$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: 3YWHg2zzTZtp5HFMxQFlvuwAEP+20unw5QbaWkjJV5g= Subject key identifier: C0:29:1F:13:8C:A7:7D:6F:5D:3F:38:F2:AC:72:0A:48:1F:8F:E4:1F Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1C43 Signing time: Wed 20 Nov 2024 16:10:17 +0000 Manifest this update: Wed 20 Nov 2024 16:10:17 +0000 Manifest next update: Wed 27 Nov 2024 16:10:17 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: yY+qEp8bvx4qCYZ63SPyXyayiyiDs7SZt9jVUgLUvWI=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7267 (0x1c63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Nov 20 16:10:17 2024 GMT Not After : Nov 27 16:10:17 2024 GMT Subject: CN=673e09e9-3cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:b4:08:01:6c:b4:44:e7:f7:0b:1a:9e:f8: 0f:30:54:85:b1:51:64:dc:36:bc:98:7c:6d:30:50: 0d:b7:ad:30:66:16:4f:c0:13:bb:1a:e2:40:bf:fe: f0:88:7a:5c:65:b6:03:5e:50:84:9e:c2:02:9b:5a: 42:4a:36:4e:b7:0f:88:47:5f:21:f6:c8:d2:d3:2f: 14:09:f3:37:94:e8:90:d1:52:8b:7e:86:10:78:a1: d8:cc:36:c3:04:de:24:5f:78:d7:10:98:e6:2c:a7: e9:9b:f9:35:71:7e:a3:03:31:86:86:3b:01:be:43: a5:3b:a4:a0:9d:49:a3:a7:cf:46:c2:f2:73:3a:f8: d1:c9:d5:36:f9:60:3f:f6:93:9d:95:e6:59:ba:fe: e6:55:19:5f:de:9d:05:aa:05:8e:f8:d0:1b:fb:9e: 70:2e:ef:02:bb:ba:aa:a6:f8:48:3c:58:45:7c:b4: e3:80:be:bb:08:70:12:bb:72:7c:13:51:69:63:e4: ea:29:c1:60:79:ea:b6:39:e6:ea:a5:6d:c4:26:a5: 1f:1a:b3:a5:a6:6b:3c:61:3a:00:c9:5e:cf:d2:0a: 3f:80:66:1f:f0:f8:eb:35:46:4e:27:6e:01:a3:8a: fc:3c:c8:36:9c:6d:fb:82:9b:69:8d:f8:30:f5:69: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:29:1F:13:8C:A7:7D:6F:5D:3F:38:F2:AC:72:0A:48:1F:8F:E4:1F X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:a6:0b:ca:64:bb:8d:16:39:dc:1d:df:3e:28:a6:07:46: 92:52:8d:90:51:6a:6a:81:77:a5:8d:fb:c0:49:fa:8c:c3:31: 42:56:1c:20:75:2d:63:9d:8c:ad:51:5d:5d:b1:50:fc:d9:ea: 5b:92:2c:8a:72:0b:86:88:43:11:a8:b3:52:c3:5a:2d:20:4d: fa:03:14:e4:ab:6a:53:36:1e:b6:43:0f:09:d9:e2:03:f5:d8: 4d:6a:96:e3:a9:38:78:7c:a0:c6:c5:7b:49:47:30:2f:e4:2c: 30:9a:30:70:6a:10:8b:9e:92:61:f5:ae:55:60:a5:8b:bb:fb: 64:bb:bd:78:c8:79:93:6d:63:b5:5d:7b:68:71:1d:c6:44:e7: 2b:e0:a7:11:51:2c:c0:6b:c4:6e:e0:35:b4:9b:6c:44:4f:27: 07:5c:91:9f:1e:56:2c:53:71:79:35:fb:c3:d2:c5:aa:af:a9: 3b:cf:d9:fc:da:01:6b:6a:39:92:54:27:b2:47:ff:eb:06:ef: 57:e9:0c:77:44:0e:7d:4a:1a:02:71:89:ae:77:a2:73:7c:43: fd:af:0d:c3:e2:17:35:5a:ac:72:9c:6a:98:d9:c2:f9:e3:c3: 5b:06:cb:b1:75:10:ef:c3:ae:4f:5f:de:b9:c3:0e:c5:d2:bd: 8f:e7:2d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjQxMTIwMTYxMDE3WhcNMjQxMTI3MTYxMDE3WjAYMRYwFAYD VQQDEw02NzNlMDllOS0zY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwq0CAFstETn9wsanvgPMFSFsVFk3Da8mHxtMFANt60wZhZPwBO7GuJAv/7w iHpcZbYDXlCEnsICm1pCSjZOtw+IR18h9sjS0y8UCfM3lOiQ0VKLfoYQeKHYzDbD BN4kX3jXEJjmLKfpm/k1cX6jAzGGhjsBvkOlO6SgnUmjp89GwvJzOvjRydU2+WA/ 9pOdleZZuv7mVRlf3p0FqgWO+NAb+55wLu8Cu7qqpvhIPFhFfLTjgL67CHASu3J8 E1FpY+TqKcFgeeq2OebqpW3EJqUfGrOlpms8YToAyV7P0go/gGYf8PjrNUZOJ24B o4r8PMg2nG37gptpjfgw9WmXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMApHxOM p31vXT848qxyCkgfj+QfMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIZKYLymS7jRY53B3fPiimB0aSUo2QUWpqgXeljfvASfqMwzFCVhwg dS1jnYytUV1dsVD82epbkiyKcguGiEMRqLNSw1otIE36AxTkq2pTNh62Qw8J2eID 9dhNapbjqTh4fKDGxXtJRzAv5CwwmjBwahCLnpJh9a5VYKWLu/tku714yHmTbWO1 XXtocR3GROcr4KcRUSzAa8Ru4DW0m2xETycHXJGfHlYsU3F5NfvD0sWqr6k7z9n8 2gFrajmSVCeyR//rBu9X6Qx3RA59ShoCcYmud6JzfEP9rw3D4hc1WqxynGqY2cL5 48NbBsuxdRDvw65PX965ww7F0r2P5y22 -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:04 2024 by rpki-client on console-ams.rpki-client.org