$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: hjW6q2PMcW8mmvu1Y2DqaeysmUqWSTFuOZxBZxNGVkw= Subject key identifier: 5B:18:E3:A0:AA:C9:81:D4:65:4A:2F:5C:22:2C:57:86:9B:A3:D4:EE Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0925 Signing time: Sat 18 May 2024 21:11:06 +0000 Manifest this update: Sat 18 May 2024 21:11:05 +0000 Manifest next update: Sat 25 May 2024 21:11:05 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: MMxtgYfIkxAP1vcK16S7ZNVZrTbHOTAwsBeEEFhGhQU=) 2: 1101AA0A7BBD11EA8356C986C4F9AE02.roa (hash: 98MEm2HyK4Hb9plqCE+xEehx0hLxsjA6sujCW9nUDnQ=) 3: 6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa (hash: rBeMqqjcvlnKQuScHXOpRNTNypbrNSlcAeD3UhfyPAI=) 4: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: cOvIb1PqggIER+IfmoGTkc0GPzDixU9cc0Ur8Ius0YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2357 (0x935) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: May 18 21:11:05 2024 GMT Not After : May 25 21:11:05 2024 GMT Subject: CN=6649196a-ac82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e8:d4:25:53:b0:1b:cf:84:a3:41:58:a3:f1: 6f:16:87:17:a2:82:43:cc:5c:70:2c:ad:d2:6c:b8: c8:1b:1b:05:1f:72:e5:ce:a7:dc:d5:31:94:db:04: bf:ba:8c:74:75:c1:3d:62:ae:21:98:72:58:71:cd: 0c:42:75:3a:1c:a9:35:d4:5f:0e:ce:e2:4e:2e:30: 69:a3:cc:1d:39:44:ea:1b:b4:69:5a:23:aa:45:2f: 9c:f8:5e:a1:cd:1a:cf:08:61:77:83:98:5f:f8:fa: f2:4e:4b:e5:a7:32:7e:3e:c0:2f:3f:78:17:0a:25: 0f:97:e2:21:ee:4c:60:82:6e:e5:a3:bc:b2:c8:34: cb:46:4a:1b:3e:71:13:8a:a7:92:bd:31:a7:2c:80: b3:12:38:28:17:a1:13:7c:a3:fe:5d:8a:47:cd:8b: e9:55:40:ac:50:04:57:5f:60:b0:8b:83:b5:f3:ff: 85:f6:4e:94:44:ce:e0:46:3a:00:7b:34:b4:9b:c9: ad:93:6a:61:73:31:b5:ff:7b:08:39:b4:68:d7:6a: 77:1f:2f:f3:a3:b9:b8:ff:11:f0:ac:cc:4f:de:09: 62:4f:18:af:16:f4:00:6d:c6:a3:d3:7f:e9:b7:a2: 43:06:b3:3a:f8:6e:75:04:73:f7:b4:4d:8d:af:23: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:18:E3:A0:AA:C9:81:D4:65:4A:2F:5C:22:2C:57:86:9B:A3:D4:EE X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f1:d7:4b:7a:90:a4:16:e1:a1:ce:e9:62:1a:8a:50:44:e8: 1c:e8:f2:96:f8:43:cc:45:1a:d8:e0:c4:54:de:30:03:d5:14: 15:01:ae:84:ce:c3:cd:6f:47:e4:aa:2f:6e:5d:b7:f0:41:9c: 31:b4:38:36:38:50:3e:35:a4:72:0c:96:77:f6:e5:27:94:4a: 59:8e:09:33:4d:25:1d:78:d9:03:c9:e1:6f:ad:44:e1:de:1e: c3:7b:89:ca:b7:6f:6a:64:62:03:9b:95:7b:47:a9:5d:24:94: 0e:ee:69:f1:05:d2:0f:46:5f:35:4b:e0:2a:da:3c:de:e5:aa: 1b:0e:da:bc:6e:ff:82:c8:46:e2:84:78:7d:70:28:7a:d1:84: b1:fc:e2:07:0e:28:1e:7d:a7:b5:83:21:bf:df:9f:15:b4:b3: f2:26:b4:56:f8:12:32:8b:73:08:29:bc:4a:19:2a:7c:cd:02: 10:fe:68:aa:c9:99:ed:f0:de:f1:a0:f4:57:7f:f7:27:0a:b1: 1e:65:b1:fd:ee:f1:05:5f:61:6c:34:b7:f7:b1:fb:5a:ba:6f: 3f:67:1d:83:b9:3c:74:b7:f5:3c:fa:61:3f:98:0e:6d:77:42: 71:ab:b5:72:91:0d:7d:2e:5f:e5:11:f4:22:c7:6d:18:6f:01: 30:50:c8:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjQwNTE4MjExMTA1WhcNMjQwNTI1MjExMTA1WjAYMRYwFAYD VQQDEw02NjQ5MTk2YS1hYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ujUJVOwG8+Eo0FYo/FvFocXooJDzFxwLK3SbLjIGxsFH3Llzqfc1TGU2wS/ uox0dcE9Yq4hmHJYcc0MQnU6HKk11F8OzuJOLjBpo8wdOUTqG7RpWiOqRS+c+F6h zRrPCGF3g5hf+PryTkvlpzJ+PsAvP3gXCiUPl+Ih7kxggm7lo7yyyDTLRkobPnET iqeSvTGnLICzEjgoF6ETfKP+XYpHzYvpVUCsUARXX2Cwi4O18/+F9k6URM7gRjoA ezS0m8mtk2phczG1/3sIObRo12p3Hy/zo7m4/xHwrMxP3gliTxivFvQAbcaj03/p t6JDBrM6+G51BHP3tE2NryOH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsY46Cq yYHUZUovXCIsV4abo9TuMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL8ddLepCkFuGhzuliGopQROgc6PKW+EPMRRrY4MRU3jAD1RQVAa6E zsPNb0fkqi9uXbfwQZwxtDg2OFA+NaRyDJZ39uUnlEpZjgkzTSUdeNkDyeFvrUTh 3h7De4nKt29qZGIDm5V7R6ldJJQO7mnxBdIPRl81S+Aq2jze5aobDtq8bv+CyEbi hHh9cCh60YSx/OIHDigefae1gyG/358VtLPyJrRW+BIyi3MIKbxKGSp8zQIQ/miq yZnt8N7xoPRXf/cnCrEeZbH97vEFX2FsNLf3sftaum8/Zx2DuTx0t/U8+mE/mA5t d0Jxq7VykQ19Ll/lEfQix20YbwEwUMhS -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org