$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json) Hash identifier: 4o/30Jh5N7IRTlMdLpZZQYiu6qf6VRX95ols4FbYOqk= Subject key identifier: 3E:C7:5E:07:A9:E5:F3:6C:55:7E:F5:A9:13:FD:A7:4B:23:43:B0:F0 Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft Manifest number: 02C2 Signing time: Sat 23 Nov 2024 00:59:45 +0000 Manifest this update: Sat 23 Nov 2024 00:59:45 +0000 Manifest next update: Sat 30 Nov 2024 00:59:45 +0000 Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: CAGSlTOpmGERitw9bfG7nqWPfZcLFbSfodJVTVaGHP8=) 2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: 86l1R+M09/2NPXx9I8sqm1xbxQxFvP0FLDSgRGwtfyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Validity Not Before: Nov 23 00:59:45 2024 GMT Not After : Nov 30 00:59:45 2024 GMT Subject: CN=67412901-4dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:9b:2f:3f:7c:fa:de:24:07:89:96:9e:5e: 21:e0:59:58:40:a6:88:7d:9f:3a:25:37:a0:eb:6e: 1c:52:3b:b0:7b:f6:17:64:2c:31:ea:2a:a5:49:1d: 0d:9b:9e:0d:8b:4d:7a:1a:19:7c:1b:04:ea:ec:bd: ec:2e:d1:a9:01:40:12:16:9d:74:94:46:cf:63:ae: a6:22:d9:f3:04:a0:39:e8:bb:83:29:4a:fe:f4:86: 0e:da:c4:f8:29:63:1a:b9:30:dc:22:f2:61:2e:cf: d1:46:5d:68:58:6c:79:4a:4b:be:8b:ca:b4:3e:af: e2:0b:12:fa:cf:1c:d7:64:09:b7:c1:e8:02:85:a2: c8:e5:bc:fd:b0:75:00:eb:79:d0:69:ec:38:29:3d: ea:93:9b:78:47:9f:f6:5c:43:09:0a:f1:db:8b:c3: 16:18:02:b0:07:24:31:3f:2a:3f:41:eb:b0:b3:42: 31:58:26:ca:8e:48:de:dd:65:fc:0b:36:5a:53:8d: 00:7a:61:e1:e9:87:e2:0a:c3:ce:0d:2c:4d:24:09: 2b:01:36:cf:6a:d9:39:59:9c:5f:12:15:e1:17:b0: 4a:d1:6d:8b:02:7f:5a:58:d9:c4:38:86:84:33:5f: ca:1f:58:0c:7c:97:f6:e0:ca:19:06:38:6c:4b:e9: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C7:5E:07:A9:E5:F3:6C:55:7E:F5:A9:13:FD:A7:4B:23:43:B0:F0 X509v3 Authority Key Identifier: keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:98:1f:e6:0e:d8:78:f4:b3:c1:12:3f:1f:8e:b2:18:14:11: 75:a1:3f:b5:93:f2:6b:fb:85:80:67:5e:7a:93:b7:db:36:52: 92:4a:3e:1d:80:7d:b6:90:f7:cf:54:3a:a4:6e:72:d9:e1:6b: 13:78:8c:db:f5:5e:a4:15:5a:ab:b0:ae:ce:78:4f:83:ae:a7: 40:97:d9:88:7f:1f:0d:d5:e4:b5:f5:bb:bf:32:b2:44:3a:27: 28:53:fa:15:bf:11:8b:e6:e1:24:bc:0e:6b:a9:86:65:2f:39: 55:61:4a:93:b2:4a:fd:7c:38:cc:ae:d2:9e:89:1d:ec:ac:3b: fe:34:91:bd:07:08:a8:fc:a3:fc:fe:cb:91:ec:b3:55:8f:43: 9b:54:cd:25:64:3a:83:98:5a:8d:99:a4:4a:2d:1e:02:f8:1e: ef:1a:bd:33:99:c7:3b:89:37:d3:8b:d7:96:3a:78:1c:9b:c9: cf:74:73:42:52:e9:13:da:12:e4:20:e8:be:e6:27:fb:81:3d: aa:4c:eb:66:96:93:69:a2:d6:17:3b:f6:84:e7:59:b2:94:7b: 8b:5f:e2:2b:ae:d5:e3:0d:f3:f3:a7:95:5f:6d:20:5a:49:5c: 98:1c:95:6b:a3:74:14:dd:f9:4d:58:96:3b:95:a4:3b:50:e8: 83:1f:c1:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE REJGQjc1QUIwHhcNMjQxMTIzMDA1OTQ1WhcNMjQxMTMwMDA1OTQ1WjAYMRYwFAYD VQQDEw02NzQxMjkwMS00ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jSbLz98+t4kB4mWnl4h4FlYQKaIfZ86JTeg624cUjuwe/YXZCwx6iqlSR0N m54Ni016Ghl8GwTq7L3sLtGpAUASFp10lEbPY66mItnzBKA56LuDKUr+9IYO2sT4 KWMauTDcIvJhLs/RRl1oWGx5Sku+i8q0Pq/iCxL6zxzXZAm3wegChaLI5bz9sHUA 63nQaew4KT3qk5t4R5/2XEMJCvHbi8MWGAKwByQxPyo/Qeuws0IxWCbKjkje3WX8 CzZaU40AemHh6YfiCsPODSxNJAkrATbPatk5WZxfEhXhF7BK0W2LAn9aWNnEOIaE M1/KH1gMfJf24MoZBjhsS+k3DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7HXgep 5fNsVX71qRP9p0sjQ7DwMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mB/mDth49LPBEj8fjrIYFBF1oT+1k/Jr+4WAZ156k7fbNlKSSj4d gH22kPfPVDqkbnLZ4WsTeIzb9V6kFVqrsK7OeE+DrqdAl9mIfx8N1eS19bu/MrJE OicoU/oVvxGL5uEkvA5rqYZlLzlVYUqTskr9fDjMrtKeiR3srDv+NJG9Bwio/KP8 /suR7LNVj0ObVM0lZDqDmFqNmaRKLR4C+B7vGr0zmcc7iTfTi9eWOngcm8nPdHNC UukT2hLkIOi+5if7gT2qTOtmlpNpotYXO/aE51mylHuLX+IrrtXjDfPzp5VfbSBa SVyYHJVro3QU3flNWJY7laQ7UOiDH8H3 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org