$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: Z1pcPQpa2J5L34hiFAT5KENRF7ei4o/x9/vx6/MUCPo= Subject key identifier: 5B:E2:95:FF:B6:37:81:93:97:19:3D:97:D1:9A:9D:AA:C8:08:32:A2 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 3463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 343F Signing time: Fri 22 Nov 2024 14:54:49 +0000 Manifest this update: Fri 22 Nov 2024 14:54:49 +0000 Manifest next update: Fri 29 Nov 2024 14:54:49 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: VpI/0JBp0tEvqTMZaTRbfUUto1c/u290547g40i2/j8=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: XcDFXjlfUG7gat5Mn2G5GUkU6QTMu4zYAY0E0LcWZ/I=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: PxQFBDt3MlLgfKc8KqwYwfOpnira0VBqCMOA9nowVeQ=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: rZN8MBWyEzHwpv4iO0Yw1pt5Vq4fsdDOBU015oji+0s=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: Tw8o51QsKWxSHOjK/psQ5MTWchWVnaRSIbAtlFB/kL8=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: qoFcoGLH5rF61ICxkb9LlHSey20FafRf8pg6MY0OMrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13411 (0x3463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Nov 22 14:54:49 2024 GMT Not After : Nov 29 14:54:49 2024 GMT Subject: CN=67409b39-2c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:57:0e:01:22:95:a2:14:8d:83:c7:49:54:40: c3:c0:73:f3:1b:08:9f:0d:79:f4:ca:17:c7:e0:70: d7:39:7d:17:c1:0b:e5:0e:17:87:aa:74:32:ec:2a: 8c:61:e0:cf:95:f9:e8:73:b0:cf:15:11:5b:24:c5: fb:80:c4:f1:50:7d:2b:7f:58:f6:6d:4d:09:83:57: 71:41:0b:32:a8:f6:f1:2e:4c:36:e0:52:31:69:16: 00:1f:23:12:81:ad:00:c7:9a:d9:c0:e2:c8:8c:e5: b0:14:08:76:03:70:31:5a:5d:b8:f2:a3:64:b8:06: bd:74:3d:8f:dd:bb:59:30:78:68:e2:14:ea:7b:69: 9c:70:f0:14:e7:0e:54:50:84:d6:7d:84:16:d4:1b: 63:fd:cf:2b:5f:44:d9:82:6c:67:3b:93:9e:a4:a0: 98:be:fd:de:0a:b2:e8:1f:11:a7:42:61:62:13:dc: 51:bf:1b:40:50:48:ca:d0:fd:a5:16:d4:d0:5b:da: c0:f1:64:92:f3:1e:e2:d0:7b:fd:14:9a:6d:ee:5a: 63:3e:8d:b6:01:cf:c4:f5:86:03:3b:c1:3f:6a:aa: c6:26:96:d4:5f:9f:b3:ec:c8:e3:70:b8:ad:8b:a1: f4:d9:22:d7:d8:a2:e3:8c:33:29:84:d3:2c:27:a9: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:95:FF:B6:37:81:93:97:19:3D:97:D1:9A:9D:AA:C8:08:32:A2 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0e:56:a4:36:0a:f7:ee:83:0e:07:8e:3f:08:af:5f:33:ff: f3:2a:76:a7:df:87:b6:2f:ce:af:c0:93:ac:95:14:ea:fd:4f: c1:91:ad:ba:b9:10:9e:c3:ea:88:af:3f:aa:b1:c9:7c:1f:ff: 31:0b:08:46:89:2f:8a:c5:bd:33:c1:61:a2:46:71:fd:a7:5e: 2b:3a:88:92:4a:74:15:c9:d1:d9:54:eb:b7:7a:ac:9a:a8:79: 41:f8:55:a5:99:16:77:50:2e:bd:a1:ed:f9:81:f7:90:85:cf: ec:98:18:ef:8e:2a:6b:e0:43:20:30:90:64:d5:25:67:01:07: 4b:47:86:c7:d9:6e:d3:44:24:4e:af:54:5d:fd:09:31:ce:24: 7b:31:6b:3d:0c:81:c9:40:02:c5:bb:da:59:f6:6d:ab:01:be: 5f:fc:78:f1:e6:4c:03:3e:48:2c:5c:07:e0:f2:dd:80:35:43: 02:48:c9:4b:15:73:44:8b:d6:43:ac:99:9d:f3:c6:bc:51:4f: 2b:ad:5b:81:f2:99:09:94:f7:0e:78:73:c9:21:52:b0:64:c8: 2e:5a:46:77:47:f8:35:e5:05:ed:8f:09:9b:14:16:fb:0c:a2: 66:54:bc:86:59:d2:38:94:f2:e8:76:03:3e:54:f2:bb:5b:8c: 0f:61:bc:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjQxMTIyMTQ1NDQ5WhcNMjQxMTI5MTQ1NDQ5WjAYMRYwFAYD VQQDEw02NzQwOWIzOS0yYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61cOASKVohSNg8dJVEDDwHPzGwifDXn0yhfH4HDXOX0XwQvlDheHqnQy7CqM YeDPlfnoc7DPFRFbJMX7gMTxUH0rf1j2bU0Jg1dxQQsyqPbxLkw24FIxaRYAHyMS ga0Ax5rZwOLIjOWwFAh2A3AxWl248qNkuAa9dD2P3btZMHho4hTqe2mccPAU5w5U UITWfYQW1Btj/c8rX0TZgmxnO5OepKCYvv3eCrLoHxGnQmFiE9xRvxtAUEjK0P2l FtTQW9rA8WSS8x7i0Hv9FJpt7lpjPo22Ac/E9YYDO8E/aqrGJpbUX5+z7MjjcLit i6H02SLX2KLjjDMphNMsJ6ljOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvilf+2 N4GTlxk9l9GanarICDKiMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DlakNgr37oMOB44/CK9fM//zKnan34e2L86vwJOslRTq/U/Bka26 uRCew+qIrz+qscl8H/8xCwhGiS+Kxb0zwWGiRnH9p14rOoiSSnQVydHZVOu3eqya qHlB+FWlmRZ3UC69oe35gfeQhc/smBjvjipr4EMgMJBk1SVnAQdLR4bH2W7TRCRO r1Rd/QkxziR7MWs9DIHJQALFu9pZ9m2rAb5f/Hjx5kwDPkgsXAfg8t2ANUMCSMlL FXNEi9ZDrJmd88a8UU8rrVuB8pkJlPcOeHPJIVKwZMguWkZ3R/g15QXtjwmbFBb7 DKJmVLyGWdI4lPLodgM+VPK7W4wPYbwk -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org