$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: z6k0/Nv57W4ZxfIZycc81aAlgXmR1jRll6psr8NJkM4= Subject key identifier: 10:A9:9F:81:A8:0D:B9:54:26:09:F8:B0:33:01:EA:18:BF:57:31:53 Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 03F0 Signing time: Sun 19 May 2024 02:15:22 +0000 Manifest this update: Sun 19 May 2024 02:15:22 +0000 Manifest next update: Sun 26 May 2024 02:15:22 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: R6AzrGV3XpbVYrgQ4I2NPAEY6sNhLwsP5iLEMLpBRJY=) 2: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: M28GSpsob0GcZZ2QTl/qwtN101CbqZ2q8yG6EV5VT+A=) 3: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: FoYRsCuS7R3h5SKIzMxx0ziFPmPriW5U+D3CqE4wpEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: May 19 02:15:22 2024 GMT Not After : May 26 02:15:22 2024 GMT Subject: CN=664960ba-1ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:17:97:e7:25:04:7b:fe:8a:f6:c7:e4:60: d8:8e:7a:e4:d6:c5:99:6c:98:9b:9d:fa:c5:e6:3c: d0:2b:10:65:ac:fc:85:c3:e2:1d:8e:2f:12:d4:f4: 7b:a0:dd:f2:ad:bd:a5:3a:7e:d4:7b:ce:fd:b8:61: bd:f7:ad:1e:fb:b8:1d:89:04:0c:a8:93:f6:68:c9: 2c:b7:2c:5f:ae:5b:93:8b:fc:aa:36:a8:43:90:b5: 2e:54:b4:d4:64:f9:55:96:ac:31:e1:e8:e1:83:82: 6d:4f:57:a0:ac:7d:bc:71:69:cb:1a:46:09:cf:f2: 01:79:bb:5f:b6:08:b1:21:a0:49:2e:63:73:55:f9: 60:dd:f1:e2:75:e8:83:45:0f:b0:84:12:6b:a1:05: 77:47:84:69:cb:77:0f:f9:a7:d6:bd:29:7c:ab:c9: db:17:ac:e0:0a:da:0d:bf:76:27:4b:41:b7:7e:b6: 4d:17:9f:a8:06:4e:b0:b6:4f:9b:80:77:34:90:59: ea:c4:e9:fd:39:36:ce:65:ac:26:21:2a:d8:0e:a2: ca:f2:a6:58:29:b6:e9:c0:74:de:77:bf:dc:8e:c1: dc:02:12:cf:23:0e:22:75:0f:97:85:1a:a7:7e:39: ca:61:ae:65:64:de:2b:40:74:7c:64:42:1d:7a:d8: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:9F:81:A8:0D:B9:54:26:09:F8:B0:33:01:EA:18:BF:57:31:53 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:84:dd:7d:cc:f6:73:ab:b5:d8:d4:c4:5f:c4:a7:b3:47:dd: 87:f5:06:7f:6f:50:83:36:b1:d0:9b:02:60:d6:28:d4:4e:b8: d5:13:e3:93:72:9a:af:a1:56:47:44:b0:77:75:16:37:62:62: 35:7d:92:da:77:59:3d:c0:90:6d:77:93:b2:e1:aa:84:59:75: 7e:60:fe:fc:0b:6c:40:24:f8:2a:7d:e7:4c:c4:86:dc:19:3d: df:65:a9:f2:fe:ea:84:e6:47:8d:51:5c:f0:32:78:d5:2f:2b: 52:6c:bf:01:27:38:14:0b:5a:49:20:2d:db:45:02:82:ab:87: 9f:d9:3f:9b:98:56:ae:d0:e1:d6:a3:09:f9:e0:cc:92:bb:3e: 62:a1:06:cf:41:2d:64:16:c0:d1:22:77:e6:96:6b:e6:50:eb: 5d:df:46:28:d5:4d:5d:89:30:b1:81:1d:18:d9:e4:24:ae:5c: 56:0e:0c:e8:18:db:4b:e0:95:08:61:c6:0c:b4:e7:2d:31:29: af:1c:d6:38:f4:6f:5b:34:52:89:31:e0:72:9b:d3:51:78:b9: 68:65:79:bc:b7:2a:ff:9b:0d:d1:2d:9a:8f:36:22:46:c7:b0: 89:d5:f9:d4:5e:9c:70:00:c7:15:6e:be:d7:92:17:e7:6e:ab: ff:78:6e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjQwNTE5MDIxNTIyWhcNMjQwNTI2MDIxNTIyWjAYMRYwFAYD VQQDEw02NjQ5NjBiYS0xY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMIXl+clBHv+ivbH5GDYjnrk1sWZbJibnfrF5jzQKxBlrPyFw+Idji8S1PR7 oN3yrb2lOn7Ue879uGG9960e+7gdiQQMqJP2aMkstyxfrluTi/yqNqhDkLUuVLTU ZPlVlqwx4ejhg4JtT1egrH28cWnLGkYJz/IBebtftgixIaBJLmNzVflg3fHideiD RQ+whBJroQV3R4Rpy3cP+afWvSl8q8nbF6zgCtoNv3YnS0G3frZNF5+oBk6wtk+b gHc0kFnqxOn9OTbOZawmISrYDqLK8qZYKbbpwHTed7/cjsHcAhLPIw4idQ+XhRqn fjnKYa5lZN4rQHR8ZEIdetheVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCpn4Go DblUJgn4sDMB6hi/VzFTMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxhN19zPZzq7XY1MRfxKezR92H9QZ/b1CDNrHQmwJg1ijUTrjVE+OT cpqvoVZHRLB3dRY3YmI1fZLad1k9wJBtd5Oy4aqEWXV+YP78C2xAJPgqfedMxIbc GT3fZany/uqE5keNUVzwMnjVLytSbL8BJzgUC1pJIC3bRQKCq4ef2T+bmFau0OHW own54MySuz5ioQbPQS1kFsDRInfmlmvmUOtd30Yo1U1diTCxgR0Y2eQkrlxWDgzo GNtL4JUIYcYMtOctMSmvHNY49G9bNFKJMeBym9NReLloZXm8tyr/mw3RLZqPNiJG x7CJ1fnUXpxwAMcVbr7Xkhfnbqv/eG7d -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org