$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json) Hash identifier: YE8wdzZEjG4ea4rRTWxGveXSGr3LsBe6jX1BmyZk1G4= Subject key identifier: 3C:C6:50:CD:72:F7:EF:DC:A2:B4:F2:EF:EE:52:C2:21:B6:B1:2B:36 Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Certificate serial: 0D50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft Manifest number: 0D46 Signing time: Sat 18 May 2024 18:39:05 +0000 Manifest this update: Sat 18 May 2024 18:39:04 +0000 Manifest next update: Sat 25 May 2024 18:39:04 +0000 Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: UtQVzcYJWsRYOgGiOIOjHo60ehjSfABSSAZsFKwm3xw=) 2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: zKxP5VFtHCRy0JiVu3mKaiT0ToLV7OxR+IDhqx/RqV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Validity Not Before: May 18 18:39:04 2024 GMT Not After : May 25 18:39:04 2024 GMT Subject: CN=6648f5c8-3966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:3d:81:d4:15:33:45:11:97:5d:79:2e:de: 4b:5e:62:dd:09:61:67:8f:53:0b:2f:3a:0c:f3:2d: 20:e5:b6:0d:47:0d:a5:f2:80:63:22:ae:7c:0e:7b: 5b:5b:89:8d:86:dc:d4:76:47:f4:17:06:2e:88:76: b3:3a:db:ff:ee:c6:9c:bc:fe:93:15:11:9d:19:ac: a5:06:3f:6d:41:bc:e5:16:9b:42:c1:f8:8d:b6:46: 68:b4:39:90:92:2f:bd:a4:c4:a3:51:9d:de:12:11: fb:a1:cc:cd:a8:f4:c0:8c:45:e1:92:b4:ea:42:a7: 41:4c:09:c5:3a:b6:be:04:0a:91:f5:a6:7d:f0:14: 45:2f:b2:49:23:89:35:b4:00:e9:c5:36:a9:1c:90: 1c:f6:a2:61:24:61:66:01:09:ee:0c:75:5b:dd:57: 18:85:5b:50:dc:82:99:a0:6a:e7:b8:81:30:81:16: 98:d4:93:ce:4e:92:d0:f8:a1:58:48:1e:4c:4e:b3: c8:60:95:b3:0b:d4:c5:da:21:32:ef:c7:7b:1c:0f: 61:41:39:66:93:67:35:4e:ee:be:92:b9:7c:ff:34: 97:de:b4:7b:72:6e:07:d1:60:61:aa:93:74:59:db: eb:c0:40:ac:cb:48:26:67:ea:54:ab:53:fc:f2:4e: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:50:CD:72:F7:EF:DC:A2:B4:F2:EF:EE:52:C2:21:B6:B1:2B:36 X509v3 Authority Key Identifier: keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ae:eb:fa:31:85:ff:93:9f:60:97:83:3f:be:88:7e:a6:77: 87:6f:68:29:ca:80:47:11:44:3b:f7:5c:cb:1f:b3:92:3e:7f: ac:37:6b:01:40:f2:62:5c:ba:03:0e:91:9c:d8:31:0f:dd:aa: d5:64:47:f2:44:de:f7:da:f3:7b:f9:41:fa:5b:55:8e:1f:53: 07:0c:b8:cf:9d:2d:ff:19:6b:0b:49:09:4e:9b:1f:c8:c9:f9: cf:8b:d1:54:e5:b2:52:31:34:91:d0:4c:6f:45:e0:25:e5:88: 24:f1:b5:af:5c:90:2a:1a:81:7d:e9:8d:d9:f6:53:46:36:72: 3b:e2:93:cf:b0:95:b4:cc:39:fa:ec:a7:20:e3:e1:ba:2b:ec: 86:07:62:4d:be:16:da:ec:02:8b:1e:70:62:5c:7b:2d:9d:ef: 0f:0c:8b:05:33:75:06:66:e8:fb:db:b4:ea:cf:81:f1:28:16: 60:58:d3:ef:22:6e:8a:fb:f5:f9:80:4e:9f:a7:2f:50:3c:a2: 6e:2f:20:1c:0b:1b:60:1b:62:9f:46:b1:37:4a:b3:27:f3:d5: d0:02:d9:65:ce:d3:25:a9:7e:2a:b5:29:99:9f:58:27:57:aa: b7:e8:00:ba:2d:7c:13:bc:94:a1:2d:ed:3b:b8:03:ed:d0:d2: 7e:ea:ae:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz ODFCNUM0MjYwHhcNMjQwNTE4MTgzOTA0WhcNMjQwNTI1MTgzOTA0WjAYMRYwFAYD VQQDEw02NjQ4ZjVjOC0zOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZg9gdQVM0URl115Lt5LXmLdCWFnj1MLLzoM8y0g5bYNRw2l8oBjIq58Dntb W4mNhtzUdkf0FwYuiHazOtv/7sacvP6TFRGdGaylBj9tQbzlFptCwfiNtkZotDmQ ki+9pMSjUZ3eEhH7oczNqPTAjEXhkrTqQqdBTAnFOra+BAqR9aZ98BRFL7JJI4k1 tADpxTapHJAc9qJhJGFmAQnuDHVb3VcYhVtQ3IKZoGrnuIEwgRaY1JPOTpLQ+KFY SB5MTrPIYJWzC9TF2iEy78d7HA9hQTlmk2c1Tu6+krl8/zSX3rR7cm4H0WBhqpN0 WdvrwECsy0gmZ+pUq1P88k4DpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzGUM1y 9+/corTy7+5SwiG2sSs2MB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1G QS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8ruv6MYX/k59gl4M/voh+pneHb2gpyoBHEUQ791zLH7OSPn+sN2sB QPJiXLoDDpGc2DEP3arVZEfyRN732vN7+UH6W1WOH1MHDLjPnS3/GWsLSQlOmx/I yfnPi9FU5bJSMTSR0ExvReAl5Ygk8bWvXJAqGoF96Y3Z9lNGNnI74pPPsJW0zDn6 7Kcg4+G6K+yGB2JNvhba7AKLHnBiXHstne8PDIsFM3UGZuj727Tqz4HxKBZgWNPv Im6K+/X5gE6fpy9QPKJuLyAcCxtgG2KfRrE3SrMn89XQAtllztMlqX4qtSmZn1gn V6q36AC6LXwTvJShLe07uAPt0NJ+6q5I -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org