$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: kcvezweYExU8uvaFh67Am1DV8nt9u7oXnwbDngkBrrM= Subject key identifier: 10:46:C6:07:04:72:D9:8C:D9:2F:D4:AC:41:39:E3:D9:72:B7:16:F4 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 0350 Signing time: Thu 21 Nov 2024 00:34:39 +0000 Manifest this update: Thu 21 Nov 2024 00:34:39 +0000 Manifest next update: Thu 28 Nov 2024 00:34:39 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: vvI5Vbb003K7azOM83z2dVt2F9YVO61J3SXiiJrVNzo=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Nov 21 00:34:39 2024 GMT Not After : Nov 28 00:34:39 2024 GMT Subject: CN=673e801f-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:8e:c9:e6:90:1d:d5:5c:dc:58:48:7e:df: d2:a5:5d:f9:93:b5:ed:1f:cc:c3:30:d4:0c:bd:83: af:36:3a:ea:ab:12:d9:7f:48:53:7b:7d:9f:ea:f5: fe:0b:3f:89:d2:5e:6f:d8:a3:fe:21:65:fe:da:74: 7b:c9:64:f1:72:6d:7c:8c:d9:24:93:a3:d3:33:fb: c5:3d:1d:57:8f:d8:d4:78:dc:d8:a3:d9:7c:e3:a1: 3a:7d:10:2e:29:54:64:65:7c:8f:75:1e:f8:2a:62: 82:e2:e9:7f:c7:b5:7c:98:01:df:36:80:f4:37:b8: 6c:b6:e0:32:08:04:0e:6c:98:33:af:4b:92:b1:28: a7:50:2d:11:ff:7f:d8:55:83:76:aa:63:6d:8e:d5: 31:d5:6f:77:28:fb:47:c8:8b:ea:e2:e5:a6:1c:bf: 5a:b7:f9:c6:08:c2:94:a9:0a:89:83:dc:a5:0c:a8: a4:4a:7b:53:f1:f9:c8:db:79:e0:00:0d:88:c3:aa: 3e:7d:b3:c8:9d:ef:ff:79:27:d6:ec:5b:9b:e6:59: 14:f8:d4:2a:36:b6:b5:2d:50:45:9f:80:f8:88:26: 59:86:69:44:80:97:bc:d5:de:5e:35:6c:ae:34:46: 67:93:eb:4d:a2:d9:a7:3e:8f:02:eb:c7:55:4b:99: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:46:C6:07:04:72:D9:8C:D9:2F:D4:AC:41:39:E3:D9:72:B7:16:F4 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:89:60:5c:c0:e8:60:fc:8c:fc:c9:83:0c:10:c6:81:03: 55:88:fd:d0:c0:ff:51:82:f7:c1:cd:65:75:c7:0b:42:ea:d4: 30:7f:50:94:1c:99:43:ba:22:c9:d3:bd:27:74:bc:d1:fd:43: 32:51:ac:83:1b:0d:21:45:36:91:d1:47:45:34:25:bc:17:11: 8e:b3:df:15:ff:d5:23:7d:8f:4a:f5:65:77:4b:85:6d:45:cc: 66:f7:48:37:0f:2d:dc:c6:6f:ec:e9:b2:2d:1a:eb:bd:2b:5f: fc:f3:d6:9a:f7:97:fe:14:60:86:e2:94:fb:0a:8d:77:ad:92: 2d:d3:eb:91:48:fc:15:a7:09:e7:0f:ef:47:3f:7f:af:b5:db: 93:8a:77:a4:3d:3a:5c:49:a9:ac:12:4f:90:5a:e5:f5:f6:ce: 95:cd:e2:be:c0:08:01:bd:66:6e:d9:ce:88:d1:20:ef:e4:63: 73:3c:82:ce:3c:d2:61:04:5b:c2:55:6b:a5:82:37:e6:c2:9a: 72:f5:20:bc:73:29:37:1d:98:c9:96:e6:21:23:6d:35:ff:f5: ff:ca:0f:b9:27:31:75:78:22:29:c8:62:97:9a:ca:1a:b6:c2: af:86:f4:09:1b:07:69:64:99:9e:7b:40:96:eb:a4:22:0a:ab: 6f:67:5f:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjQxMTIxMDAzNDM5WhcNMjQxMTI4MDAzNDM5WjAYMRYwFAYD VQQDEw02NzNlODAxZi05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsmOyeaQHdVc3FhIft/SpV35k7XtH8zDMNQMvYOvNjrqqxLZf0hTe32f6vX+ Cz+J0l5v2KP+IWX+2nR7yWTxcm18jNkkk6PTM/vFPR1Xj9jUeNzYo9l846E6fRAu KVRkZXyPdR74KmKC4ul/x7V8mAHfNoD0N7hstuAyCAQObJgzr0uSsSinUC0R/3/Y VYN2qmNtjtUx1W93KPtHyIvq4uWmHL9at/nGCMKUqQqJg9ylDKikSntT8fnI23ng AA2Iw6o+fbPIne//eSfW7Fub5lkU+NQqNra1LVBFn4D4iCZZhmlEgJe81d5eNWyu NEZnk+tNotmnPo8C68dVS5nkcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBGxgcE ctmM2S/UrEE549lytxb0MB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARkIlgXMDoYPyM/MmDDBDGgQNViP3QwP9RgvfBzWV1xwtC6tQwf1CU HJlDuiLJ070ndLzR/UMyUayDGw0hRTaR0UdFNCW8FxGOs98V/9UjfY9K9WV3S4Vt Rcxm90g3Dy3cxm/s6bItGuu9K1/889aa95f+FGCG4pT7Co13rZIt0+uRSPwVpwnn D+9HP3+vtduTinekPTpcSamsEk+QWuX19s6VzeK+wAgBvWZu2c6I0SDv5GNzPILO PNJhBFvCVWulgjfmwppy9SC8cyk3HZjJluYhI201//X/yg+5JzF1eCIpyGKXmsoa tsKvhvQJGwdpZJmee0CW66QiCqtvZ19v -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:59 2024 by rpki-client on console-fra.rpki-client.org