$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: iKvnBsmtppQYFXjs5P6Ab3u5qIw3gWIIQXk/7qoloZg= Subject key identifier: C3:C4:67:7E:53:48:44:5E:13:A3:33:EC:54:0B:36:9C:71:62:09:50 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0296 Signing time: Thu 21 Nov 2024 01:09:29 +0000 Manifest this update: Thu 21 Nov 2024 01:09:28 +0000 Manifest next update: Thu 28 Nov 2024 01:09:28 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: uUQmuZZOZDgDH9SWCfRHMZPck5dCIhCEBEnyYW8XCsA=) 2: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: sevUQyUvjPMF9HveqY7x9H8RZ5glkYZorL+cw/BRRwM=) 3: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: uI2iVhse4NRPkVsaBb9fpYUDi8yOrHFRhjYHI177+tY=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: mCano6KzUueBvfY9Xz4WTDEar7H4dlef5+Le1qM7SBU=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 5cFE2+DHvyy580H7GLu07rQpzF29u5j14knEntbBKDA=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: Vw3MBjP1RuU5tdxt+beNhLzaUjT0qpNMidEvPuJBqP8=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: J/wY1oGi+dPrVbFhpoWx/8vt8JGgbXNBe9bqBycipxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Nov 21 01:09:28 2024 GMT Not After : Nov 28 01:09:28 2024 GMT Subject: CN=673e8848-7acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:29:a2:72:46:77:9a:59:8c:ca:f1:e6:2c:e7: 54:eb:0f:05:5f:c5:36:44:32:b5:74:61:81:54:f2: 9a:9c:7a:46:91:fd:95:75:4e:16:a3:00:ce:3c:d4: 99:99:d5:5c:4e:c1:fa:a1:8d:1c:21:bf:72:6f:65: 24:62:3b:c4:f1:74:79:80:c5:b4:ba:a6:24:de:13: d4:78:bb:e7:e8:ec:c9:ec:d8:30:71:6a:91:81:4b: 49:bc:2f:d0:a4:ac:6f:20:8c:5d:60:f8:ab:a1:f3: c1:1e:79:33:c0:e5:9c:cd:81:ce:4c:64:92:7d:5d: 1d:8f:6f:27:bd:4d:3c:ae:69:ac:a4:38:63:93:e0: 9d:59:71:00:06:f8:11:87:71:f4:43:16:ee:c8:41: 57:79:f1:b5:0a:59:f9:10:1a:8d:84:e5:3e:de:a9: 57:d3:ac:a6:69:22:a9:d0:dc:3a:21:bc:f8:5d:8f: 9a:e5:cd:99:df:82:90:1b:d7:8c:61:9e:c5:46:8d: fc:fe:4b:4d:37:f9:10:87:34:16:f0:f3:c5:19:07: 9b:de:3d:42:21:19:2b:c7:e5:6f:18:c0:9a:8e:ce: dd:3b:a0:8a:24:cf:e9:62:33:c3:3a:ba:17:42:f5: cd:cf:8a:3d:30:77:a7:17:ce:ba:c6:6f:57:ec:fb: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:67:7E:53:48:44:5E:13:A3:33:EC:54:0B:36:9C:71:62:09:50 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:18:6c:91:ce:a2:a7:54:13:50:46:e1:65:dc:6a:cf:98: b7:a7:21:0b:e2:9b:c1:37:e4:35:6e:03:63:c9:db:90:79:c7: f9:6e:19:ab:59:80:92:8e:e0:bb:26:41:07:3d:c3:6b:df:c8: a9:81:a7:16:1a:19:40:b5:5d:ed:72:88:fe:af:60:43:89:92: be:54:6e:36:e3:f1:21:db:fc:d8:18:b3:d7:59:72:90:48:08: 6b:81:b9:50:60:7e:b5:41:25:0f:16:a9:41:ea:b2:89:a9:8a: 35:28:ba:0e:e4:c2:c0:6d:d0:11:3d:be:8d:30:33:7e:a6:7c: 98:c5:b5:d3:cd:75:62:0a:64:d2:a2:ee:9b:49:d2:53:39:2a: 95:f9:3a:1d:70:e6:4b:01:bb:96:da:47:b5:21:86:59:9d:95: 90:fc:ac:06:7d:f2:4d:9d:85:b3:5a:99:1e:e1:2b:f6:61:dd: c1:d6:ec:5b:1a:1d:f3:a8:08:1d:a5:bb:c0:07:cb:4a:ed:4e: 41:59:fe:c1:c7:7c:fe:d3:9c:b0:c2:79:89:64:a7:29:d5:2b: 28:38:e0:ad:4f:e6:2f:1c:31:dc:fd:96:ed:c2:aa:e5:1d:c2: 05:ce:71:8d:a6:cf:0d:8a:2f:3f:3c:78:96:2a:e2:59:32:24: 96:4d:33:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjQxMTIxMDEwOTI4WhcNMjQxMTI4MDEwOTI4WjAYMRYwFAYD VQQDEw02NzNlODg0OC03YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ymickZ3mlmMyvHmLOdU6w8FX8U2RDK1dGGBVPKanHpGkf2VdU4WowDOPNSZ mdVcTsH6oY0cIb9yb2UkYjvE8XR5gMW0uqYk3hPUeLvn6OzJ7NgwcWqRgUtJvC/Q pKxvIIxdYPirofPBHnkzwOWczYHOTGSSfV0dj28nvU08rmmspDhjk+CdWXEABvgR h3H0QxbuyEFXefG1Cln5EBqNhOU+3qlX06ymaSKp0Nw6Ibz4XY+a5c2Z34KQG9eM YZ7FRo38/ktNN/kQhzQW8PPFGQeb3j1CIRkrx+VvGMCajs7dO6CKJM/pYjPDOroX QvXNz4o9MHenF866xm9X7PsQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPEZ35T SEReE6Mz7FQLNpxxYglQMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg4hhskc6ip1QTUEbhZdxqz5i3pyEL4pvBN+Q1bgNjyduQecf5bhmr WYCSjuC7JkEHPcNr38ipgacWGhlAtV3tcoj+r2BDiZK+VG424/Eh2/zYGLPXWXKQ SAhrgblQYH61QSUPFqlB6rKJqYo1KLoO5MLAbdARPb6NMDN+pnyYxbXTzXViCmTS ou6bSdJTOSqV+TodcOZLAbuW2ke1IYZZnZWQ/KwGffJNnYWzWpke4Sv2Yd3B1uxb Gh3zqAgdpbvAB8tK7U5BWf7Bx3z+05ywwnmJZKcp1SsoOOCtT+YvHDHc/Zbtwqrl HcIFznGNps8Nii8/PHiWKuJZMiSWTTP4 -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org