$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: FiO1lXnx0v6+E+4wzfTrx9YmYg0xDsPh5+DHWpMwxn8= Subject key identifier: D4:29:71:45:4D:F6:A3:F3:75:54:C2:DB:83:92:87:3D:96:64:10:B3 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 33D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 33CC Signing time: Sat 18 May 2024 15:20:08 +0000 Manifest this update: Sat 18 May 2024 15:20:07 +0000 Manifest next update: Sat 25 May 2024 15:20:07 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: o9VOxPA4cPKHd4OW2L3ESyq8gdhokoKD/0xEDBxmBS0=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: EjYfF7OUsi1m/NUaj/yuG72bh8shIim1EGJED8rB8hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13268 (0x33d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: May 18 15:20:07 2024 GMT Not After : May 25 15:20:07 2024 GMT Subject: CN=6648c727-9778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:a7:5d:0a:4c:1e:ab:61:8b:66:ef:3d:94: b1:d3:e4:6f:eb:57:fe:46:20:fd:6e:5e:0a:44:11: e9:7c:95:01:b4:e8:c6:14:7a:70:73:41:c3:e6:7d: 0e:7e:eb:64:49:c5:e1:59:c4:71:c4:43:c8:54:dc: 32:43:49:61:2d:49:23:62:93:96:26:47:12:f8:0c: 14:27:de:0f:b2:f4:0c:d2:af:cc:c9:a3:e7:29:bb: 17:9f:22:25:af:e5:ef:5c:1d:42:71:a7:9d:6b:72: 2d:8f:74:28:7a:eb:a7:5f:f0:41:db:8d:4c:7e:bc: 04:52:57:85:e8:5a:0c:63:e4:f5:e9:a3:e3:9e:aa: d1:79:d2:65:66:bd:90:bd:7b:29:81:c5:c9:4b:01: 78:59:da:5f:e1:88:ff:32:b4:85:7a:63:11:4a:af: 42:d9:d3:11:7d:98:0b:1c:67:0a:6c:ed:87:2e:a4: f7:8e:38:0c:43:a9:40:42:db:8b:96:d1:ab:60:e1: 44:58:4c:cb:30:d6:a2:dc:50:ca:c2:14:45:6a:d4: 24:dc:87:4f:e3:27:95:62:f5:9f:88:55:c3:4e:53: ae:35:80:d9:96:23:b5:b8:84:16:38:69:11:1a:ff: b4:09:80:2f:66:de:b0:49:86:1d:73:48:5e:51:93: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:71:45:4D:F6:A3:F3:75:54:C2:DB:83:92:87:3D:96:64:10:B3 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:97:ba:e5:58:d8:dc:71:3c:87:19:c9:7a:ef:29:3e:96:eb: eb:59:74:9b:8f:d0:32:51:f2:f9:32:78:b9:d5:3b:79:a9:a8: 1a:36:e2:ea:4d:a9:37:2e:79:a1:df:a5:39:b0:82:8e:ae:db: c0:60:c6:d7:9c:8e:1e:f5:b6:31:f0:86:0f:32:6a:d5:c9:d7: 52:14:b1:2f:61:a3:0c:2b:bc:06:cb:8b:bc:d7:64:a8:91:b5: 27:c3:39:70:5b:ff:d1:8b:9f:bf:f8:ef:82:fa:36:04:62:1a: a0:3e:09:f7:9c:9c:17:a9:69:3e:47:e6:51:44:3b:fb:5d:96: 21:9c:da:70:d6:3e:bd:63:e1:9f:f5:c3:a2:59:1f:07:d8:54: c5:5a:a6:93:60:f3:1b:fa:44:47:e4:e4:f4:cb:fc:82:75:a9: 3d:44:a9:a7:3e:5b:2f:0c:be:4b:84:ce:d5:f9:45:83:c4:59: d6:b8:d0:da:7b:9d:66:82:24:c0:63:a5:43:e6:a4:09:a6:0f: 7f:be:82:60:a3:e3:57:e0:ac:17:65:20:38:44:28:9e:9c:04: ee:1a:e0:e3:eb:cd:df:ba:38:c5:8c:f2:86:bf:bb:77:c8:a0: d4:cd:00:49:97:1b:36:8b:f1:ec:51:2a:82:dc:21:2c:e2:da: 9d:d4:41:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjQwNTE4MTUyMDA3WhcNMjQwNTI1MTUyMDA3WjAYMRYwFAYD VQQDEw02NjQ4YzcyNy05Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWOnXQpMHqthi2bvPZSx0+Rv61f+RiD9bl4KRBHpfJUBtOjGFHpwc0HD5n0O futkScXhWcRxxEPIVNwyQ0lhLUkjYpOWJkcS+AwUJ94PsvQM0q/MyaPnKbsXnyIl r+XvXB1Ccaeda3Itj3QoeuunX/BB241MfrwEUleF6FoMY+T16aPjnqrRedJlZr2Q vXspgcXJSwF4Wdpf4Yj/MrSFemMRSq9C2dMRfZgLHGcKbO2HLqT3jjgMQ6lAQtuL ltGrYOFEWEzLMNai3FDKwhRFatQk3IdP4yeVYvWfiFXDTlOuNYDZliO1uIQWOGkR Gv+0CYAvZt6wSYYdc0heUZOL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQpcUVN 9qPzdVTC24OShz2WZBCzMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6l7rlWNjccTyHGcl67yk+luvrWXSbj9AyUfL5Mni51Tt5qagaNuLq Tak3Lnmh36U5sIKOrtvAYMbXnI4e9bYx8IYPMmrVyddSFLEvYaMMK7wGy4u812So kbUnwzlwW//Ri5+/+O+C+jYEYhqgPgn3nJwXqWk+R+ZRRDv7XZYhnNpw1j69Y+Gf 9cOiWR8H2FTFWqaTYPMb+kRH5OT0y/yCdak9RKmnPlsvDL5LhM7V+UWDxFnWuNDa e51mgiTAY6VD5qQJpg9/voJgo+NX4KwXZSA4RCienATuGuDj683fujjFjPKGv7t3 yKDUzQBJlxs2i/HsUSqC3CEs4tqd1EH0 -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org