$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: wBTu1wW7w9BNM322hamSPpHKLQWirX5P1swmIF0S3zw= Subject key identifier: 57:52:7B:6E:2A:2A:46:84:40:67:22:A6:33:20:E9:00:E4:6A:ED:F7 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 09EE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 09EE Signing time: Wed 22 May 2024 17:16:59 +0000 Manifest this update: Wed 22 May 2024 17:16:59 +0000 Manifest next update: Wed 29 May 2024 17:16:59 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: 0ZYmiJXpPaGxB5UUuj2b8WXyGaDrds8m7JC8p1f3iwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 14:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: May 22 17:16:59 2024 GMT Not After : May 29 17:16:59 2024 GMT Subject: CN=664e288b-f445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:06:1e:c2:34:6a:a6:e3:7f:4b:2d:81:3c: cd:2d:e4:b2:1c:bd:8a:c5:10:e1:bd:d9:ca:5d:2d: 2b:22:b9:3c:0c:54:69:ce:27:ee:c6:77:07:20:86: 5e:2f:7d:1e:50:49:6a:07:48:56:a4:8a:5f:a8:21: d0:bf:1d:8f:29:f1:87:6e:23:8e:1c:5f:ae:d1:67: 89:dd:f5:e1:49:24:f7:4b:ca:d7:f4:f5:27:6e:e1: 29:d5:d9:51:5d:9c:eb:2b:45:75:0a:0e:3e:08:ef: a6:82:d5:a6:39:95:bd:09:b4:2e:7c:05:ea:dc:ae: f6:e7:62:14:a9:21:5c:88:b0:69:4a:96:aa:c2:76: 97:15:72:92:2e:fa:e5:d9:45:39:db:7b:f9:45:9b: 12:8a:38:43:38:c9:be:f4:0f:28:91:51:45:7d:41: 9f:c6:93:63:c1:ef:56:8f:4f:8a:2f:72:52:00:00: 90:40:d0:c9:4c:22:c1:37:3c:b1:54:d8:c5:0c:fc: 18:95:9b:d7:cd:ff:51:71:97:25:2f:cd:02:f2:94: 7f:e3:4b:ef:1c:02:35:e3:ff:12:a7:14:86:35:ad: c1:cf:7a:4c:f1:f7:e9:b0:ee:03:50:23:4a:2a:c5: e4:dd:20:40:e1:18:ea:4e:e3:c5:b8:e3:1a:e8:97: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:7B:6E:2A:2A:46:84:40:67:22:A6:33:20:E9:00:E4:6A:ED:F7 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:6a:de:fb:cb:da:9d:ec:37:72:95:e3:ac:2a:00:d0:3d:c8: 18:08:39:6e:c5:6c:76:24:52:7e:59:57:91:fd:6c:22:a6:ee: 47:e4:9c:aa:9f:c7:d5:6c:e6:dc:5a:05:52:96:14:13:ee:d0: c7:d8:71:fb:72:46:0b:da:22:ec:b0:11:5e:9a:9a:bb:01:61: 98:ee:8a:b0:78:a4:d5:83:6d:62:2d:5a:b6:b9:31:d6:dc:b5: 54:95:cc:bc:99:a8:12:e7:04:b7:e2:7a:bc:43:bb:8a:a1:dc: 8a:9e:98:8c:05:dd:f8:86:e3:a7:9c:47:a1:d2:bc:b8:31:c4: d8:45:cf:4b:7d:22:be:b5:5f:84:31:d5:66:b3:e3:34:01:09: f7:75:11:aa:74:a3:a3:11:f7:53:f0:ee:34:70:e6:33:39:9b: 59:3b:08:38:4d:11:eb:5d:18:38:72:f1:bd:51:50:6e:bc:d2: d1:00:46:e0:e3:c4:fa:85:11:a9:b5:79:01:a8:5e:34:c9:cd: 75:a0:f7:86:ef:3f:73:39:44:f5:07:38:9a:7d:6f:b7:89:0a: 6d:05:9a:c5:cd:4f:37:00:be:45:f7:d6:29:b1:cd:89:e8:a8: 8c:d4:23:cc:2a:19:4b:5d:76:ed:7d:36:f2:e7:97:54:70:83: 67:a8:ae:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjQwNTIyMTcxNjU5WhcNMjQwNTI5MTcxNjU5WjAYMRYwFAYD VQQDEw02NjRlMjg4Yi1mNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8cGHsI0aqbjf0stgTzNLeSyHL2KxRDhvdnKXS0rIrk8DFRpzifuxncHIIZe L30eUElqB0hWpIpfqCHQvx2PKfGHbiOOHF+u0WeJ3fXhSST3S8rX9PUnbuEp1dlR XZzrK0V1Cg4+CO+mgtWmOZW9CbQufAXq3K7252IUqSFciLBpSpaqwnaXFXKSLvrl 2UU523v5RZsSijhDOMm+9A8okVFFfUGfxpNjwe9Wj0+KL3JSAACQQNDJTCLBNzyx VNjFDPwYlZvXzf9RcZclL80C8pR/40vvHAI14/8SpxSGNa3Bz3pM8ffpsO4DUCNK KsXk3SBA4RjqTuPFuOMa6JfYyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdSe24q KkaEQGcipjMg6QDkau33MB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+at77y9qd7DdyleOsKgDQPcgYCDluxWx2JFJ+WVeR/Wwipu5H5Jyq n8fVbObcWgVSlhQT7tDH2HH7ckYL2iLssBFempq7AWGY7oqweKTVg21iLVq2uTHW 3LVUlcy8magS5wS34nq8Q7uKodyKnpiMBd34huOnnEeh0ry4McTYRc9LfSK+tV+E MdVms+M0AQn3dRGqdKOjEfdT8O40cOYzOZtZOwg4TRHrXRg4cvG9UVBuvNLRAEbg 48T6hRGptXkBqF40yc11oPeG7z9zOUT1BziafW+3iQptBZrFzU83AL5F99Ypsc2J 6KiM1CPMKhlLXXbtfTby55dUcINnqK6x -----END CERTIFICATE-----Generated at Wed May 22 20:07:53 2024 by rpki-client on console-ams.rpki-client.org