$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json) Hash identifier: HcmwnGEfmnstXK8oGunkDThWTGGld3WQhwHA7hcnPEg= Subject key identifier: FB:23:BE:BC:90:3D:34:97:79:AE:53:65:55:19:86:BE:30:57:97:E4 Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft Manifest number: 3D Signing time: Sat 23 Nov 2024 05:26:53 +0000 Manifest this update: Sat 23 Nov 2024 05:26:53 +0000 Manifest next update: Sat 30 Nov 2024 05:26:53 +0000 Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: 8T/duVXvY8d+Cef0gUnL0l/6amhMgy7zmENN8701EgA=) 2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Validity Not Before: Nov 23 05:26:53 2024 GMT Not After : Nov 30 05:26:53 2024 GMT Subject: CN=6741679d-1254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:bc:18:49:10:4f:88:b1:71:13:de:ce:6f: 2d:f1:1c:78:65:4c:2a:db:39:8e:07:db:82:39:1d: 39:9a:44:a0:4c:19:7f:ad:a8:a1:d3:86:54:e2:18: 43:5e:22:9f:fb:5c:fb:7d:5d:c9:ae:fc:20:da:bd: fe:10:b1:2e:02:53:df:13:c7:61:a0:30:19:16:97: 7a:fe:68:c3:fc:0d:69:58:10:a1:f5:7b:b7:99:cc: 25:3f:74:0b:1a:59:61:03:ed:04:56:69:f0:ae:72: fe:d2:72:01:70:af:d0:02:80:40:e0:00:cb:98:9d: 93:99:d0:96:5f:0c:81:d5:84:b4:04:af:a8:c1:42: e6:87:65:2e:61:5e:1c:8a:1c:37:fa:33:07:33:79: 87:a8:3c:08:b6:10:5c:d0:61:0f:4c:ec:c8:eb:99: fd:b6:c9:c4:9f:40:af:34:5a:e1:f4:b3:3a:53:78: 3d:19:b3:5c:96:bd:fb:d7:54:ff:67:cd:e1:7e:bf: fb:e1:ca:a9:a9:37:75:94:72:15:d6:79:ea:85:33: 91:f3:73:6e:a3:5b:a2:32:fd:91:5b:8a:c0:18:e5: 1f:98:87:2e:b3:31:60:e1:ab:d7:b9:94:68:21:ba: 68:18:80:ce:4c:44:6c:e4:c6:60:3e:fa:84:63:2a: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:BE:BC:90:3D:34:97:79:AE:53:65:55:19:86:BE:30:57:97:E4 X509v3 Authority Key Identifier: keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:10:91:25:f2:13:80:b6:fe:c2:54:cf:d8:94:b2:f3:e7:d6: 66:e2:ac:0d:d2:f3:e1:e5:d6:e9:cb:4d:26:21:40:a8:ad:7b: d9:f4:eb:ba:03:13:eb:22:30:3d:0b:f7:47:28:22:0d:59:c4: 45:ba:22:e5:5d:2d:a9:3a:09:99:39:ab:a9:36:5f:c2:97:f5: 7d:24:2c:98:91:f6:fe:21:46:ad:2b:f5:fd:ba:72:8c:42:87: 66:1c:0b:83:b8:55:02:b4:e2:c6:db:cb:95:8a:bc:9e:9b:3a: 0e:4d:3b:75:4f:c1:d5:66:5a:a6:bc:a8:e7:2b:e8:7a:af:fc: 61:87:63:cd:b0:90:fd:73:11:ca:d0:90:8d:65:5e:3d:f3:9c: cb:cb:7f:f4:b2:36:e8:ea:a6:0f:ba:ba:27:36:40:46:f5:e1: 61:18:5f:d8:7a:62:9a:c8:ab:92:88:e3:df:07:1d:49:8a:5c: 48:7e:4a:b8:68:d7:58:05:a0:7c:24:17:51:b0:9e:20:2f:fb: 72:f9:a4:7d:98:50:ef:e3:7e:30:88:17:60:1a:91:36:d8:cd: f6:29:4c:e3:54:07:bf:b0:23:8b:3e:a2:9e:fb:0d:b6:1e:52: d9:4d:c4:0c:31:9c:e3:bf:1a:0e:c0:8e:25:0c:d3:b7:07:25: 37:5b:db:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzdCNDExMC8GA1UEBRMoMjRCMTBDMzFENjkxRjg0NUZDRUFFM0ZFMzIzMUJFNTYw MDJCQUM2QTAeFw0yNDExMjMwNTI2NTNaFw0yNDExMzAwNTI2NTNaMBgxFjAUBgNV BAMTDTY3NDE2NzlkLTEyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDONLwYSRBPiLFxE97Oby3xHHhlTCrbOY4H24I5HTmaRKBMGX+tqKHThlTiGENe Ip/7XPt9Xcmu/CDavf4QsS4CU98Tx2GgMBkWl3r+aMP8DWlYEKH1e7eZzCU/dAsa WWED7QRWafCucv7ScgFwr9ACgEDgAMuYnZOZ0JZfDIHVhLQEr6jBQuaHZS5hXhyK HDf6MwczeYeoPAi2EFzQYQ9M7Mjrmf22ycSfQK80WuH0szpTeD0Zs1yWvfvXVP9n zeF+v/vhyqmpN3WUchXWeeqFM5Hzc26jW6Iy/ZFbisAY5R+Yhy6zMWDhq9e5lGgh umgYgM5MRGzkxmA++oRjKjHjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+yO+vJA9 NJd5rlNlVRmGvjBXl+QwHwYDVR0jBBgwFoAUJLEMMdaR+EX86uP+MjG+VgArrGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDN0I0LzFGMzIwQ0ZDNTVG MDExRUY5OUVCRDgyMEM0RjlBRTAyL0pMRU1NZGFSLUVYODZ1UC1NakctVmdBcnJH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkxFTU1kYVItRVg4NnVQLU1qRy1WZ0FyckdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD N0I0LzFGMzIwQ0ZDNTVGMDExRUY5OUVCRDgyMEM0RjlBRTAyL0pMRU1NZGFSLUVY ODZ1UC1NakctVmdBcnJHby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4QkSXyE4C2/sJUz9iUsvPn1mbirA3S8+Hl1unLTSYhQKite9n067oD E+siMD0L90coIg1ZxEW6IuVdLak6CZk5q6k2X8KX9X0kLJiR9v4hRq0r9f26coxC h2YcC4O4VQK04sbby5WKvJ6bOg5NO3VPwdVmWqa8qOcr6Hqv/GGHY82wkP1zEcrQ kI1lXj3znMvLf/SyNujqpg+6uic2QEb14WEYX9h6YprIq5KI498HHUmKXEh+Srho 11gFoHwkF1GwniAv+3L5pH2YUO/jfjCIF2AakTbYzfYpTONUB7+wI4s+op77DbYe UtlNxAwxnOO/Gg7AjiUM07cHJTdb2+s= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org