$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: 6XEC3r88D8ugCrUUCkXwBXe4YvbsHUA+RJtskJA6fdw= Subject key identifier: AE:E6:C1:0C:88:9B:08:23:09:BA:3E:2B:29:D3:12:10:00:21:52:A7 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 09F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 09E4 Signing time: Sat 18 May 2024 20:43:59 +0000 Manifest this update: Sat 18 May 2024 20:43:59 +0000 Manifest next update: Sat 25 May 2024 20:43:59 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: s3MfnKCynnwBa3NSRGVo1NWVTLMWFj5DMzwSDYcrVuQ=) 2: 246E655C29C411EE805CA924C4F9AE02.roa (hash: ftD+z/hPgH6m1Jsi2Drn9jgEMj9+kiAfjggb6djUIk8=) 3: C6766086579811EAA245BE5EC4F9AE02.roa (hash: xCaFRLPGD9q69hJ0yZ+vFad3g0XuUKgpA3HR+sQMI6A=) 4: 83088456569311EA8AFD2E13C4F9AE02.roa (hash: Z4kgoBLDS5ZeAuFeFiODWdvCEVRm9eowXieAC9F7hiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: May 18 20:43:59 2024 GMT Not After : May 25 20:43:59 2024 GMT Subject: CN=6649130f-4bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:8a:36:99:b3:b4:92:31:1f:d5:72:d5:7d: 4a:dd:8e:3e:8a:3c:b9:f5:66:62:5e:4b:63:bc:4c: 7e:e3:e9:2d:cb:4e:35:d3:67:7e:d9:cd:67:84:61: 14:91:c9:28:ec:3d:46:65:c3:4b:9c:0b:60:43:50: 32:4c:63:52:a1:93:09:41:54:3f:76:d0:5b:aa:a6: f3:00:e7:ea:57:d8:7a:2c:0d:2c:fc:02:9f:60:54: 42:4d:f3:25:d3:1d:67:83:ef:e7:bd:0a:ca:27:d7: 1d:59:ac:88:69:64:6c:ae:6d:be:6a:3b:a8:87:b0: d4:c3:53:41:13:68:be:85:e9:04:28:99:7d:bc:d0: 24:4f:41:ce:5e:83:07:27:e1:a5:b2:71:7b:04:7f: c4:65:03:2b:d7:a0:8f:93:90:02:61:db:b7:31:d2: 9c:05:3c:01:04:d9:9d:8a:27:34:82:67:4d:b5:7a: c4:a3:d8:da:6d:69:44:99:bc:c3:63:f8:27:cc:f1: 19:91:77:1f:a3:c2:65:29:e5:f0:7e:38:c8:63:b5: 05:27:d1:a7:c8:5f:88:4d:3a:d6:2b:e0:5b:e0:89: 22:8c:94:a1:df:17:15:c5:f2:7e:05:d3:58:25:00: 8b:23:d8:63:0c:a7:55:d5:77:63:c1:d2:5d:03:18: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E6:C1:0C:88:9B:08:23:09:BA:3E:2B:29:D3:12:10:00:21:52:A7 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:b3:03:45:04:0a:0a:af:3c:b3:32:12:64:92:c8:84:0b:1e: 65:56:bc:98:6e:94:7a:50:85:d4:19:68:b9:e2:dc:fe:b2:4b: b7:65:68:1c:71:eb:8c:03:8d:a2:a4:d7:27:a2:8a:7a:bd:b3: 2c:94:7b:90:8d:fd:c3:84:02:a6:3d:02:7f:42:45:ac:4d:df: e2:dd:ae:f0:85:15:be:4d:1a:6d:36:d1:1b:fd:14:b0:49:c7: 87:6b:44:5c:d0:fa:bc:f9:9f:cb:10:e9:6f:85:6d:c5:04:2d: 9a:cc:77:89:b5:ea:d4:a3:96:94:9f:0b:cb:c5:bf:bf:85:ff: 26:7a:e2:f3:50:b9:76:ca:f6:04:ee:2d:24:09:13:65:b7:e6: c0:ec:18:9f:b1:44:09:8a:3e:9b:97:3a:d0:fb:da:4b:4e:83: 92:56:1c:59:e1:5c:28:45:0d:cd:cf:c8:84:13:ed:c2:41:6a: 89:dd:63:c1:e9:cc:e8:30:a4:e1:c7:a5:7e:da:13:bc:ac:ca: bc:4d:35:fb:90:df:38:6e:5b:ef:97:08:f8:02:71:c2:ee:70: 6c:6d:21:1c:ec:a7:14:23:c1:a6:2d:35:97:9a:05:78:cc:16: e8:d2:34:5a:72:f6:55:e8:d6:ad:fb:8d:4d:e0:19:81:61:66: f4:79:2c:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjQwNTE4MjA0MzU5WhcNMjQwNTI1MjA0MzU5WjAYMRYwFAYD VQQDEw02NjQ5MTMwZi00YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CqKNpmztJIxH9Vy1X1K3Y4+ijy59WZiXktjvEx+4+kty04102d+2c1nhGEU kcko7D1GZcNLnAtgQ1AyTGNSoZMJQVQ/dtBbqqbzAOfqV9h6LA0s/AKfYFRCTfMl 0x1ng+/nvQrKJ9cdWayIaWRsrm2+ajuoh7DUw1NBE2i+hekEKJl9vNAkT0HOXoMH J+GlsnF7BH/EZQMr16CPk5ACYdu3MdKcBTwBBNmdiic0gmdNtXrEo9jabWlEmbzD Y/gnzPEZkXcfo8JlKeXwfjjIY7UFJ9GnyF+ITTrWK+Bb4IkijJSh3xcVxfJ+BdNY JQCLI9hjDKdV1XdjwdJdAxgRKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7mwQyI mwgjCbo+KynTEhAAIVKnMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCswNFBAoKrzyzMhJkksiECx5lVryYbpR6UIXUGWi54tz+sku3ZWgc ceuMA42ipNcnoop6vbMslHuQjf3DhAKmPQJ/QkWsTd/i3a7whRW+TRptNtEb/RSw SceHa0Rc0Pq8+Z/LEOlvhW3FBC2azHeJterUo5aUnwvLxb+/hf8meuLzULl2yvYE 7i0kCRNlt+bA7BifsUQJij6blzrQ+9pLToOSVhxZ4VwoRQ3Nz8iEE+3CQWqJ3WPB 6czoMKThx6V+2hO8rMq8TTX7kN84blvvlwj4AnHC7nBsbSEc7KcUI8GmLTWXmgV4 zBbo0jRacvZV6Nat+41N4BmBYWb0eSw7 -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org