$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: XyhrOA2fhU42Udc2/nfVk/HVkc3B8/YO9wfBujzvzJE= Subject key identifier: 1A:30:B9:03:FC:34:9E:36:75:8A:2D:07:CD:01:FB:F2:98:35:7B:07 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0D05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0D00 Signing time: Sat 18 May 2024 18:45:10 +0000 Manifest this update: Sat 18 May 2024 18:45:10 +0000 Manifest next update: Sat 25 May 2024 18:45:10 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: neyqtgfq17/48zwFsJKpCWKeK2YEL3cn2Et8B+tDFCw=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: 8nCNAcs27eO0GjTKs3H3HMysABQ6XV5irpVlWDxCRLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: May 18 18:45:10 2024 GMT Not After : May 25 18:45:10 2024 GMT Subject: CN=6648f736-574b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:51:80:14:c6:ad:f5:37:5c:33:e8:e3:4c: 56:ac:05:92:9f:21:31:ba:ac:22:2e:58:21:aa:5d: 0c:21:a3:aa:9b:bb:44:cf:ed:ac:c7:c4:d9:81:63: a1:e5:41:1f:e7:37:03:4f:f5:46:0e:b9:42:8c:16: 3a:41:64:7f:4d:46:78:77:11:d8:d6:98:9f:b7:25: b7:75:80:d6:bf:3c:55:12:20:3d:4f:8b:5e:21:22: e6:b6:0e:79:b6:b6:eb:85:69:14:03:11:b4:e1:a4: af:75:88:02:67:fe:ab:83:c2:d5:e5:76:b2:b5:0d: 99:3d:86:3b:41:9a:06:06:f2:b6:73:4d:17:11:7c: 4e:58:b5:36:e3:23:bc:fe:d5:96:2b:0d:fb:26:df: 0c:b1:41:e7:14:ff:38:7a:a3:77:81:f8:c2:c5:56: bd:51:dd:38:13:b1:a5:51:71:ab:2e:0a:b5:30:21: ce:30:c5:55:57:a0:48:00:eb:4a:37:6b:2d:39:21: 5e:e1:fb:74:72:b5:cd:da:e9:1d:dd:38:ad:5c:d6: 01:39:79:ee:b5:21:80:2e:b3:ae:f0:28:f9:6e:05: 75:9b:24:58:e3:73:f3:b0:49:cc:2c:13:d4:5d:d7: a4:3c:64:6b:86:67:43:59:04:5f:66:0c:5e:0d:14: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:30:B9:03:FC:34:9E:36:75:8A:2D:07:CD:01:FB:F2:98:35:7B:07 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:12:7c:10:cb:a8:18:58:dc:a8:78:b3:07:77:7c:c9:3c:42: 1c:f2:29:9a:52:82:17:96:3c:5c:82:4c:7f:35:ad:13:b4:5a: 51:81:36:a8:e3:c8:b6:80:14:10:fd:1c:04:d7:cd:83:15:b9: da:b7:8e:0f:64:82:79:c4:aa:0e:c0:6e:97:e7:e4:b2:35:c6: a5:c5:7e:8d:61:e7:4c:a5:4c:02:9c:2f:19:82:0e:08:8a:45: b0:ad:d6:8d:fe:4b:1d:56:ed:3a:59:6c:6a:4c:10:a4:df:f9: 75:9c:d1:0e:f7:d2:a4:09:fd:1c:c9:ee:fb:57:fb:b1:bd:53: 5f:fb:96:17:b7:b0:b2:a2:77:2e:5b:b5:c5:dc:3f:10:2d:a3: c0:9c:42:a1:11:28:39:67:55:72:f6:fc:9f:ee:6a:e9:1b:7d: 97:b0:98:92:f4:3a:4b:62:80:05:af:85:a8:22:4c:27:85:b9: 58:b9:16:6b:e5:f5:84:6f:2e:ca:08:17:0b:14:5c:38:00:c1: 92:81:ed:b7:25:00:81:7e:f7:ee:9e:ec:75:98:4a:6e:35:22: f9:9c:79:fb:30:70:6f:fa:97:a7:df:de:3c:43:3b:4d:6a:1f: e3:e3:f4:aa:87:06:b1:9b:1d:e8:15:b1:5d:24:09:71:66:49: 00:33:b5:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjQwNTE4MTg0NTEwWhcNMjQwNTI1MTg0NTEwWjAYMRYwFAYD VQQDEw02NjQ4ZjczNi01NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IRRgBTGrfU3XDPo40xWrAWSnyExuqwiLlghql0MIaOqm7tEz+2sx8TZgWOh 5UEf5zcDT/VGDrlCjBY6QWR/TUZ4dxHY1piftyW3dYDWvzxVEiA9T4teISLmtg55 trbrhWkUAxG04aSvdYgCZ/6rg8LV5XaytQ2ZPYY7QZoGBvK2c00XEXxOWLU24yO8 /tWWKw37Jt8MsUHnFP84eqN3gfjCxVa9Ud04E7GlUXGrLgq1MCHOMMVVV6BIAOtK N2stOSFe4ft0crXN2ukd3TitXNYBOXnutSGALrOu8Cj5bgV1myRY43PzsEnMLBPU XdekPGRrhmdDWQRfZgxeDRQM2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBowuQP8 NJ42dYotB80B+/KYNXsHMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdEnwQy6gYWNyoeLMHd3zJPEIc8imaUoIXljxcgkx/Na0TtFpRgTao 48i2gBQQ/RwE182DFbnat44PZIJ5xKoOwG6X5+SyNcalxX6NYedMpUwCnC8Zgg4I ikWwrdaN/ksdVu06WWxqTBCk3/l1nNEO99KkCf0cye77V/uxvVNf+5YXt7Cyoncu W7XF3D8QLaPAnEKhESg5Z1Vy9vyf7mrpG32XsJiS9DpLYoAFr4WoIkwnhblYuRZr 5fWEby7KCBcLFFw4AMGSge23JQCBfvfunux1mEpuNSL5nHn7MHBv+pen3948QztN ah/j4/Sqhwaxmx3oFbFdJAlxZkkAM7Uq -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org