$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft File: JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json) Hash identifier: HR5bHkxlnwpnW/chiD5fqO6fxyh1bw2prmQ+stuM+O8= Subject key identifier: 14:41:0F:7F:FA:DF:A3:55:B6:87:78:5A:AB:D4:0D:FA:53:F1:E6:3B Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 Certificate issuer: /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft Manifest number: 014B Signing time: Sat 23 Nov 2024 02:36:57 +0000 Manifest this update: Sat 23 Nov 2024 02:36:56 +0000 Manifest next update: Sat 30 Nov 2024 02:36:56 +0000 Files and hashes: 1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: UsBBwu+AozIBO5K+wNh3N+IQs1douU+sWAyjMPKggzs=) 2: 761318C4BCC011EDA67EF02DC4F9AE02.roa (hash: Vhi51G0kthQz1NserbBWgrRj7YKB/vMErCfRdd33dCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Validity Not Before: Nov 23 02:36:56 2024 GMT Not After : Nov 30 02:36:56 2024 GMT Subject: CN=67413fc9-3942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:5d:68:65:8a:ae:6c:4c:d2:10:4c:ba:b8: e3:f2:95:34:c3:35:b8:cc:81:1d:d1:3a:c0:9f:dc: f6:0b:d8:85:9c:86:99:f6:28:db:71:40:a1:fe:ea: c3:a5:a3:2d:07:cb:79:dd:27:5a:07:a1:5c:76:0c: 36:46:8f:2f:70:c1:2c:68:12:23:b1:5e:40:bb:f1: 5f:2c:1a:ea:e9:09:75:c1:9e:7d:6a:1e:46:11:93: 11:c9:3f:7a:23:33:fd:2f:1d:64:aa:d1:96:cf:ee: c4:04:1a:1e:21:a5:7d:79:ae:3f:d0:d8:78:eb:b6: ba:49:1a:07:44:1e:c8:af:b3:55:f2:40:db:46:31: a1:91:d1:16:95:cb:60:45:b6:8e:ea:01:b4:08:ea: 7c:2a:cd:86:3c:13:2c:7b:db:6d:5a:62:f3:fa:69: f1:3a:ca:f3:46:2f:d1:18:cb:e9:13:c2:e0:74:93: 66:c8:3c:e0:22:3f:0a:b6:61:dd:6b:07:b7:0a:a9: 75:75:94:b6:da:53:df:74:d8:d9:89:04:4d:df:e9: fe:3a:5f:39:3b:8d:7b:5c:90:e4:45:db:eb:dd:4b: 8d:71:e7:6a:f8:7d:17:fb:70:0f:5b:49:84:f5:d6: 43:b2:ea:5c:2f:e0:03:0e:f9:ce:26:ff:74:4c:83: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:0F:7F:FA:DF:A3:55:B6:87:78:5A:AB:D4:0D:FA:53:F1:E6:3B X509v3 Authority Key Identifier: keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:e2:ac:01:cd:45:c8:26:68:2e:ef:19:bf:af:e6:ae:51: 71:d3:fa:63:9e:ea:da:79:a5:79:69:32:c2:4f:c4:78:14:2f: e3:85:86:a8:06:02:2c:5f:7f:1c:52:cb:ad:d9:b2:d4:c9:73: 81:03:19:95:15:39:5b:f7:29:51:d8:a8:60:fa:43:e2:25:4e: 68:92:5d:12:b0:a4:d6:ce:58:46:db:c4:ef:0e:ca:cd:c7:38: de:ca:22:f4:f0:c2:c3:4b:ec:7c:9b:6f:c1:60:f5:61:be:b4: 51:74:93:64:05:49:66:9b:df:d3:46:03:0a:da:a6:62:89:ce: 77:8d:ff:25:b8:63:2d:f2:cf:3e:50:95:19:1b:dd:26:2a:e2: da:48:81:c3:18:3b:b6:40:cc:66:fd:a4:42:83:af:fd:f9:ee: c7:1e:75:6f:e2:6a:57:26:75:bd:ec:10:f1:55:80:c6:e1:01: d2:2f:8a:3f:34:c6:58:05:70:c0:0b:6a:aa:c2:31:65:2a:bd: 0d:23:fe:10:19:be:24:26:91:d2:f3:a5:db:01:32:90:c6:e4: 2e:68:ec:18:81:10:4e:cf:5a:6a:69:29:5c:51:77:0e:b1:33: f6:b5:ba:e9:80:62:b7:68:72:eb:e0:f7:cb:26:1e:43:2c:ad: cc:83:29:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyQUYxMTAvBgNVBAUTKDI0QjlFREU1MkMwM0E4NkUwRjIxMjg2OTNCNkMxRTBB ODcyNEVEMTUwHhcNMjQxMTIzMDIzNjU2WhcNMjQxMTMwMDIzNjU2WjAYMRYwFAYD VQQDEw02NzQxM2ZjOS0zOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzNdaGWKrmxM0hBMurjj8pU0wzW4zIEd0TrAn9z2C9iFnIaZ9ijbcUCh/urD paMtB8t53SdaB6Fcdgw2Ro8vcMEsaBIjsV5Au/FfLBrq6Ql1wZ59ah5GEZMRyT96 IzP9Lx1kqtGWz+7EBBoeIaV9ea4/0Nh467a6SRoHRB7Ir7NV8kDbRjGhkdEWlctg RbaO6gG0COp8Ks2GPBMse9ttWmLz+mnxOsrzRi/RGMvpE8LgdJNmyDzgIj8KtmHd awe3Cql1dZS22lPfdNjZiQRN3+n+Ol85O417XJDkRdvr3UuNcedq+H0X+3APW0mE 9dZDsupcL+ADDvnOJv90TIOySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRBD3/6 36NVtod4WqvUDfpT8eY7MB8GA1UdIwQYMBaAFCS57eUsA6huDyEoaTtsHgqHJO0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD QkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFHNFBJU2hwTzJ3ZUNvY2s3 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMbnQ1U3dEcUc0UElTaHBPMndlQ29jazdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFH NFBJU2hwTzJ3ZUNvY2s3UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMFOKsAc1FyCZoLu8Zv6/mrlFx0/pjnuraeaV5aTLCT8R4FC/jhYao BgIsX38cUsut2bLUyXOBAxmVFTlb9ylR2Khg+kPiJU5okl0SsKTWzlhG28TvDsrN xzjeyiL08MLDS+x8m2/BYPVhvrRRdJNkBUlmm9/TRgMK2qZiic53jf8luGMt8s8+ UJUZG90mKuLaSIHDGDu2QMxm/aRCg6/9+e7HHnVv4mpXJnW97BDxVYDG4QHSL4o/ NMZYBXDAC2qqwjFlKr0NI/4QGb4kJpHS86XbATKQxuQuaOwYgRBOz1pqaSlcUXcO sTP2tbrpgGK3aHLr4PfLJh5DLK3MgykW -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org