$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: 4H7jRSmWqwAPaxnfhxDJ6o9+XmYDKjqdkVHXy+wGLco= Subject key identifier: 83:44:A6:68:76:76:DE:12:34:D8:A5:DD:DF:D8:4F:61:AA:A1:16:49 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 0157 Signing time: Thu 21 Nov 2024 02:28:11 +0000 Manifest this update: Thu 21 Nov 2024 02:28:11 +0000 Manifest next update: Thu 28 Nov 2024 02:28:11 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: XzJrUYqN6PpathduV6q2Zvtkhq2Q/J7UlxQBJ1OOJ7Q=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: Hna7T6Sp8fvOtegFR0Xc4FRUwsAZ3jFq84MsvM7qVuk=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: S5NN+vMCMoLs1RUTBXkhwKFnc6yBmNKV4e3pMAdbQrw=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: 6XsOv0A/zomA5TWAl7ve4iGzW/fdIShsUkWIhQ0p9+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Nov 21 02:28:11 2024 GMT Not After : Nov 28 02:28:11 2024 GMT Subject: CN=673e9abb-046f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:5e:44:e9:6b:03:59:e2:1f:b0:25:3c:1a: eb:64:59:2a:52:cb:3a:20:6d:48:4d:46:b0:73:26: b0:d2:74:81:73:3b:f8:d0:1c:86:70:dc:68:64:20: 46:b9:9c:4a:c2:eb:5a:08:b0:58:e4:9c:f2:bd:76: c5:a6:bd:90:0a:65:72:4d:a9:7e:91:dc:35:05:20: 2d:de:c7:10:ba:23:14:09:f6:56:77:05:76:1b:cc: b8:e0:84:f3:f3:7b:4e:05:d8:dc:ba:07:b5:20:81: 4d:da:45:f5:19:e5:4f:c6:05:45:a0:ab:d9:f2:9f: b5:b9:fb:fa:e7:eb:00:0c:45:6b:9c:f0:ab:10:8c: ce:95:a6:fa:7b:bb:c5:4e:2a:42:ad:fc:8f:1c:05: 77:ff:bc:e6:f2:7f:40:bc:42:b0:2f:7e:62:84:ca: 2c:26:4f:3a:52:38:12:3f:7a:e0:29:e8:cf:d1:fb: 30:0e:27:f9:80:96:11:1b:13:0d:80:9b:2a:d2:3b: c9:5e:4f:07:60:65:74:be:d1:fa:74:ac:d7:05:5b: a7:e6:26:51:ce:b6:76:74:68:04:94:c1:0c:25:81: e9:a2:4e:c4:f3:1e:e0:a5:03:eb:93:39:29:da:69: d5:4a:77:e1:42:3b:2e:20:bb:99:4e:e8:2d:a4:d8: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:A6:68:76:76:DE:12:34:D8:A5:DD:DF:D8:4F:61:AA:A1:16:49 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:68:0e:33:14:13:4f:d1:9f:68:e2:14:21:b3:6f:3a:c3:05: b8:ee:a8:7e:bb:29:39:d9:b3:c4:4b:d7:31:4c:c3:59:d8:c4: 8b:e9:7d:9f:47:d4:9c:70:29:28:5e:d9:c0:0d:67:1f:05:7a: 8f:57:40:d9:52:7d:0c:83:74:2e:26:91:de:00:d1:b8:7b:7e: 12:91:55:31:7e:5b:56:fb:59:92:31:ab:82:ad:1b:f3:b5:ac: 42:9e:f2:19:6d:35:1c:01:ff:5d:4c:c0:d9:4f:0d:fc:5a:dd: fa:13:93:2a:19:1a:a4:7d:b3:7c:d3:8b:20:98:3a:a9:24:ed: 75:09:48:44:78:31:1f:58:6a:dc:77:16:e6:82:86:89:06:7f: 0c:e4:7a:1f:78:43:8d:bf:7f:9c:c7:8b:dd:3c:93:23:37:dd: 89:54:1b:4e:a5:8d:63:b4:39:5f:59:d3:cd:26:50:3a:35:2a: 3f:f3:06:07:fc:eb:98:c0:87:ae:96:9d:ad:78:f7:90:d1:9b: 61:58:e6:ff:46:10:57:63:ab:1a:c9:9a:55:92:a7:e9:03:f3: 9b:ae:de:3e:66:5b:a3:95:83:6f:28:f2:8c:78:fc:9d:ac:ef: f7:eb:db:b1:5c:d5:60:e0:6c:06:41:83:83:9c:ed:82:dc:6f: 96:6b:22:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjQxMTIxMDIyODExWhcNMjQxMTI4MDIyODExWjAYMRYwFAYD VQQDEw02NzNlOWFiYi0wNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUpeROlrA1niH7AlPBrrZFkqUss6IG1ITUawcyaw0nSBczv40ByGcNxoZCBG uZxKwutaCLBY5JzyvXbFpr2QCmVyTal+kdw1BSAt3scQuiMUCfZWdwV2G8y44ITz 83tOBdjcuge1IIFN2kX1GeVPxgVFoKvZ8p+1ufv65+sADEVrnPCrEIzOlab6e7vF TipCrfyPHAV3/7zm8n9AvEKwL35ihMosJk86UjgSP3rgKejP0fswDif5gJYRGxMN gJsq0jvJXk8HYGV0vtH6dKzXBVun5iZRzrZ2dGgElMEMJYHpok7E8x7gpQPrkzkp 2mnVSnfhQjsuILuZTugtpNjzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINEpmh2 dt4SNNil3d/YT2GqoRZJMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEaA4zFBNP0Z9o4hQhs286wwW47qh+uyk52bPES9cxTMNZ2MSL6X2f R9SccCkoXtnADWcfBXqPV0DZUn0Mg3QuJpHeANG4e34SkVUxfltW+1mSMauCrRvz taxCnvIZbTUcAf9dTMDZTw38Wt36E5MqGRqkfbN804sgmDqpJO11CUhEeDEfWGrc dxbmgoaJBn8M5HofeEONv3+cx4vdPJMjN92JVBtOpY1jtDlfWdPNJlA6NSo/8wYH /OuYwIeulp2tePeQ0ZthWOb/RhBXY6sayZpVkqfpA/Obrt4+ZlujlYNvKPKMePyd rO/369uxXNVg4GwGQYODnO2C3G+WayIg -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:07 2024 by rpki-client on console-fra.rpki-client.org