$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: /IxMQKmyeYSK4UWXyTneT6yPBBBhaDcQOvUkbb2pPSo= Subject key identifier: 53:29:4D:0E:86:94:5E:76:19:0A:79:A4:4E:16:3B:54:39:C3:19:8E Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 061A Signing time: Sat 18 May 2024 23:47:17 +0000 Manifest this update: Sat 18 May 2024 23:47:16 +0000 Manifest next update: Sat 25 May 2024 23:47:16 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: gjLhl7OE6hGa+bvCn9gi1rvQr8obZt1rjKHPiOKFdLc=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: FM7yDHlJcJDZzdbkKfFhR30NkATmp1gUFaWCKDL44ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: May 18 23:47:16 2024 GMT Not After : May 25 23:47:16 2024 GMT Subject: CN=66493e04-3578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:dd:02:c3:0c:93:db:6e:c4:87:bc:5d:35: df:dc:ca:b3:63:e0:7f:f6:c1:8c:68:cb:33:79:77: 9a:26:ae:d9:c1:fc:d7:ea:e6:91:4e:80:4d:61:f3: 46:15:fa:e2:9c:fe:60:ce:29:3b:36:7f:8b:f1:f4: 31:7f:9b:3f:5a:3c:e9:ed:c6:15:13:ed:24:9f:1e: 5f:a0:e4:71:56:b7:14:9d:f7:46:e6:31:6b:e2:5b: ee:ea:c5:19:e4:77:4d:18:66:53:2b:4b:11:6e:82: 66:5d:6b:ca:30:86:81:ae:27:b9:08:fb:eb:10:ff: 12:0b:0a:28:3f:44:13:6d:07:f8:dc:cd:25:3f:33: c9:47:27:be:ab:53:ba:ad:35:64:e6:5d:41:bf:18: 3c:f1:9f:2a:87:6e:dc:f5:1f:11:0c:98:57:bb:83: ab:5c:db:06:88:1f:75:ea:72:58:2e:92:42:05:9e: 67:0d:9e:e8:34:6c:5a:54:f2:94:fc:9e:d0:32:3c: 12:5b:7c:f2:36:77:91:82:6f:d4:b9:ec:31:06:d3: c1:92:bc:ef:6f:1f:f8:62:09:1b:28:30:a9:14:80: e5:f4:5f:88:6f:74:72:9d:91:8f:83:91:d4:d8:02: e2:29:49:50:3e:b9:1d:6c:4e:73:09:b0:2f:ce:6b: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:29:4D:0E:86:94:5E:76:19:0A:79:A4:4E:16:3B:54:39:C3:19:8E X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:38:af:09:98:c9:a4:8c:ef:28:95:2a:da:d7:87:3c:ab:d6: eb:19:ff:f8:52:0a:88:23:75:5e:cf:16:20:cb:2d:36:c0:9f: c8:d3:2c:11:94:5f:7f:be:01:79:fb:a2:ac:31:c8:90:0c:a7: 92:06:4e:fe:fc:3f:f7:6b:25:cd:e5:c0:9e:88:4b:48:b8:86: 3b:c0:f4:39:f3:8f:1b:f5:38:53:88:dd:a7:65:39:76:20:f7: 7b:cc:29:c9:fc:ba:21:49:cb:e9:64:d1:ec:95:92:25:e2:c5: 24:e5:a1:d8:55:ed:cd:61:70:00:fd:4a:66:33:49:42:74:37: 48:6e:04:2b:59:20:67:6c:91:dc:5f:3c:98:14:a0:b5:60:95: 4d:8f:fa:66:80:13:c4:64:40:5b:b5:59:98:fb:4c:08:b8:b1: e5:59:02:c4:df:6f:e7:0a:35:24:85:cc:05:ae:be:f1:89:11: 5c:24:d2:2f:dc:28:5a:8c:aa:94:9f:86:93:bf:bd:3a:b4:3b: ba:f5:54:a7:bb:81:de:dd:ef:91:fa:ad:ca:13:f8:e3:86:96: 3e:21:82:e6:f2:7e:ee:e8:bb:35:79:b1:e3:ed:09:d7:ca:80: 9f:2c:ef:12:33:7e:cc:31:ef:29:11:d1:a4:ae:8d:be:95:37: 9a:a3:25:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjQwNTE4MjM0NzE2WhcNMjQwNTI1MjM0NzE2WjAYMRYwFAYD VQQDEw02NjQ5M2UwNC0zNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ3dAsMMk9tuxIe8XTXf3MqzY+B/9sGMaMszeXeaJq7ZwfzX6uaRToBNYfNG FfrinP5gzik7Nn+L8fQxf5s/Wjzp7cYVE+0knx5foORxVrcUnfdG5jFr4lvu6sUZ 5HdNGGZTK0sRboJmXWvKMIaBrie5CPvrEP8SCwooP0QTbQf43M0lPzPJRye+q1O6 rTVk5l1Bvxg88Z8qh27c9R8RDJhXu4OrXNsGiB916nJYLpJCBZ5nDZ7oNGxaVPKU /J7QMjwSW3zyNneRgm/UuewxBtPBkrzvbx/4YgkbKDCpFIDl9F+Ib3RynZGPg5HU 2ALiKUlQPrkdbE5zCbAvzmucDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMpTQ6G lF52GQp5pE4WO1Q5wxmOMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+OK8JmMmkjO8olSra14c8q9brGf/4UgqII3VezxYgyy02wJ/I0ywR lF9/vgF5+6KsMciQDKeSBk7+/D/3ayXN5cCeiEtIuIY7wPQ5848b9ThTiN2nZTl2 IPd7zCnJ/LohScvpZNHslZIl4sUk5aHYVe3NYXAA/UpmM0lCdDdIbgQrWSBnbJHc XzyYFKC1YJVNj/pmgBPEZEBbtVmY+0wIuLHlWQLE32/nCjUkhcwFrr7xiRFcJNIv 3ChajKqUn4aTv706tDu69VSnu4He3e+R+q3KE/jjhpY+IYLm8n7u6Ls1ebHj7QnX yoCfLO8SM37MMe8pEdGkro2+lTeaoyUv -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org