$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: AzS7uRWUsgTrw52XlrecbGtZXgijP8yIohEZ/8a1wus= Subject key identifier: 7A:35:D2:E2:D4:2E:BB:37:C5:76:79:84:57:5E:7E:81:E3:F2:BB:86 Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 0494 Signing time: Fri 22 Nov 2024 23:33:58 +0000 Manifest this update: Fri 22 Nov 2024 23:33:58 +0000 Manifest next update: Fri 29 Nov 2024 23:33:57 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: W5T8vhMu9w1CAmuGUNA2GyaG14NWS3XujgZlVuOvBxA=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: cJsfZl/cFkpKQozJq2xwkeH6mLrWaa6pn1llxMbhow4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Nov 22 23:33:58 2024 GMT Not After : Nov 29 23:33:57 2024 GMT Subject: CN=674114e6-2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:f5:5e:2e:6f:5c:89:36:9e:e8:39:0e:1f: 11:e8:6f:10:71:45:7b:5d:2c:95:e1:ca:93:4f:6f: dd:75:fc:1f:a3:bb:a2:ac:79:b3:54:42:e5:7c:2e: b5:4c:92:89:78:a7:c0:5e:a9:f6:82:db:b1:f3:a9: 86:4b:fb:8a:c8:f8:55:e1:13:e4:d7:1f:9b:22:5f: 0f:56:a8:c4:08:95:f6:7a:e3:41:05:59:0f:3d:93: 3b:37:10:d5:1a:c5:71:b0:dd:b5:59:38:43:04:cb: d6:12:db:22:4d:3a:61:92:c0:17:e1:a8:f9:f5:2e: 20:08:08:61:9e:9c:33:86:7b:c3:ef:0a:43:f1:21: 9f:fa:32:93:ee:6f:fe:50:41:24:a9:69:fb:c5:4d: aa:88:af:aa:6e:3c:a8:f8:85:5d:1e:52:f4:6e:f2: 76:0c:dd:e8:f5:02:3d:e0:02:c8:aa:80:d4:8f:e5: c7:15:1b:82:2a:2e:cc:b6:85:6d:cd:30:9f:ff:33: ed:f1:17:a0:53:a3:7f:0d:01:85:21:be:70:d5:9b: 3b:4c:a5:8e:9a:76:f8:bd:ce:10:45:0d:de:34:50: 58:45:5a:c8:60:6b:1f:64:70:4d:1d:a5:32:11:1b: b7:68:2a:37:80:94:50:d9:8c:5d:e1:ab:fd:83:f0: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:D2:E2:D4:2E:BB:37:C5:76:79:84:57:5E:7E:81:E3:F2:BB:86 X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:21:eb:ec:f1:a9:81:fd:c2:b8:60:54:d9:86:0e:aa:a4:25: 64:01:92:ce:1c:bd:7e:ff:c3:b0:fb:7f:db:43:1b:ed:c0:4e: 62:bc:fc:85:87:de:ee:0a:aa:11:4c:89:57:d0:97:92:d6:cc: 4f:03:0a:00:f8:0c:db:80:4f:b0:97:55:62:a3:d3:2c:e0:cc: 79:7d:e4:ea:48:34:df:9e:46:e0:19:68:41:df:d6:36:a8:03: 0f:7a:1a:8d:44:e9:aa:c8:dd:19:23:de:50:8b:4f:f7:2c:68: b9:ee:36:d3:0e:23:50:f0:06:5e:69:4c:fb:93:61:1b:09:94: 5e:50:8a:c4:a2:82:2f:6a:cf:4b:f1:fe:22:7f:64:0d:fb:2a: 47:80:c8:ab:03:25:a5:a5:78:4a:1c:9a:8e:84:82:f9:0b:91: 5c:21:b5:78:c5:4f:8b:f5:0f:19:99:f9:22:a0:bc:25:1f:0b: c1:29:b0:10:af:89:3f:08:d7:ae:10:b1:cd:1f:84:42:1a:53: c8:95:75:af:60:f4:c0:11:9a:73:7b:57:c0:b7:d4:71:72:ab: ac:3d:ac:9f:68:d9:f9:55:ed:a1:70:55:dd:c6:36:af:e2:4f: d0:7f:dd:20:e7:3b:55:28:19:a5:47:db:eb:59:99:99:dd:59: 53:38:c8:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjQxMTIyMjMzMzU4WhcNMjQxMTI5MjMzMzU3WjAYMRYwFAYD VQQDEw02NzQxMTRlNi0yNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPf1Xi5vXIk2nug5Dh8R6G8QcUV7XSyV4cqTT2/ddfwfo7uirHmzVELlfC61 TJKJeKfAXqn2gtux86mGS/uKyPhV4RPk1x+bIl8PVqjECJX2euNBBVkPPZM7NxDV GsVxsN21WThDBMvWEtsiTTphksAX4aj59S4gCAhhnpwzhnvD7wpD8SGf+jKT7m/+ UEEkqWn7xU2qiK+qbjyo+IVdHlL0bvJ2DN3o9QI94ALIqoDUj+XHFRuCKi7MtoVt zTCf/zPt8RegU6N/DQGFIb5w1Zs7TKWOmnb4vc4QRQ3eNFBYRVrIYGsfZHBNHaUy ERu3aCo3gJRQ2Yxd4av9g/AyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo10uLU Lrs3xXZ5hFdefoHj8ruGMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDiIevs8amB/cK4YFTZhg6qpCVkAZLOHL1+/8Ow+3/bQxvtwE5ivPyF h97uCqoRTIlX0JeS1sxPAwoA+AzbgE+wl1Vio9Ms4Mx5feTqSDTfnkbgGWhB39Y2 qAMPehqNROmqyN0ZI95Qi0/3LGi57jbTDiNQ8AZeaUz7k2EbCZReUIrEooIvas9L 8f4if2QN+ypHgMirAyWlpXhKHJqOhIL5C5FcIbV4xU+L9Q8ZmfkioLwlHwvBKbAQ r4k/CNeuELHNH4RCGlPIlXWvYPTAEZpze1fAt9RxcqusPayfaNn5Ve2hcFXdxjav 4k/Qf90g5ztVKBmlR9vrWZmZ3VlTOMjz -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org