$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: R0SwJe6NDBFSmUIudgoL/93kI7oEHoq7RUcRfT8Qzes= Subject key identifier: 59:8B:8A:76:CB:BA:35:45:15:80:A6:A7:30:ED:22:B7:C5:C0:9A:3A Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 12 Signing time: Sat 23 Nov 2024 05:58:57 +0000 Manifest this update: Sat 23 Nov 2024 05:58:57 +0000 Manifest next update: Sat 30 Nov 2024 05:58:57 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: UNr3fDE3a/4a56aEv7rNY9mov/16Mog793b9aS3TaRY=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Nov 23 05:58:57 2024 GMT Not After : Nov 30 05:58:57 2024 GMT Subject: CN=67416f21-7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:f2:5f:40:c0:e2:53:55:e9:82:8e:ad:ab: 19:a2:8f:a5:14:a2:4c:8e:65:f4:ca:cb:16:70:37: 7a:cc:35:80:2a:ed:27:2c:b7:3f:b7:9e:da:0a:4a: f4:10:3f:6f:9c:c4:f5:3a:ac:34:d6:46:08:78:9c: 19:86:08:9a:e4:75:57:83:89:5c:e5:b8:a8:09:03: 85:69:3d:14:51:0e:21:61:e9:c2:5d:6b:bf:4c:e2: 57:9b:32:4b:a2:45:bb:ab:9d:7c:8a:e2:6d:45:a2: 54:d2:61:52:68:34:ac:99:87:80:b4:25:1d:25:c6: d6:ab:4f:ee:ce:65:c1:15:2e:bb:db:f0:f8:e7:1e: 4f:a3:57:48:71:05:4f:bb:6a:53:ed:67:93:00:a4: 15:aa:5e:02:55:75:34:ce:6d:58:f0:a1:ea:96:74: 16:aa:b2:81:1a:92:9e:f6:b0:30:bb:f6:25:27:4b: c6:39:db:0e:07:5d:34:f2:11:89:b8:28:2e:19:9b: a6:02:01:9d:36:02:17:da:f9:59:b9:7e:39:aa:5a: 0e:83:bd:32:49:78:41:33:16:fc:1c:90:18:d4:d9: 8c:93:83:17:9f:84:fe:38:ca:e1:cb:cf:7b:6b:4f: 9f:db:7b:ba:c0:93:6c:b0:f0:fc:90:5d:99:a0:13: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8B:8A:76:CB:BA:35:45:15:80:A6:A7:30:ED:22:B7:C5:C0:9A:3A X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7d:24:83:84:e3:69:f0:69:1c:e5:82:32:95:24:ff:24:05: 51:81:36:80:3a:2a:80:53:42:db:d1:66:17:8f:83:8a:63:90: fc:d1:93:f9:03:ab:0e:db:a1:dc:b1:66:27:44:bb:35:14:9d: c2:54:4c:a1:b6:a6:78:c7:a0:1d:76:02:66:03:56:d1:30:1a: 8d:96:73:56:4b:98:36:6c:34:d4:3b:b7:a1:0a:b3:0d:24:b1: 2c:b0:d5:5a:f3:c8:07:d9:b4:68:08:e3:fb:a1:55:0c:cb:65: 66:52:86:e9:a9:b5:b7:45:5d:b9:71:17:50:1f:74:ee:82:66: 0a:97:81:af:df:ef:8f:df:5a:7e:19:49:30:76:0d:a6:42:40: e2:c5:bb:8b:c5:ac:65:5a:63:1e:c1:ad:61:c8:c6:db:2d:da: 6b:aa:9f:fe:70:93:74:a5:dd:39:8b:0b:e6:f3:a0:df:c9:f4: ca:75:23:a1:5c:d0:0e:93:a2:4a:56:05:6f:2d:8c:35:95:00: 66:96:59:1f:11:47:5b:86:f0:ac:c9:ea:3f:e4:8f:8c:dd:f5: 40:44:5f:7a:d9:2f:35:ba:b5:11:de:de:0b:f8:35:ab:17:54: 82:0a:bc:6f:e7:68:64:b5:19:86:8b:b0:c8:cb:be:05:94:42: 00:ba:41:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjRDQzExMC8GA1UEBRMoMjUyQTVBNThDMkMyMzkzNjgyQkJGMkJCQzQ2MTIzNDFD MTFEODQxOTAeFw0yNDExMjMwNTU4NTdaFw0yNDExMzAwNTU4NTdaMBgxFjAUBgNV BAMTDTY3NDE2ZjIxLTczMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoGvJfQMDiU1Xpgo6tqxmij6UUokyOZfTKyxZwN3rMNYAq7Scstz+3ntoKSvQQ P2+cxPU6rDTWRgh4nBmGCJrkdVeDiVzluKgJA4VpPRRRDiFh6cJda79M4lebMkui RburnXyK4m1FolTSYVJoNKyZh4C0JR0lxtarT+7OZcEVLrvb8PjnHk+jV0hxBU+7 alPtZ5MApBWqXgJVdTTObVjwoeqWdBaqsoEakp72sDC79iUnS8Y52w4HXTTyEYm4 KC4Zm6YCAZ02Ahfa+Vm5fjmqWg6DvTJJeEEzFvwckBjU2YyTgxefhP44yuHLz3tr T5/be7rAk2yw8PyQXZmgEzmHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWYuKdsu6 NUUVgKanMO0it8XAmjowHwYDVR0jBBgwFoAUJSpaWMLCOTaCu/K7xGEjQcEdhBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNENDL0NDNjhFM0RBOTE0 ODExRUY4N0VBREQ1MkM0RjlBRTAyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSlNwYVdNTENPVGFDdV9LN3hHRWpRY0VkaEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NENDL0NDNjhFM0RBOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyL0pTcGFXTUxDT1Rh Q3VfSzd4R0VqUWNFZGhCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJB9JIOE42nwaRzlgjKVJP8kBVGBNoA6KoBTQtvRZhePg4pjkPzRk/kD qw7bodyxZidEuzUUncJUTKG2pnjHoB12AmYDVtEwGo2Wc1ZLmDZsNNQ7t6EKsw0k sSyw1VrzyAfZtGgI4/uhVQzLZWZShumptbdFXblxF1AfdO6CZgqXga/f74/fWn4Z STB2DaZCQOLFu4vFrGVaYx7BrWHIxtst2muqn/5wk3Sl3TmLC+bzoN/J9Mp1I6Fc 0A6TokpWBW8tjDWVAGaWWR8RR1uG8KzJ6j/kj4zd9UBEX3rZLzW6tRHe3gv4NasX VIIKvG/naGS1GYaLsMjLvgWUQgC6QWI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org