f7:d5:d7:96:6d:ec:3e:32:2e:2f:8e:fc:85: 93:ff:81:0e:03:dd:80:fe:a2:55:2e:ab:27:7b:63: 53:85:65:d2:b3:cb:8c:b8:8e:47:f6:55:6e:32:93: cb:e5:8a:43:74:95:8b:72:59:bc:bc:c2:12:33:c3: 1c:00:c9:d2:14:8c:65:5b:31:98:c8:9d:3d:83:19: 0c:8f:70:6c:f7:45:2f:ee:7d:5d:2a:03:6e:5f:80: 5c:cb:0b:ba:f9:6a:db:ae:e1:f4:97:ce:48:78:03: fd:dd:c8:fd:bc:a7:84:bb:0e:80:b9:10:e6:ed:7b: 78:88:d0:5b:9a:31:d0:fb:0a:4f:98:f4:00:d9:8e: 38:5e:82:20:dc:8a:23:9a:c2:8c:ae:78:c7:00:cd: 7b:61:5d:8c:cb:0f:ab:33:c9:9f:26:05:4d:ad:3b: b8:62:ab:32:ef:da:9c:1c:40:1a:89:44:18:c5:f5: 3d:5b:83:d1:98:3d:81:26:8c:bc:3b:c9:f6:d3:f7: ad:26:14:87:e7:0b:be:95:15:f2:a2:d4:c4:a5:a9: a3:b7:dd:1f:f1:b7:e7:37:41:3e:86:c4:3b:93:f9: a2:1a:c5:79:d9:eb:57:6c:6f:f4:de:4d:36:93:49: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:83:B9:3F:B7:65:D4:4B:E6:03:1E:6C:E7:74:B0:C8:8B:E7:0B X509v3 Authority Key Identifier: keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f6:52:62:9b:dd:90:e8:47:0e:4a:0a:7d:2a:77:6a:e2:79: f6:0b:c7:43:65:86:b8:72:f4:f4:20:54:50:dd:10:19:51:6a: 9e:08:8a:61:bb:98:24:88:da:61:75:7e:8c:ec:54:80:ca:71: dc:40:38:30:33:dc:b2:b5:5c:0b:b8:c5:dd:ba:ec:83:b2:03: 7c:17:30:e8:d9:92:af:49:58:46:a4:6c:33:4e:5d:2d:95:8d: e3:c6:f0:26:b8:61:cb:67:a1:ab:60:9f:ab:ed:e5:a6:be:b3: fc:8a:5b:ba:05:fa:d8:e4:40:23:ed:75:8c:bb:1a:ac:fc:e1: 55:c6:d4:ec:bb:09:68:4d:75:ac:90:57:81:8e:fe:87:49:c6: 8c:05:45:80:44:3a:5c:09:90:72:b0:13:38:94:0d:76:a4:bf: 4a:d7:ec:79:39:98:b5:90:c2:ef:79:da:b7:1b:69:64:fb:e3: 0e:83:d2:58:0a:5d:69:08:6c:01:98:ca:84:c4:3d:fc:8b:9d: 36:13:58:3f:ed:d8:71:f6:8b:44:af:77:33:fa:2d:a5:d3:ce: d4:5f:bb:ba:9a:0b:12:78:f7:8d:50:bf:f9:85:f8:98:1c:c4: dd:49:b6:7e:ef:f6:27:c5:05:31:98:56:e5:5c:bc:a4:07:fa: ad:45:f7:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4 MTAzMjIyMkQwHhcNMjQxMTIxMDA1ODExWhcNMjQxMTI4MDA1ODExWjAYMRYwFAYD VQQDEw02NzNlODVhMy05YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9fMlBvp0ZGBGRJoUkCGJvfV15Zt7D4yLi+O/IWT/4EOA92A/qJVLqsne2NT hWXSs8uMuI5H9lVuMpPL5YpDdJWLclm8vMISM8McAMnSFIxlWzGYyJ09gxkMj3Bs 90Uv7n1dKgNuX4Bcywu6+WrbruH0l85IeAP93cj9vKeEuw6AuRDm7Xt4iNBbmjHQ +wpPmPQA2Y44XoIg3IojmsKMrnjHAM17YV2Myw+rM8mfJgVNrTu4Yqsy79qcHEAa iUQYxfU9W4PRmD2BJoy8O8n20/etJhSH5wu+lRXyotTEpamjt90f8bfnN0E+hsQ7 k/miGsV52etXbG/03k02k0n/cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtyg7k/ t2XUS+YDHmzndLDIi+cLMB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3 NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FENi9BMkNFNkJEOEM3NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4 Y2dWLU42dDNwaHlCQXlJaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV9lJim92Q6EcOSgp9Kndq4nn2C8dDZYa4cvT0IFRQ3RAZUWqeCIph u5gkiNphdX6M7FSAynHcQDgwM9yytVwLuMXduuyDsgN8FzDo2ZKvSVhGpGwzTl0t lY3jxvAmuGHLZ6GrYJ+r7eWmvrP8ilu6BfrY5EAj7XWMuxqs/OFVxtTsuwloTXWs kFeBjv6HScaMBUWARDpcCZBysBM4lA12pL9K1+x5OZi1kMLvedq3G2lk++MOg9JY Cl1pCGwBmMqExD38i502E1g/7dhx9otEr3cz+i2l087UX7u6mgsSePeNUL/5hfiY HMTdSbZ+7/YnxQUxmFblXLykB/qtRfff -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:34 2024 by rpki-client on console-ams.rpki-client.org