$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft File: JSBFeBemYmHoez5BhOhi2ka6nw0.mft (raw, json) Hash identifier: dv1sQ4wh3nQV8EMWOLXVda/iz/efTsyB296s9a+xas8= Subject key identifier: F1:7F:3E:4F:E0:B3:5B:80:3D:D7:1B:DC:5C:5F:AF:DE:A1:29:CD:7E Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D Certificate issuer: /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft Manifest number: 05A7 Signing time: Sat 01 Jun 2024 01:09:07 +0000 Manifest this update: Sat 01 Jun 2024 01:09:07 +0000 Manifest next update: Sat 08 Jun 2024 01:09:07 +0000 Files and hashes: 1: JSBFeBemYmHoez5BhOhi2ka6nw0.crl (hash: PD8X+t7XTTIEuIt5BjvduGT/pwemmHVezg2mgtI3cuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Validity Not Before: Jun 1 01:09:07 2024 GMT Not After : Jun 8 01:09:07 2024 GMT Subject: CN=665a74b3-f503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:b2:bf:a3:cb:cb:80:9e:b3:16:2f:c1:c2: f0:a3:ef:08:b9:0f:ab:bd:ed:98:ee:56:8d:35:29: 4c:dc:ea:7e:f7:57:a7:29:00:f8:c3:1a:dd:d1:55: f9:d5:dc:b0:91:29:88:12:4b:1f:2c:50:c8:c1:4c: 45:84:ae:c9:15:5f:84:03:04:4c:c3:0b:b3:cc:90: 6e:45:97:22:ae:9f:8f:80:52:d7:cb:38:bd:14:18: 59:3c:bb:1b:e6:0b:36:67:b6:25:e6:86:db:12:7b: fb:30:bb:a8:71:72:f9:3b:82:6a:c8:7c:3c:56:f1: 01:4d:92:49:5e:a1:64:d0:e0:e6:ad:2b:fa:1f:82: ed:16:07:99:0c:53:b8:2c:e3:23:5b:48:d0:30:90: 68:18:8e:5b:66:34:1f:85:ef:0d:12:dc:5c:4a:2e: fd:48:be:3a:e6:23:e3:bd:cd:48:1b:1b:47:71:19: e5:3c:e8:a4:c3:c0:b6:d6:70:7b:3d:df:37:ab:02: e5:cc:05:f7:0b:13:28:e5:d4:f3:6d:5b:2d:ac:57: 59:93:82:12:c4:e9:8a:61:83:d9:83:b6:68:b7:74: d8:e5:a0:64:dc:68:43:60:59:75:ff:fa:3d:64:b9: 2f:1b:a9:5a:2a:b1:1d:ce:b3:06:16:b7:20:c6:7a: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:3E:4F:E0:B3:5B:80:3D:D7:1B:DC:5C:5F:AF:DE:A1:29:CD:7E X509v3 Authority Key Identifier: keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bd:e6:d8:af:d9:19:ee:76:bf:83:d3:be:4d:9f:f2:aa:38: 4b:44:d0:ac:f7:20:4a:b4:c8:74:40:88:15:88:a9:1b:b7:42: c2:7d:52:47:6c:6e:7f:33:4b:8e:00:70:d7:ac:27:11:df:e5: 53:89:b9:6b:b3:be:9c:5b:34:d8:43:a3:5a:72:59:a8:9d:45: 30:41:7d:14:7b:76:00:55:70:6b:b2:88:ed:85:87:2d:12:b4: dc:25:f0:b0:5b:9c:c0:c6:b0:58:d8:26:eb:d9:8d:65:f5:8e: 9f:44:8f:68:80:28:49:a4:03:ff:81:36:02:c9:7e:79:41:55: 36:2e:20:33:ee:58:31:dd:18:aa:46:a0:6a:a2:44:b0:46:64: ad:9b:11:07:0b:92:a9:49:da:ef:08:e2:f2:e4:cd:b8:69:2e: 79:bd:c7:7a:ef:66:92:e0:58:dd:76:02:ae:90:d7:c3:7b:b2: cc:76:7e:f3:01:24:5d:83:04:a5:dc:19:db:1e:cd:24:60:b6: 38:d2:7b:fa:97:6a:82:0c:f0:f1:75:1b:d0:86:b5:3b:5c:b7: 79:af:fe:48:4f:06:cf:ec:08:f7:45:41:85:a3:96:6d:00:cc: 35:71:35:84:d1:7f:e0:d1:d3:1c:c1:25:d6:11:ef:1b:41:10: 87:ff:e3:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFQjUxMTAvBgNVBAUTKDI1MjA0NTc4MTdBNjYyNjFFODdCM0U0MTg0RTg2MkRB NDZCQTlGMEQwHhcNMjQwNjAxMDEwOTA3WhcNMjQwNjA4MDEwOTA3WjAYMRYwFAYD VQQDEw02NjVhNzRiMy1mNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySCyv6PLy4CesxYvwcLwo+8IuQ+rve2Y7laNNSlM3Op+91enKQD4wxrd0VX5 1dywkSmIEksfLFDIwUxFhK7JFV+EAwRMwwuzzJBuRZcirp+PgFLXyzi9FBhZPLsb 5gs2Z7Yl5obbEnv7MLuocXL5O4JqyHw8VvEBTZJJXqFk0ODmrSv6H4LtFgeZDFO4 LOMjW0jQMJBoGI5bZjQfhe8NEtxcSi79SL465iPjvc1IGxtHcRnlPOikw8C21nB7 Pd83qwLlzAX3CxMo5dTzbVstrFdZk4ISxOmKYYPZg7Zot3TY5aBk3GhDYFl1//o9 ZLkvG6laKrEdzrMGFrcgxnqReQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF/Pk/g s1uAPdcb3Fxfr96hKc1+MB8GA1UdIwQYMBaAFCUgRXgXpmJh6Hs+QYToYtpGup8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUVCNS9DNTdFMzhGQzdG OUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVltSG9lejVCaE9oaTJrYTZu dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTQkZlQmVtWW1Ib2V6NUJoT2hpMmthNm53MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUVCNS9DNTdFMzhGQzdGOUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVlt SG9lejVCaE9oaTJrYTZudzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpvebYr9kZ7na/g9O+TZ/yqjhLRNCs9yBKtMh0QIgViKkbt0LCfVJH bG5/M0uOAHDXrCcR3+VTiblrs76cWzTYQ6NaclmonUUwQX0Ue3YAVXBrsojthYct ErTcJfCwW5zAxrBY2Cbr2Y1l9Y6fRI9ogChJpAP/gTYCyX55QVU2LiAz7lgx3Riq RqBqokSwRmStmxEHC5KpSdrvCOLy5M24aS55vcd672aS4FjddgKukNfDe7LMdn7z ASRdgwSl3BnbHs0kYLY40nv6l2qCDPDxdRvQhrU7XLd5r/5ITwbP7Aj3RUGFo5Zt AMw1cTWE0X/g0dMcwSXWEe8bQRCH/+OP -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:14 2024 by rpki-client on console-ams.rpki-client.org