$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: NLKzvShlG+obuAkox26jTDCQTLyqyTEjBZ7T+etpMm0= Subject key identifier: F9:D9:64:17:D9:4D:E5:F0:F4:32:B6:29:73:44:4E:0E:E2:BE:2A:65 Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 0218 Signing time: Sat 23 Nov 2024 01:31:07 +0000 Manifest this update: Sat 23 Nov 2024 01:31:07 +0000 Manifest next update: Sat 30 Nov 2024 01:31:07 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: cjP6P2GbxfzGr1aO458XhWO/GceO6qi6a9yCyKZt8N4=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: +qGeYJ79wvR0PdN91NY3rl/FLbIL0ABFLzdMSwQ0Nxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: Nov 23 01:31:07 2024 GMT Not After : Nov 30 01:31:07 2024 GMT Subject: CN=6741305b-7ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:1a:ba:26:cc:4b:68:a3:a7:cb:45:6c:86: 5d:23:99:d6:d8:c0:e6:1f:d3:9f:34:b4:72:f0:f3: 06:bb:01:d8:d1:c0:a9:bc:4a:a6:fd:2a:16:67:d9: 98:ec:50:f9:01:11:ff:f9:37:31:c4:e7:16:e3:b1: 59:88:85:b4:69:bd:cc:fd:e9:b3:08:8f:ec:9c:9a: 17:44:94:36:5b:3d:03:16:5c:34:aa:8b:f9:ee:96: d7:75:33:45:27:ac:2a:2a:65:a0:8c:99:8c:6e:b6: 64:ed:07:28:10:15:fb:cc:0a:d0:ef:70:37:0b:b6: 94:5b:94:c4:00:87:92:bb:3f:44:6d:7d:e1:8a:6f: c4:19:f7:96:51:de:7b:86:b2:10:53:94:76:f3:be: a6:19:a2:19:cf:fb:98:7c:85:1d:6d:10:6f:16:dc: 78:c8:50:48:c1:99:f7:73:b1:7b:01:a8:ee:be:33: 3e:d1:1a:57:41:3c:93:7d:b0:8f:dc:53:28:7c:7d: 63:81:31:1a:10:62:99:3f:05:c7:29:52:c1:66:ba: 66:d8:0e:d7:25:01:18:0f:b8:d2:d2:5b:82:d0:d4: 46:97:78:31:30:41:77:fc:54:b5:d3:67:ba:b1:5b: dd:38:9c:13:25:2b:fe:12:81:3f:4e:d9:73:6c:d5: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:64:17:D9:4D:E5:F0:F4:32:B6:29:73:44:4E:0E:E2:BE:2A:65 X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:96:70:4b:9b:e3:34:98:18:94:db:be:a0:b0:a9:e0:5d: 62:e9:f1:bc:8c:aa:f3:92:c4:56:4b:ad:9e:5e:f1:69:c6:56: 00:36:ae:d7:c8:fa:b9:22:e9:b6:19:25:33:cf:7c:70:45:8b: 83:61:7d:08:8b:54:57:f0:ad:20:df:a4:de:e9:40:10:b2:e6: 6f:75:8a:0a:eb:ef:26:ab:ed:b1:df:f6:1f:87:8b:a0:c9:fa: 14:0a:db:6c:fc:4f:66:17:94:fe:80:2d:cb:d7:3a:44:46:f5: ce:ed:cd:60:94:fd:e9:6f:4a:17:4b:22:0e:c9:75:d5:9d:b3: 12:cb:63:f6:03:ea:1c:41:12:6e:f2:43:d9:22:d7:5c:0f:cd: 49:0a:31:75:29:43:ae:8e:83:59:00:6f:2c:04:0f:4f:1b:9a: d6:0a:b7:85:e7:2c:f0:70:b9:e8:c0:58:f7:0c:8a:c5:ac:62: 30:37:0a:c5:6e:4c:f2:c7:d1:26:82:ce:27:18:c1:34:6e:23: d4:29:fc:03:47:c6:ea:9a:d0:ff:19:9f:fa:7a:47:e5:86:af: 5a:90:44:e7:51:86:0f:a1:06:6f:63:d3:01:cc:d0:03:ba:da: 44:c5:22:fd:2b:c9:3c:04:b3:70:2c:f8:52:09:5e:4b:b7:8a: 61:5d:d6:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjQxMTIzMDEzMTA3WhcNMjQxMTMwMDEzMTA3WjAYMRYwFAYD VQQDEw02NzQxMzA1Yi03YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuycauibMS2ijp8tFbIZdI5nW2MDmH9OfNLRy8PMGuwHY0cCpvEqm/SoWZ9mY 7FD5ARH/+TcxxOcW47FZiIW0ab3M/emzCI/snJoXRJQ2Wz0DFlw0qov57pbXdTNF J6wqKmWgjJmMbrZk7QcoEBX7zArQ73A3C7aUW5TEAIeSuz9EbX3him/EGfeWUd57 hrIQU5R2876mGaIZz/uYfIUdbRBvFtx4yFBIwZn3c7F7AajuvjM+0RpXQTyTfbCP 3FMofH1jgTEaEGKZPwXHKVLBZrpm2A7XJQEYD7jS0luC0NRGl3gxMEF3/FS102e6 sVvdOJwTJSv+EoE/TtlzbNW2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnZZBfZ TeXw9DK2KXNETg7iviplMB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMJZwS5vjNJgYlNu+oLCp4F1i6fG8jKrzksRWS62eXvFpxlYANq7X yPq5Ium2GSUzz3xwRYuDYX0Ii1RX8K0g36Te6UAQsuZvdYoK6+8mq+2x3/Yfh4ug yfoUCtts/E9mF5T+gC3L1zpERvXO7c1glP3pb0oXSyIOyXXVnbMSy2P2A+ocQRJu 8kPZItdcD81JCjF1KUOujoNZAG8sBA9PG5rWCreF5yzwcLnowFj3DIrFrGIwNwrF bkzyx9Emgs4nGME0biPUKfwDR8bqmtD/GZ/6ekflhq9akETnUYYPoQZvY9MBzNAD utpExSL9K8k8BLNwLPhSCV5Lt4phXdZs -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org