$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: IKnAoP4bee+mwWYNFmFZbBaAVvy0nlmtTaLxorZt8Iw= Subject key identifier: 7B:30:33:68:47:F6:B9:A3:06:7E:B1:38:93:34:EF:EB:20:E1:7C:16 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 08ED Signing time: Fri 22 Nov 2024 20:10:19 +0000 Manifest this update: Fri 22 Nov 2024 20:10:19 +0000 Manifest next update: Fri 29 Nov 2024 20:10:18 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: wDH6kIF2YbBcd67z0e//Anw0rt/uDSh4XmWwdOIZLHQ=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: EhRN/uooWnaf/BKx+rG8uVpZETp6E4AIAKPHufyI6h0=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AlqDLojfq/3K+BcDiv2qbdt3OzeIJeW5BYNJ45Km+FU=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Nov 22 20:10:19 2024 GMT Not After : Nov 29 20:10:18 2024 GMT Subject: CN=6740e52b-fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:dd:e1:00:42:98:fa:af:b2:7a:90:02:ee: a4:04:53:60:49:23:e6:a1:d1:31:b5:ee:19:8b:7a: ea:f1:b8:04:c2:77:d1:f3:dc:0b:73:e0:ed:77:f0: b4:6e:6a:e1:e1:57:45:7c:b8:f7:01:0e:e2:8b:85: db:68:a6:3e:60:eb:90:2f:2f:3d:10:aa:64:6c:2f: 40:ec:27:19:55:0c:cd:85:d3:a6:10:22:15:d4:d1: ea:67:65:f2:3a:7a:75:0c:2b:de:9e:c3:f0:30:aa: 17:36:30:a9:0a:74:a7:a7:2a:c1:81:1b:18:5e:c2: 29:30:b8:ab:f2:06:72:9d:49:7b:a7:94:82:39:d4: bb:e9:a2:f6:9a:9d:b6:75:79:c6:a5:b0:52:fd:8e: 17:bb:b2:4c:3e:bc:f2:11:50:d8:d0:63:f3:87:8f: 23:1f:59:24:90:79:b0:d1:ca:ad:0b:15:4b:14:41: 67:21:1b:f0:a5:c9:ed:d6:11:04:ba:42:59:4e:40: 51:f5:e9:00:ac:52:2a:eb:86:70:ab:d5:b6:6d:d2: a9:64:bf:61:4f:4d:1e:ed:50:dc:10:f6:94:63:0f: 27:44:0f:0a:54:6d:1a:23:aa:19:0a:6b:b3:9a:21: d4:3c:2b:01:fc:2c:b3:6c:30:5c:83:31:12:1c:79: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:30:33:68:47:F6:B9:A3:06:7E:B1:38:93:34:EF:EB:20:E1:7C:16 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ed:53:9e:3b:f0:61:0d:b9:40:25:cd:e8:43:8b:2d:42:ed: a5:e5:57:af:c7:77:1d:10:28:8a:32:eb:c9:d2:d7:00:de:65: de:95:08:48:cb:1b:34:da:19:8e:4e:d2:1f:5c:4d:7b:fc:9f: c0:5c:96:d4:1a:da:d0:dc:a9:50:65:74:32:2a:12:b3:94:ab: a4:fa:04:3e:13:8b:bc:f7:5b:37:00:65:7c:50:29:60:95:d5: b3:71:45:1e:90:9c:d9:af:59:14:fc:be:e0:ed:ea:90:eb:b9: 94:aa:b2:b3:14:18:94:c5:fb:1d:78:ab:94:2d:61:78:e9:c7: d9:f5:9a:e8:a9:e1:93:57:9f:c6:30:0f:12:8b:26:d7:85:39: 16:33:4c:44:d1:15:84:07:8f:da:85:dc:ce:4e:18:c6:4f:10: 4b:cd:f1:5f:15:1f:07:f6:c4:13:ac:3a:68:35:56:1c:a4:f2: b4:17:26:ca:bd:8d:66:a2:c5:ba:c5:ba:12:a0:24:a3:52:b2: 27:33:b9:d4:b7:fb:1e:b5:bd:19:38:fb:df:1e:a7:3a:fa:b8: 42:a6:44:11:f0:45:52:aa:b3:db:f5:3f:f5:1d:ce:c1:8b:79: 1a:31:a6:93:fe:21:01:86:4a:0c:ea:b3:05:2c:89:08:3e:a2: 48:54:17:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjQxMTIyMjAxMDE5WhcNMjQxMTI5MjAxMDE4WjAYMRYwFAYD VQQDEw02NzQwZTUyYi1mZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CDd4QBCmPqvsnqQAu6kBFNgSSPmodExte4Zi3rq8bgEwnfR89wLc+Dtd/C0 bmrh4VdFfLj3AQ7ii4XbaKY+YOuQLy89EKpkbC9A7CcZVQzNhdOmECIV1NHqZ2Xy Onp1DCvensPwMKoXNjCpCnSnpyrBgRsYXsIpMLir8gZynUl7p5SCOdS76aL2mp22 dXnGpbBS/Y4Xu7JMPrzyEVDY0GPzh48jH1kkkHmw0cqtCxVLFEFnIRvwpcnt1hEE ukJZTkBR9ekArFIq64Zwq9W2bdKpZL9hT00e7VDcEPaUYw8nRA8KVG0aI6oZCmuz miHUPCsB/CyzbDBcgzESHHnyQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHswM2hH 9rmjBn6xOJM07+sg4XwWMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7VOeO/BhDblAJc3oQ4stQu2l5Vevx3cdECiKMuvJ0tcA3mXelQhI yxs02hmOTtIfXE17/J/AXJbUGtrQ3KlQZXQyKhKzlKuk+gQ+E4u891s3AGV8UClg ldWzcUUekJzZr1kU/L7g7eqQ67mUqrKzFBiUxfsdeKuULWF46cfZ9ZroqeGTV5/G MA8SiybXhTkWM0xE0RWEB4/ahdzOThjGTxBLzfFfFR8H9sQTrDpoNVYcpPK0FybK vY1mosW6xboSoCSjUrInM7nUt/setb0ZOPvfHqc6+rhCpkQR8EVSqrPb9T/1Hc7B i3kaMaaT/iEBhkoM6rMFLIkIPqJIVBcz -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org