$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: iMV223lib0jANRDZfCQFQ5yQ2JoTMGsxeN9WTPSZA40= Subject key identifier: B2:6F:6C:59:C5:2F:A7:EA:24:37:5A:61:66:2F:A2:76:E9:B6:66:39 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 02C0 Signing time: Thu 21 Nov 2024 01:06:59 +0000 Manifest this update: Thu 21 Nov 2024 01:06:59 +0000 Manifest next update: Thu 28 Nov 2024 01:06:59 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: 59Y28RgOKXGw3JyBcGfBtTSvzWKVmyIG/vOIw3Juabs=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: xC5IbrGlwZQjRObBvjWbmr7ez3H9Rd+jV1MSu1MCVh4=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Nov 21 01:06:59 2024 GMT Not After : Nov 28 01:06:59 2024 GMT Subject: CN=673e87b3-7e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:ad:21:44:f5:dc:17:ad:b1:a0:3a:f9:f0: 23:90:ec:a7:0b:ca:d3:21:7e:b8:f2:e8:ed:29:d4: 92:2b:39:24:a4:c4:0e:11:54:d6:77:56:da:22:2e: dc:d7:53:4b:eb:55:6d:2c:ef:bc:f8:02:78:67:8b: 7f:86:89:9b:a2:a8:85:58:47:5d:d9:5d:6e:34:5d: 09:73:32:df:a2:8a:de:af:41:3c:8c:6e:cf:33:a4: 5d:28:f7:88:29:a6:72:d0:68:01:dd:08:96:16:3c: d1:6e:00:1a:6c:30:34:2e:a9:41:43:fc:90:3c:e9: 56:d0:f4:4b:78:db:d7:c9:01:57:33:e3:0f:bd:b9: e9:ca:8c:e7:ea:4b:77:ad:6e:71:97:53:17:51:c2: 8e:be:1f:01:25:b5:a2:2d:17:02:19:18:e1:56:d3: ca:50:0a:91:97:f2:1d:4c:26:60:2a:03:77:e9:dc: 5e:52:16:1b:23:a2:5d:d3:61:80:5d:d0:3b:8a:9f: c0:df:00:ff:b7:8b:20:00:a2:9e:eb:a4:51:e0:49: cc:f2:b6:2e:f3:ee:98:8b:86:68:89:59:2f:db:e3: 11:c2:40:a5:46:75:65:c5:be:e1:4c:ae:e6:49:cb: 2f:66:88:46:d1:f2:81:2c:60:6f:d8:7b:f7:2d:c5: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:6C:59:C5:2F:A7:EA:24:37:5A:61:66:2F:A2:76:E9:B6:66:39 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:40:50:0e:f6:01:db:cc:9e:04:af:8f:2a:5f:6b:be:c7:36: 22:d1:89:0b:f1:c7:0b:07:4a:3f:fa:18:95:d2:ee:4f:e7:12: b0:a5:f6:d1:d7:7d:89:a5:1a:76:5c:0c:cc:ea:84:f1:e2:37: 26:50:8a:2c:be:74:b3:82:da:b1:bc:fb:4b:1e:7c:af:27:11: b5:22:92:5a:9c:20:80:53:e1:95:56:e9:b7:6c:90:ec:9f:86: 21:0e:33:da:a4:db:63:ef:7e:de:3e:e5:bc:50:dc:fc:22:a3: 5f:35:92:25:05:68:26:72:0e:ec:e2:43:db:c1:9e:5e:b8:ef: 58:2c:84:52:06:03:75:6f:46:2f:e6:2e:f1:07:9d:df:c6:af: c8:35:7a:98:ca:bb:62:a3:e6:bb:f5:8c:3d:97:d3:64:06:50: a2:b0:3c:c4:24:4f:f7:3c:bb:b7:33:df:fe:80:5e:a9:90:d8: a1:9a:81:5a:53:bc:8f:4f:6e:97:fb:4a:4b:d3:97:c6:46:69: 68:ef:ec:2a:54:b6:e1:e2:c8:4f:40:c7:fc:dc:5e:a6:4e:05: fe:2b:46:3a:77:28:d9:52:cb:8f:44:09:10:36:6e:e5:bf:a8: ac:d3:03:1e:33:ca:e4:91:37:42:4f:20:0e:5f:cc:3e:5d:3b: f9:63:44:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjQxMTIxMDEwNjU5WhcNMjQxMTI4MDEwNjU5WjAYMRYwFAYD VQQDEw02NzNlODdiMy03ZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7etIUT13BetsaA6+fAjkOynC8rTIX648ujtKdSSKzkkpMQOEVTWd1baIi7c 11NL61VtLO+8+AJ4Z4t/homboqiFWEdd2V1uNF0JczLfoorer0E8jG7PM6RdKPeI KaZy0GgB3QiWFjzRbgAabDA0LqlBQ/yQPOlW0PRLeNvXyQFXM+MPvbnpyozn6kt3 rW5xl1MXUcKOvh8BJbWiLRcCGRjhVtPKUAqRl/IdTCZgKgN36dxeUhYbI6Jd02GA XdA7ip/A3wD/t4sgAKKe66RR4EnM8rYu8+6Yi4ZoiVkv2+MRwkClRnVlxb7hTK7m ScsvZohG0fKBLGBv2Hv3LcWv9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJvbFnF L6fqJDdaYWYvonbptmY5MB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQFAO9gHbzJ4Er48qX2u+xzYi0YkL8ccLB0o/+hiV0u5P5xKwpfbR 132JpRp2XAzM6oTx4jcmUIosvnSzgtqxvPtLHnyvJxG1IpJanCCAU+GVVum3bJDs n4YhDjPapNtj737ePuW8UNz8IqNfNZIlBWgmcg7s4kPbwZ5euO9YLIRSBgN1b0Yv 5i7xB53fxq/INXqYyrtio+a79Yw9l9NkBlCisDzEJE/3PLu3M9/+gF6pkNihmoFa U7yPT26X+0pL05fGRmlo7+wqVLbh4shPQMf83F6mTgX+K0Y6dyjZUsuPRAkQNm7l v6is0wMeM8rkkTdCTyAOX8w+XTv5Y0SK -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:53 2024 by rpki-client on console-ams.rpki-client.org