$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft File: J-T9QcOzZMXkROYutxgZklg5M2k.mft (raw, json) Hash identifier: ZKttwvJUCiBbiDlY460GO+FOYuG5nAK4h3Ep+IUyxxE= Subject key identifier: 8D:EC:6E:38:D0:BE:AD:E6:DF:72:78:08:90:83:60:5F:B1:0F:8E:8D Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft Manifest number: 0698 Signing time: Sat 18 May 2024 23:19:51 +0000 Manifest this update: Sat 18 May 2024 23:19:51 +0000 Manifest next update: Sat 25 May 2024 23:19:51 +0000 Files and hashes: 1: J-T9QcOzZMXkROYutxgZklg5M2k.crl (hash: XAmBEsdO9Cqy5Fn8Kc4fKOjEzN0s0S9LRbwfWOMEwaM=) 2: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (hash: +/+05P5Ihf9r0sD0dGGhfaMxfG/kzDHKpvCX7MDo4Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Validity Not Before: May 18 23:19:51 2024 GMT Not After : May 25 23:19:51 2024 GMT Subject: CN=66493797-8779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:4f:ca:ae:35:4d:dc:ac:3c:9d:a7:4b:b5: 98:27:8a:c6:5f:e4:43:ce:25:49:86:f4:86:5f:5b: 04:47:8f:ac:7d:20:69:bb:f9:59:29:10:90:62:dc: 84:d6:5f:95:4c:d5:fa:ae:cb:e0:ba:b0:63:e6:3b: 01:18:6a:59:07:3e:2a:a9:99:25:d6:85:ec:35:a3: 9a:ed:28:d1:e0:c8:d7:d9:e2:0b:52:14:63:28:76: 68:d9:15:5c:5e:a6:65:2b:fa:51:c6:00:22:1e:71: 02:49:c3:1e:34:24:79:55:19:0c:fa:86:62:66:8a: d1:4e:7f:cf:80:3d:63:49:68:d9:be:30:15:35:1c: 53:59:3a:04:bd:91:7d:5a:38:f1:2a:e2:af:74:f5: 14:44:23:dc:cc:d7:c0:24:d3:27:58:13:26:47:05: 97:df:d2:f1:54:9a:2f:35:9f:04:0c:70:5e:b5:3a: 29:c6:57:87:38:80:27:9e:34:24:f5:5b:bb:22:78: 40:6a:ce:97:92:5f:95:ec:86:08:8a:6e:20:f3:41: 66:9e:31:08:38:c2:9d:35:0c:31:b8:76:30:0a:28: 0c:8c:e0:44:dc:58:a7:75:72:2a:7b:b3:37:60:89: 77:8e:88:ef:10:5c:97:fb:c1:f0:1b:b8:59:7f:a6: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EC:6E:38:D0:BE:AD:E6:DF:72:78:08:90:83:60:5F:B1:0F:8E:8D X509v3 Authority Key Identifier: keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:cc:99:e4:d6:7c:fd:9f:9f:3e:b0:a4:c2:4b:8f:2c:fb:57: af:1f:da:d2:b8:32:8c:04:61:41:91:bf:a1:a2:f3:a8:31:72: 7f:5d:c8:fa:57:4c:28:ba:a7:dc:97:ca:d1:6c:5b:46:28:51: 92:04:07:2e:f6:6f:9a:58:9a:1b:89:cb:f2:1b:1d:6e:28:a2: f1:84:bd:ce:c5:3e:9c:41:eb:0b:52:b9:39:33:e5:24:0a:e4: fa:a4:60:3d:bc:34:3d:46:9e:0d:98:4d:47:fc:2d:d1:5b:ee: 61:00:57:13:8f:9b:ae:80:69:ab:1f:94:e4:91:f2:e0:10:6a: 78:7f:ea:62:7d:1c:aa:ca:40:e6:f3:dd:cd:08:38:b7:4d:d6: dc:76:44:f3:62:8e:57:be:09:0e:ab:92:82:72:6d:7a:1a:b4: dc:09:dd:d5:0d:9e:9a:cc:11:15:71:96:e9:93:f5:e8:ae:f5: 41:8a:ee:75:78:b3:79:b1:c5:a6:23:bd:c4:4d:a6:f5:f4:26: c0:49:af:e3:2b:98:3c:9f:b9:e8:e3:e1:23:77:00:a1:ec:19: d5:66:bd:52:b6:e0:aa:2c:8d:b8:8f:38:15:c0:01:ae:8b:34: 1a:b8:28:72:d6:f2:68:cf:1c:01:aa:08:ab:4b:8b:ec:39:96: b6:bd:12:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyNzQxMTAvBgNVBAUTKDI3RTRGRDQxQzNCMzY0QzVFNDQ0RTYyRUI3MTgxOTky NTgzOTMzNjkwHhcNMjQwNTE4MjMxOTUxWhcNMjQwNTI1MjMxOTUxWjAYMRYwFAYD VQQDEw02NjQ5Mzc5Ny04Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V9Pyq41TdysPJ2nS7WYJ4rGX+RDziVJhvSGX1sER4+sfSBpu/lZKRCQYtyE 1l+VTNX6rsvgurBj5jsBGGpZBz4qqZkl1oXsNaOa7SjR4MjX2eILUhRjKHZo2RVc XqZlK/pRxgAiHnECScMeNCR5VRkM+oZiZorRTn/PgD1jSWjZvjAVNRxTWToEvZF9 WjjxKuKvdPUURCPczNfAJNMnWBMmRwWX39LxVJovNZ8EDHBetTopxleHOIAnnjQk 9Vu7InhAas6Xkl+V7IYIim4g80FmnjEIOMKdNQwxuHYwCigMjOBE3FindXIqe7M3 YIl3jojvEFyX+8HwG7hZf6aH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3sbjjQ vq3m33J4CJCDYF+xD46NMB8GA1UdIwQYMBaAFCfk/UHDs2TF5ETmLrcYGZJYOTNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTI3NC9DQjM3REFERTI0 MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpNWGtST1l1dHhnWmtsZzVN MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otVDlRY096Wk1Ya1JPWXV0eGdaa2xnNU0yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTI3NC9DQjM3REFERTI0MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpN WGtST1l1dHhnWmtsZzVNMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWzJnk1nz9n58+sKTCS48s+1evH9rSuDKMBGFBkb+hovOoMXJ/Xcj6 V0wouqfcl8rRbFtGKFGSBAcu9m+aWJobicvyGx1uKKLxhL3OxT6cQesLUrk5M+Uk CuT6pGA9vDQ9Rp4NmE1H/C3RW+5hAFcTj5uugGmrH5TkkfLgEGp4f+pifRyqykDm 893NCDi3TdbcdkTzYo5XvgkOq5KCcm16GrTcCd3VDZ6azBEVcZbpk/XorvVBiu51 eLN5scWmI73ETab19CbASa/jK5g8n7no4+EjdwCh7BnVZr1StuCqLI24jzgVwAGu izQauChy1vJozxwBqgirS4vsOZa2vRKz -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org