$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: kn3FvBMtncnH6KWglh6eIvfqyKRAAyfPo4wmb3qzEdc= Subject key identifier: 1A:00:85:C6:30:53:7F:A3:94:29:0C:80:2D:47:F9:60:87:AF:2C:36 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: A2 Signing time: Sat 23 Nov 2024 04:20:55 +0000 Manifest this update: Sat 23 Nov 2024 04:20:55 +0000 Manifest next update: Sat 30 Nov 2024 04:20:55 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: 7xkjeuIiyrSvogoRuehcvabfrkuI0lnnl0sM3n7Cuy0=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: hNCRC9+DFNhTvM3v/BstmJffMNQ5AXXkJyzRo3ph1EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Nov 23 04:20:55 2024 GMT Not After : Nov 30 04:20:55 2024 GMT Subject: CN=67415827-495d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:36:c5:0e:57:f5:0e:73:a5:f3:6a:2a:5d: 30:b9:40:16:7a:5e:35:0b:5a:d5:00:83:32:17:9a: b6:c2:29:ce:68:c4:31:fa:d6:c9:8b:76:b5:71:03: 0e:7c:da:23:af:12:51:1c:78:70:ae:03:12:fe:3d: 98:13:f7:84:64:f3:47:77:ae:dc:a5:96:ce:92:75: 24:87:2f:f6:1f:50:e4:67:90:aa:02:8d:87:a2:cb: 3d:79:4a:60:5d:19:55:d0:1a:68:1f:8f:ed:86:ff: c2:c4:2d:15:37:65:e9:73:8b:05:03:88:94:ba:fb: 27:90:02:a8:c4:67:8c:15:66:68:4c:0c:7a:51:85: f5:dc:34:ac:28:59:ac:d1:61:f6:57:92:3e:2f:9c: d4:87:6c:e3:03:0b:83:78:23:6f:fb:97:3f:02:e0: c7:1f:75:1f:b5:85:d4:27:df:1a:62:82:36:bb:71: 80:45:27:37:2e:16:08:d3:b4:33:5e:5a:9c:45:fd: 5a:e2:3d:d8:cd:2a:f0:0f:7a:e0:ae:87:f1:e7:2f: 9a:08:e4:e0:ed:3c:ab:6b:33:b1:d7:92:f2:34:1b: 33:de:7f:61:16:23:14:11:f4:19:12:aa:58:0b:0a: 1a:30:6c:f2:96:1e:6d:d6:ac:f1:16:ff:fe:e9:9c: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:85:C6:30:53:7F:A3:94:29:0C:80:2D:47:F9:60:87:AF:2C:36 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:ab:8f:be:40:28:20:d4:50:b0:b7:b2:10:87:71:0a:33: d7:5d:d2:ff:31:d9:35:57:82:21:cd:4c:94:4e:12:80:02:cb: 49:3b:d3:e7:04:90:6d:0b:29:26:5f:af:49:e6:1c:5b:e4:bb: 11:32:0c:f3:6f:80:b3:5c:00:e2:5e:b4:d9:36:c8:9e:70:a6: e6:6f:fe:6c:8c:c6:5a:2d:d6:18:7f:88:31:12:bb:b6:b3:ea: eb:ca:35:55:c4:f3:69:38:8c:b1:b0:6c:ca:d9:6b:ed:c2:f1: 00:48:27:61:49:13:b5:20:54:fa:a2:a1:8f:9c:f9:42:60:67: 96:53:44:bd:f5:10:00:3a:b7:7b:3b:f3:57:6a:66:19:f7:4f: 26:1e:44:ea:fc:01:9c:c9:bd:1f:f9:b6:6b:ed:84:70:77:0f: 9f:12:fc:38:69:4e:99:cf:8b:24:70:6f:80:b8:db:e2:5f:a1: a3:03:7c:cc:37:a6:a0:a9:39:c3:ec:12:b1:5a:08:b7:55:22: 0c:e4:a2:0b:14:26:ef:ee:3d:69:0c:a7:43:98:14:b7:2e:4a: a5:f8:86:b4:69:57:a3:3f:94:13:8b:e9:68:32:aa:ad:a0:f0: 43:7e:75:2a:1a:0c:8d:91:75:a1:5d:be:af:97:7e:b1:4a:25: 4a:29:73:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjQxMTIzMDQyMDU1WhcNMjQxMTMwMDQyMDU1WjAYMRYwFAYD VQQDEw02NzQxNTgyNy00OTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHo2xQ5X9Q5zpfNqKl0wuUAWel41C1rVAIMyF5q2winOaMQx+tbJi3a1cQMO fNojrxJRHHhwrgMS/j2YE/eEZPNHd67cpZbOknUkhy/2H1DkZ5CqAo2Hoss9eUpg XRlV0BpoH4/thv/CxC0VN2Xpc4sFA4iUuvsnkAKoxGeMFWZoTAx6UYX13DSsKFms 0WH2V5I+L5zUh2zjAwuDeCNv+5c/AuDHH3UftYXUJ98aYoI2u3GARSc3LhYI07Qz XlqcRf1a4j3YzSrwD3rgrofx5y+aCOTg7TyrazOx15LyNBsz3n9hFiMUEfQZEqpY CwoaMGzylh5t1qzxFv/+6ZwDIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoAhcYw U3+jlCkMgC1H+WCHryw2MB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFgauPvkAoINRQsLeyEIdxCjPXXdL/Mdk1V4IhzUyUThKAAstJO9Pn BJBtCykmX69J5hxb5LsRMgzzb4CzXADiXrTZNsiecKbmb/5sjMZaLdYYf4gxEru2 s+rryjVVxPNpOIyxsGzK2WvtwvEASCdhSRO1IFT6oqGPnPlCYGeWU0S99RAAOrd7 O/NXamYZ908mHkTq/AGcyb0f+bZr7YRwdw+fEvw4aU6Zz4skcG+AuNviX6GjA3zM N6agqTnD7BKxWgi3VSIM5KILFCbv7j1pDKdDmBS3Lkql+Ia0aVejP5QTi+loMqqt oPBDfnUqGgyNkXWhXb6vl36xSiVKKXO0 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org