$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: O4kmkYBjRJi10f86Mi+53dirGlnlWOggxWnDUKLJUIc= Subject key identifier: 3E:13:93:3E:35:B2:59:FC:D2:81:24:27:66:4E:36:E9:F7:AB:1A:93 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 0F97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 0F91 Signing time: Sat 18 May 2024 18:06:14 +0000 Manifest this update: Sat 18 May 2024 18:06:13 +0000 Manifest next update: Sat 25 May 2024 18:06:13 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: TKuzfN7kbe+vJBR2gTzW/60leGJZQ8xSFnK7w4ztRks=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: tKbPfXDC2Fwj+8ivwZ/PNB5Op2vLI8CIJgf4lWUv2p0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3991 (0xf97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: May 18 18:06:13 2024 GMT Not After : May 25 18:06:13 2024 GMT Subject: CN=6648ee15-043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:87:92:40:5e:4d:d6:cf:75:5a:50:20:17: a8:03:86:30:a3:be:69:76:b3:f3:d5:0a:54:1e:a7: d3:bf:b6:44:66:b8:13:a0:7a:09:ae:64:31:9d:de: 7a:b8:63:03:3c:68:6b:b9:6d:ad:2d:2c:70:a2:d6: ee:b1:ed:5e:59:74:84:ea:20:98:0f:c5:fd:26:5f: 6f:1f:0d:b3:fb:27:79:6b:d3:de:f5:e2:1e:b8:92: f1:b7:31:a9:40:97:57:3b:0f:8b:72:b3:80:7b:d8: 80:e4:bb:97:b3:e7:de:40:1d:10:db:cd:fb:6c:06: 8c:07:69:0a:8e:9c:6d:63:8e:32:1f:c0:0e:15:48: 9c:46:2d:d1:81:1f:cf:da:bd:50:e4:56:a6:50:0c: 65:11:a1:b3:b6:69:7a:d3:41:66:c8:13:12:46:56: 5b:cf:6e:2a:ef:d6:b3:e2:fa:75:12:47:ff:9f:01: 3c:74:77:32:fb:d1:91:1f:67:b1:5b:0b:1f:74:15: e9:d8:8f:a6:52:4a:46:61:8b:57:c7:05:d7:20:c2: f7:0a:2b:f6:f2:ca:5d:66:7e:11:0e:73:ff:2a:4f: 1c:61:7a:24:7a:c7:6e:f3:13:6e:d1:40:33:9c:d5: af:cb:f9:2d:7e:41:70:58:2a:5a:47:4e:a8:69:40: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:93:3E:35:B2:59:FC:D2:81:24:27:66:4E:36:E9:F7:AB:1A:93 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7f:a7:2e:05:ae:f4:9e:de:c8:d8:a0:c6:56:8d:b8:98:48: 9d:09:d1:9b:28:1e:1e:e1:75:45:4b:3c:3d:ba:99:fb:bf:f4: e8:33:99:4c:cd:bd:15:1b:15:bc:37:1c:07:b5:61:4d:2e:5b: af:a5:eb:61:48:48:b8:e2:35:56:88:8d:b0:f3:83:a6:73:a4: 76:bc:b1:70:2a:70:9c:78:12:32:4b:45:71:d3:3a:69:b6:eb: 85:d9:22:1c:88:a5:5b:0f:75:59:fe:8b:eb:a7:49:18:ed:73: 80:36:59:90:1d:ce:44:db:16:d7:61:2c:66:38:90:1d:92:ff: 5f:36:c1:c5:50:9b:39:56:8d:1a:fd:7c:58:d9:ff:36:76:b6: 20:24:f7:d7:9b:b0:bf:b7:14:1a:91:73:6c:ba:b9:89:94:cc: 64:08:17:05:b7:e5:7c:a4:ac:b3:d8:7a:b3:dc:b2:1b:e9:1a: f8:b3:4f:7c:60:8d:5f:dc:1c:c2:4b:2e:ff:a3:d1:a8:13:e2: e9:79:44:2b:21:33:68:1e:27:a6:e5:ee:f4:e2:2f:21:d1:0f: f9:91:2d:fe:ed:b4:49:3e:36:87:d8:79:8c:6f:48:34:32:5e: d2:d4:e1:f1:e1:0a:0b:48:59:86:cb:99:80:80:13:2c:ba:62: b6:14:4a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjQwNTE4MTgwNjEzWhcNMjQwNTI1MTgwNjEzWjAYMRYwFAYD VQQDEw02NjQ4ZWUxNS0wNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoyHkkBeTdbPdVpQIBeoA4Ywo75pdrPz1QpUHqfTv7ZEZrgToHoJrmQxnd56 uGMDPGhruW2tLSxwotbuse1eWXSE6iCYD8X9Jl9vHw2z+yd5a9Pe9eIeuJLxtzGp QJdXOw+LcrOAe9iA5LuXs+feQB0Q2837bAaMB2kKjpxtY44yH8AOFUicRi3RgR/P 2r1Q5FamUAxlEaGztml600FmyBMSRlZbz24q79az4vp1Ekf/nwE8dHcy+9GRH2ex WwsfdBXp2I+mUkpGYYtXxwXXIML3Civ28spdZn4RDnP/Kk8cYXokesdu8xNu0UAz nNWvy/ktfkFwWCpaR06oaUCMjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4Tkz41 sln80oEkJ2ZONun3qxqTMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4f6cuBa70nt7I2KDGVo24mEidCdGbKB4e4XVFSzw9upn7v/ToM5lM zb0VGxW8NxwHtWFNLluvpethSEi44jVWiI2w84Omc6R2vLFwKnCceBIyS0Vx0zpp tuuF2SIciKVbD3VZ/ovrp0kY7XOANlmQHc5E2xbXYSxmOJAdkv9fNsHFUJs5Vo0a /XxY2f82drYgJPfXm7C/txQakXNsurmJlMxkCBcFt+V8pKyz2Hqz3LIb6Rr4s098 YI1f3BzCSy7/o9GoE+LpeUQrITNoHiem5e704i8h0Q/5kS3+7bRJPjaH2HmMb0g0 Ml7S1OHx4QoLSFmGy5mAgBMsumK2FEo4 -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org