$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: RAo0gSlxhQPrd9lAHlMfvJe30AhXM1Fu1iapdQQrTwY= Subject key identifier: EE:12:5C:DC:AC:57:43:63:6A:76:D5:4D:A5:2A:47:94:2F:98:34:34 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: 52 Signing time: Mon 25 Nov 2024 05:07:35 +0000 Manifest this update: Mon 25 Nov 2024 05:07:35 +0000 Manifest next update: Mon 02 Dec 2024 05:07:35 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: wIV0ZJXGbZr7a8NoT+RIiB16aG7hnSlXrqNkJql4zdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Nov 25 05:07:35 2024 GMT Not After : Dec 2 05:07:35 2024 GMT Subject: CN=67440617-5644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:d4:f6:0a:19:01:01:91:1c:5a:eb:d7:c2: 7c:f9:6a:c2:5c:27:36:2e:15:43:f9:83:9d:b7:c4: 5e:1f:6f:9b:39:68:cd:b6:c3:e8:a2:5e:99:ee:7e: 9b:c0:71:bb:bb:80:bc:80:47:ad:28:1e:23:67:2b: 5f:b1:d9:8a:e4:96:ee:3a:83:eb:0e:33:e5:82:9e: 5b:6a:01:4c:f0:6d:85:0e:e0:21:f7:dc:0b:8f:5e: 03:55:a1:59:d1:a8:bd:ef:e1:45:be:12:7b:ca:d9: 30:10:17:ee:b7:34:bf:52:f4:5d:0d:3b:16:a1:4b: 58:2c:3e:ec:79:5d:f0:fc:e5:bf:9a:41:56:a7:fa: 34:3a:4b:c3:92:89:3d:82:7d:52:4f:1e:1e:13:09: aa:45:86:73:c2:fb:ad:70:79:ca:85:84:a5:e2:45: fd:6f:90:7d:15:4e:8a:b9:7e:7d:d8:c1:64:f3:a3: 52:fc:2a:0a:f5:02:24:5c:99:36:46:dc:ff:75:78: 24:cb:56:24:f1:42:0a:b7:b3:0d:c1:c8:3a:1a:a9: 00:b8:92:fb:33:f5:b1:bc:bc:7d:6e:fc:ec:2d:fd: 52:7c:f0:fa:78:ca:d6:f9:a6:1b:39:15:6a:f5:81: b1:14:ea:bb:78:df:59:2a:a3:34:49:12:1e:68:c2: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:5C:DC:AC:57:43:63:6A:76:D5:4D:A5:2A:47:94:2F:98:34:34 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:49:70:eb:30:dd:5d:7d:e1:95:1b:13:0a:d0:35:c1:48:9e: ee:6c:a2:bc:a7:20:84:73:a1:a9:82:83:dd:c5:13:f0:c9:1a: ad:94:50:b7:cb:8d:d3:c6:c5:62:6c:dd:6e:28:f8:9d:67:1d: 32:d0:f6:91:3b:50:9c:14:19:ee:b1:09:e3:db:b8:55:0f:bd: c8:be:d7:31:fb:f4:f1:70:2a:da:52:78:c2:bc:5b:6a:d2:f3: 2d:9c:56:6b:3f:e6:13:7e:fe:42:a2:5b:a4:9c:f1:c5:6e:08: 3a:61:15:3b:5e:3b:c4:2b:b8:37:58:fb:ff:5e:79:34:84:6e: d6:83:35:a4:35:cb:70:86:c0:3c:6c:66:c2:f4:10:2e:16:e2: 62:e9:d8:64:e8:7c:f2:d2:ba:4f:7a:40:38:3b:e6:08:d7:f9: 81:76:c3:03:96:4e:1c:6a:33:d3:62:59:2b:b8:a1:7c:b8:e0: 61:42:e9:54:72:bd:d1:e4:97:b2:ba:37:d0:cb:77:1e:81:a5: 01:be:7b:58:26:e3:07:a0:58:80:9f:47:e1:ba:fa:0c:61:a0: 07:d0:59:2f:15:db:f8:0f:a5:e1:51:a0:c2:c8:20:4c:c5:d6: 57:f6:8b:e5:c3:f5:01:61:93:a4:fd:40:76:b0:ed:e1:11:b1: 45:89:05:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDlDMTExMC8GA1UEBRMoMjU4MTdGOEEwNTkxMkUyRDZCRDU5QkVGMUY5NTEzN0U5 M0RDOTkzMzAeFw0yNDExMjUwNTA3MzVaFw0yNDEyMDIwNTA3MzVaMBgxFjAUBgNV BAMTDTY3NDQwNjE3LTU2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgpdT2ChkBAZEcWuvXwnz5asJcJzYuFUP5g523xF4fb5s5aM22w+iiXpnufpvA cbu7gLyAR60oHiNnK1+x2Yrklu46g+sOM+WCnltqAUzwbYUO4CH33AuPXgNVoVnR qL3v4UW+EnvK2TAQF+63NL9S9F0NOxahS1gsPux5XfD85b+aQVan+jQ6S8OSiT2C fVJPHh4TCapFhnPC+61wecqFhKXiRf1vkH0VToq5fn3YwWTzo1L8Kgr1AiRcmTZG 3P91eCTLViTxQgq3sw3ByDoaqQC4kvsz9bG8vH1u/Owt/VJ88Pp4ytb5phs5FWr1 gbEU6rt431kqozRJEh5owpNvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7hJc3KxX Q2NqdtVNpSpHlC+YNDQwHwYDVR0jBBgwFoAUJYF/igWRLi1r1ZvvH5UTfpPcmTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0OUMxLzE0MzIzRDc0MkRE NTExRUY5RTUwNUU1REM0RjlBRTAyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21U TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSllGX2lnV1JMaTFyMVp2dkg1VVRmcFBjbVRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 OUMxLzE0MzIzRDc0MkRENTExRUY5RTUwNUU1REM0RjlBRTAyL0pZRl9pZ1dSTGkx cjFadnZINVVUZnBQY21UTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpJcOsw3V194ZUbEwrQNcFInu5sorynIIRzoamCg93FE/DJGq2UULfL jdPGxWJs3W4o+J1nHTLQ9pE7UJwUGe6xCePbuFUPvci+1zH79PFwKtpSeMK8W2rS 8y2cVms/5hN+/kKiW6Sc8cVuCDphFTteO8QruDdY+/9eeTSEbtaDNaQ1y3CGwDxs ZsL0EC4W4mLp2GTofPLSuk96QDg75gjX+YF2wwOWThxqM9NiWSu4oXy44GFC6VRy vdHkl7K6N9DLdx6BpQG+e1gm4wegWICfR+G6+gxhoAfQWS8V2/gPpeFRoMLIIEzF 1lf2i+XD9QFhk6T9QHaw7eERsUWJBX8= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:08 2024 by rpki-client on console-fra.rpki-client.org