$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: jas9fe97pDCHT5zkKaHh16UDxdxZS4+BE59Yd3dvqTU= Subject key identifier: CC:74:57:91:56:C8:72:1C:7F:8C:E7:AA:A5:E0:30:CD:8A:D6:21:3A Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 09EB Signing time: Fri 22 Nov 2024 19:39:40 +0000 Manifest this update: Fri 22 Nov 2024 19:39:39 +0000 Manifest next update: Fri 29 Nov 2024 19:39:39 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: SnmIUkenwkQ5Sy9cJiOtVDSJLupwT2VsJ+8GEHGMEF0=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: ISGTVPaDSy80xCA34yyD1yreZg8c/egSeWgOcnZdCwU=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: Wyd164MPhU473t/AoUISBoO4Aw8E8UOj0zKD275MPkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: Nov 22 19:39:39 2024 GMT Not After : Nov 29 19:39:39 2024 GMT Subject: CN=6740ddfc-e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:9f:ce:81:13:ca:5e:8b:15:33:a2:8d:43: c2:8f:41:b2:7e:f5:71:ee:25:b6:e4:ae:f3:ee:5d: 4d:22:c0:d6:c8:5e:38:6e:0a:8a:57:fc:40:f0:48: 76:ac:f2:22:1f:32:20:de:be:d5:59:4a:7d:f7:8b: 31:c9:0d:44:d4:06:d1:b8:fd:62:17:17:ae:7e:33: 66:fd:57:61:3d:c6:c1:ad:b4:1a:e7:b1:ee:e7:aa: d1:87:24:a1:e3:93:16:2b:93:87:28:26:09:b6:9d: db:f0:2c:18:b2:58:bc:89:bb:23:e3:92:49:8b:fc: 57:76:29:c6:c7:8d:f4:11:9b:1f:73:3f:14:d9:a8: d0:92:c4:81:96:cf:24:02:17:0f:6e:90:a7:86:b5: 5c:f2:5c:a0:5c:aa:62:03:37:f0:44:33:67:1e:6b: a4:a0:53:32:70:7b:cb:c3:1d:4d:46:41:38:25:bd: ea:6f:a4:71:b0:e2:f4:7b:11:aa:6e:77:3d:65:b4: 72:05:05:a0:1e:35:2d:08:54:16:f4:14:19:15:1b: 1a:06:35:1f:19:75:e7:f7:0b:18:42:ba:8a:f1:94: b7:d2:52:78:c3:a3:3a:6c:74:2b:86:34:3b:5f:cc: d7:1b:4c:1e:e5:ae:e3:4b:f8:17:d9:b6:b7:f3:56: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:74:57:91:56:C8:72:1C:7F:8C:E7:AA:A5:E0:30:CD:8A:D6:21:3A X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a0:a4:e9:53:a5:65:27:0f:78:76:09:b0:5f:73:f2:9e:33: 6f:92:0d:38:5c:4e:33:c7:30:f1:78:10:ed:2b:bb:cf:1b:62: dc:fb:eb:cd:a8:20:bb:dd:04:2b:cb:4a:ca:c4:0a:2e:68:5b: 44:7e:d1:d2:1f:ee:c6:57:96:a0:ab:44:69:3b:4a:54:e4:f7: d9:61:72:af:4e:16:a7:45:13:94:85:5d:96:61:5f:73:02:fd: 03:f3:2c:71:b2:0f:4f:f3:57:e0:11:9b:15:8b:8f:15:3f:39: a5:99:a4:13:06:b5:48:8b:2b:59:c0:c0:2d:31:fa:04:2b:b2: b5:d9:0c:7f:cb:0b:15:f0:26:1c:0b:7c:0e:57:1f:05:17:78: 58:4f:91:85:b9:51:8b:0a:0c:5d:9a:ec:ff:8f:e7:f6:90:ef: d1:7d:f2:d3:a9:19:9b:c1:4b:f0:fe:58:8c:00:8b:45:83:56: ab:07:9d:24:15:12:07:67:b4:8b:21:ca:16:f9:9a:76:5c:cd: 04:59:c9:64:66:71:48:14:67:c8:99:5a:49:fb:9e:19:c5:b5: 68:bc:e7:69:36:9e:cf:37:88:b1:11:82:89:39:61:42:ba:df: 92:68:fd:53:60:21:cc:c3:b6:de:f1:f2:ce:86:21:57:92:94: cf:cb:f1:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjQxMTIyMTkzOTM5WhcNMjQxMTI5MTkzOTM5WjAYMRYwFAYD VQQDEw02NzQwZGRmYy1lOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpCfzoETyl6LFTOijUPCj0GyfvVx7iW25K7z7l1NIsDWyF44bgqKV/xA8Eh2 rPIiHzIg3r7VWUp994sxyQ1E1AbRuP1iFxeufjNm/VdhPcbBrbQa57Hu56rRhySh 45MWK5OHKCYJtp3b8CwYsli8ibsj45JJi/xXdinGx430EZsfcz8U2ajQksSBls8k AhcPbpCnhrVc8lygXKpiAzfwRDNnHmukoFMycHvLwx1NRkE4Jb3qb6RxsOL0exGq bnc9ZbRyBQWgHjUtCFQW9BQZFRsaBjUfGXXn9wsYQrqK8ZS30lJ4w6M6bHQrhjQ7 X8zXG0we5a7jS/gX2ba381ZYYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx0V5FW yHIcf4znqqXgMM2K1iE6MB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAoKTpU6VlJw94dgmwX3PynjNvkg04XE4zxzDxeBDtK7vPG2Lc++vN qCC73QQry0rKxAouaFtEftHSH+7GV5agq0RpO0pU5PfZYXKvThanRROUhV2WYV9z Av0D8yxxsg9P81fgEZsVi48VPzmlmaQTBrVIiytZwMAtMfoEK7K12Qx/ywsV8CYc C3wOVx8FF3hYT5GFuVGLCgxdmuz/j+f2kO/RffLTqRmbwUvw/liMAItFg1arB50k FRIHZ7SLIcoW+Zp2XM0EWclkZnFIFGfImVpJ+54ZxbVovOdpNp7PN4ixEYKJOWFC ut+SaP1TYCHMw7be8fLOhiFXkpTPy/F1 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org