$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json) Hash identifier: yUARjf96bLGBfXCdYToYXkqz6uJ3W7MyvblrHmVZ83I= Subject key identifier: 73:03:04:29:28:F6:F4:31:98:46:4B:59:D9:5D:B7:D8:6F:18:9E:C1 Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft Manifest number: EB Signing time: Sun 19 May 2024 05:49:43 +0000 Manifest this update: Sun 19 May 2024 05:49:42 +0000 Manifest next update: Sun 26 May 2024 05:49:42 +0000 Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: CMRUFEAdmVtMajVP9FH0XOWBNFqp2EDr0D3u6mOKkWg=) 2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: av50KdE8ZgZ7A6ozI//fdNaXcazS4Szqv0F3J1QHjug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Validity Not Before: May 19 05:49:42 2024 GMT Not After : May 26 05:49:42 2024 GMT Subject: CN=664992f7-7f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:07:e8:4a:95:5f:a2:8c:0a:5b:bb:10:44: a9:70:a8:25:3c:d5:bd:6b:23:c7:d6:7c:49:85:79: 26:62:fc:78:eb:da:c7:a1:c0:8b:45:5f:89:bb:4a: cb:1f:a4:21:7b:42:17:60:4c:ba:b6:9e:68:25:9d: 26:fb:21:90:23:83:82:82:1e:8f:48:c8:3a:6d:2c: 9c:03:f7:0f:76:9b:ab:31:de:55:57:4a:cd:40:bd: b3:9c:73:92:85:ab:30:3a:04:7f:01:a0:1a:bb:da: 23:81:f5:d5:01:b6:a2:0f:f9:ce:23:58:6d:46:74: 70:82:b5:1b:53:d1:6d:ea:b9:72:2b:f2:9f:fc:c0: ad:cc:e1:6a:04:8a:e7:61:d4:64:06:9a:d9:da:3b: d5:ee:99:cc:c8:5b:f0:ac:d7:e9:e1:ae:9f:5e:85: e3:ef:47:49:f8:c8:39:6c:ff:ea:0b:f8:5c:47:4f: 10:54:c6:8b:b9:be:0d:ac:cb:89:d4:99:1d:27:b9: 15:57:44:07:23:58:84:80:5a:a2:70:87:dc:96:f5: 40:8f:b1:90:13:71:e2:16:e4:e2:7e:a4:d3:8d:ea: f9:e3:69:7f:42:34:46:14:09:20:e9:71:20:fc:0f: 96:90:34:fb:5c:89:5f:56:a1:d7:61:34:a8:77:ac: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:03:04:29:28:F6:F4:31:98:46:4B:59:D9:5D:B7:D8:6F:18:9E:C1 X509v3 Authority Key Identifier: keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:15:81:46:d7:b6:c5:75:51:eb:f1:71:25:e2:a6:d3:d2:06: a8:a8:31:2f:ca:b9:b3:ed:d0:26:af:b0:5d:71:af:9e:9d:5b: 49:58:ba:f4:ed:2e:32:e8:db:4b:06:d5:f8:3e:0e:34:ca:04: da:2e:27:fb:96:0c:8f:6e:d4:62:61:27:64:12:c3:48:62:ad: 91:2a:4f:4b:84:48:20:2c:0e:6a:d3:9b:f1:da:f3:cd:3c:ce: 46:5c:cf:5e:bc:85:0d:95:b0:fe:1c:6a:77:81:66:e9:e1:7a: a5:ad:cc:c5:97:b1:36:9b:a2:42:1d:6e:1a:7f:96:01:41:01: df:e5:5d:cc:82:3a:fd:19:40:2e:86:c3:7c:bc:12:cc:42:6d: db:11:e1:aa:e5:3b:cc:fa:06:40:2b:ac:d2:8c:be:5e:69:a7: 4e:99:58:08:6d:06:28:ec:90:e6:ad:b9:bb:b3:e6:12:72:6e: 86:4e:25:aa:1e:bc:6f:db:e6:81:f4:fe:aa:d8:9e:16:21:55: db:e0:c1:2e:24:61:78:e3:ad:05:62:27:6e:72:e9:11:b1:67: c4:f9:61:3c:22:4c:dc:d8:6f:e9:de:46:45:60:bb:a8:f7:07: b6:0c:76:5c:d2:56:94:71:f1:3d:4c:d0:ea:a1:a5:47:ed:6c: fc:8d:4a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4 REFBRkRDREUwHhcNMjQwNTE5MDU0OTQyWhcNMjQwNTI2MDU0OTQyWjAYMRYwFAYD VQQDEw02NjQ5OTJmNy03ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9IH6EqVX6KMClu7EESpcKglPNW9ayPH1nxJhXkmYvx469rHocCLRV+Ju0rL H6Qhe0IXYEy6tp5oJZ0m+yGQI4OCgh6PSMg6bSycA/cPdpurMd5VV0rNQL2znHOS haswOgR/AaAau9ojgfXVAbaiD/nOI1htRnRwgrUbU9Ft6rlyK/Kf/MCtzOFqBIrn YdRkBprZ2jvV7pnMyFvwrNfp4a6fXoXj70dJ+Mg5bP/qC/hcR08QVMaLub4NrMuJ 1JkdJ7kVV0QHI1iEgFqicIfclvVAj7GQE3HiFuTifqTTjer542l/QjRGFAkg6XEg /A+WkDT7XIlfVqHXYTSod6x3OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMDBCko 9vQxmEZLWdldt9hvGJ7BMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIFYFG17bFdVHr8XEl4qbT0gaoqDEvyrmz7dAmr7Bdca+enVtJWLr0 7S4y6NtLBtX4Pg40ygTaLif7lgyPbtRiYSdkEsNIYq2RKk9LhEggLA5q05vx2vPN PM5GXM9evIUNlbD+HGp3gWbp4XqlrczFl7E2m6JCHW4af5YBQQHf5V3Mgjr9GUAu hsN8vBLMQm3bEeGq5TvM+gZAK6zSjL5eaadOmVgIbQYo7JDmrbm7s+YScm6GTiWq Hrxv2+aB9P6q2J4WIVXb4MEuJGF4460FYiducukRsWfE+WE8Ikzc2G/p3kZFYLuo 9we2DHZc0laUcfE9TNDqoaVH7Wz8jUp5 -----END CERTIFICATE-----Generated at Sun May 19 08:24:59 2024 by rpki-client on console-ams.rpki-client.org