$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: MfarDjjTEI2mPkXkLPhjAJpCyjmdxcFuLBKRIgguL/Q= Subject key identifier: F1:50:C4:78:C0:F4:EB:05:FC:3D:43:D1:F8:79:18:D8:AD:E0:35:91 Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: 80 Signing time: Thu 21 Nov 2024 04:50:01 +0000 Manifest this update: Thu 21 Nov 2024 04:50:00 +0000 Manifest next update: Thu 28 Nov 2024 04:50:00 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: bCNjqOvHa0cbbMAG+vi/1JiyuRDI1yKMyXPDAvYCL4E=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Nov 21 04:50:00 2024 GMT Not After : Nov 28 04:50:00 2024 GMT Subject: CN=673ebbf8-7e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:5d:29:2d:2f:3a:a8:d4:5e:d7:25:e0:36: 2f:0b:bb:80:7e:d7:e4:58:bb:bd:cd:b5:9b:53:82: 78:3b:a5:39:a4:51:18:38:ad:66:37:c7:d3:3a:12: 97:39:e7:03:06:ea:c8:23:a8:f4:5a:12:5d:48:e3: 95:fc:89:62:64:01:d7:d4:ba:9b:69:e2:15:22:ee: 66:eb:e5:0c:0f:97:39:0b:03:24:c4:0c:83:72:58: 8b:95:a5:3d:e0:f0:92:7d:a1:cd:d3:19:9c:bc:d0: dc:c7:85:53:49:ab:e6:ef:b8:35:90:a0:d9:9b:57: 45:76:2d:71:38:00:ba:a9:fe:e3:b1:22:2b:2f:99: 13:c1:e4:9a:68:b5:1e:fa:7e:1c:83:04:55:1a:75: 40:cf:62:60:03:d8:c9:9e:1a:9a:6a:87:b8:e5:74: 99:f0:fb:1e:d9:ac:f4:1c:59:ef:51:c5:38:42:c9: 64:37:83:7c:fb:bc:fc:22:0d:f8:ee:b6:f9:fe:0d: f2:8d:35:7d:e9:cc:38:14:cd:eb:46:aa:b9:96:26: 4d:2a:3a:dc:fd:e9:a8:f2:8f:41:83:84:f8:0a:0a: 9c:ab:4a:57:5e:e5:e5:a9:96:b7:01:78:d2:fd:88: 10:68:01:f2:39:09:a1:62:22:59:41:64:1d:ab:b5: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:C4:78:C0:F4:EB:05:FC:3D:43:D1:F8:79:18:D8:AD:E0:35:91 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:41:e4:53:fb:ef:64:63:e1:ed:b9:34:68:e5:f3:08:bb: 12:96:ed:97:21:41:bf:60:33:30:af:36:3f:94:22:a7:f6:b3: 9e:66:23:bc:e3:16:0b:14:38:49:5a:90:58:be:17:6d:cd:ab: d5:b0:ae:c4:64:80:3c:e2:2b:00:0f:3d:ba:df:3f:db:44:62: 54:87:d2:a4:b3:95:77:67:83:a5:68:bb:6c:46:44:a8:79:5b: c4:02:44:05:71:08:f3:18:0f:bf:8c:61:a0:be:aa:4a:3d:9b: 18:9f:1c:0f:b5:21:5c:d3:f1:a8:45:8c:3a:10:c1:da:4a:26: 76:d5:77:27:35:eb:c3:cc:32:44:ac:89:03:85:8a:ca:8d:81: 7b:6f:02:83:6e:cc:63:f4:30:a3:42:58:9c:16:32:54:04:a8: a6:a1:d9:98:13:28:91:fc:23:fc:40:a9:8b:cc:15:9b:bb:c2: 87:f7:10:18:8b:b0:20:bc:16:58:00:ef:cc:aa:e4:d6:d4:80: 73:0b:f4:e1:f5:94:da:a9:7a:19:60:c0:3e:ad:d4:14:25:f7: 5b:35:9b:8b:a7:bb:ea:af:35:16:97:1b:94:ae:70:63:7f:0b: 16:ef:72:11:84:f2:b7:38:e2:e2:53:08:16:f2:3e:cc:c5:00: bc:19:e9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjQxMTIxMDQ1MDAwWhcNMjQxMTI4MDQ1MDAwWjAYMRYwFAYD VQQDEw02NzNlYmJmOC03ZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdldKS0vOqjUXtcl4DYvC7uAftfkWLu9zbWbU4J4O6U5pFEYOK1mN8fTOhKX OecDBurII6j0WhJdSOOV/IliZAHX1LqbaeIVIu5m6+UMD5c5CwMkxAyDcliLlaU9 4PCSfaHN0xmcvNDcx4VTSavm77g1kKDZm1dFdi1xOAC6qf7jsSIrL5kTweSaaLUe +n4cgwRVGnVAz2JgA9jJnhqaaoe45XSZ8Pse2az0HFnvUcU4QslkN4N8+7z8Ig34 7rb5/g3yjTV96cw4FM3rRqq5liZNKjrc/emo8o9Bg4T4Cgqcq0pXXuXlqZa3AXjS /YgQaAHyOQmhYiJZQWQdq7UltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFQxHjA 9OsF/D1D0fh5GNit4DWRMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQUHkU/vvZGPh7bk0aOXzCLsSlu2XIUG/YDMwrzY/lCKn9rOeZiO8 4xYLFDhJWpBYvhdtzavVsK7EZIA84isADz263z/bRGJUh9Kks5V3Z4OlaLtsRkSo eVvEAkQFcQjzGA+/jGGgvqpKPZsYnxwPtSFc0/GoRYw6EMHaSiZ21XcnNevDzDJE rIkDhYrKjYF7bwKDbsxj9DCjQlicFjJUBKimodmYEyiR/CP8QKmLzBWbu8KH9xAY i7AgvBZYAO/MquTW1IBzC/Th9ZTaqXoZYMA+rdQUJfdbNZuLp7vqrzUWlxuUrnBj fwsW73IRhPK3OOLiUwgW8j7MxQC8Gek7 -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org