$ rpki-client -vvf rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft File: J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft (raw, json) Hash identifier: +R/2kbnAy2aekpOHQeVKI2h8srZVm6tgpeUMHywEHm4= Subject key identifier: 45:BC:B3:93:09:50:E9:B9:34:D2:96:27:56:0E:96:CF:BA:E8:9B:BD Authority key identifier: 27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 Certificate issuer: /CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft Manifest number: 011A Signing time: Sun 19 May 2024 05:12:55 +0000 Manifest this update: Sun 19 May 2024 05:12:55 +0000 Manifest next update: Sun 26 May 2024 05:12:55 +0000 Files and hashes: 1: J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl (hash: XBg4IGCTC+rL/M3ZeQRNnBK2IZbfniBO2ZRWQCokWtk=) 2: 35C34054633911ED97F86846C4F9AE02.roa (hash: JAkxposU7zPkI2hlagULp50sjGgg4ZgrQh3LQ/yGr7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F55C/serialNumber=27DA0054CFBAB3E3DB063FC23D335B37B89E4195 Validity Not Before: May 19 05:12:55 2024 GMT Not After : May 26 05:12:55 2024 GMT Subject: CN=66498a57-64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:11:a4:57:c3:09:b6:04:87:3e:ab:d0:f6: 41:e0:ba:9c:2d:af:42:1d:ce:9c:e3:e5:27:9a:76: 94:22:73:6e:63:a2:34:97:9c:21:3a:15:77:4d:7f: 96:73:d4:e3:af:0a:42:46:f4:c5:01:fa:53:0d:01: 68:bc:79:79:75:8a:c8:cd:a6:a7:04:99:ba:b2:f5: 36:c6:98:df:0b:e4:3d:3b:45:a7:3d:10:e7:55:40: df:31:0a:a4:d3:22:ca:a7:1d:5e:d6:f2:a1:1f:c5: e7:43:90:c6:ac:48:4d:29:0e:c3:8a:49:79:e8:ac: c2:6f:09:f9:5d:b8:83:fa:04:04:84:68:6a:6e:c9: 29:f1:cd:1c:a8:41:44:20:65:17:1e:42:e4:76:da: 84:ef:0f:26:62:b9:01:81:32:66:51:56:94:ba:2b: 30:27:66:07:0d:5a:ed:6b:f1:4a:51:0b:9e:f3:62: 9b:8c:16:76:e3:86:6b:12:3d:49:67:cc:e1:fd:f5: d2:88:7f:9b:3d:08:9c:0a:09:5d:2c:89:d6:88:9b: fe:53:46:a7:6d:37:94:8a:b6:2f:c7:1f:fb:33:63: fd:08:49:84:ae:73:67:38:21:86:38:b4:3a:33:ed: 97:7b:c6:44:26:8e:29:78:f2:81:95:80:78:76:38: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:B3:93:09:50:E9:B9:34:D2:96:27:56:0E:96:CF:BA:E8:9B:BD X509v3 Authority Key Identifier: keyid:27:DA:00:54:CF:BA:B3:E3:DB:06:3F:C2:3D:33:5B:37:B8:9E:41:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J9oAVM-6s-PbBj_CPTNbN7ieQZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F55C/349800BE633611EDA64FD944C4F9AE02/J9oAVM-6s-PbBj_CPTNbN7ieQZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:66:a3:38:f4:40:d9:e6:e7:4c:a1:dc:fc:48:43:de:b5:4a: 7a:13:06:2c:fa:88:0f:b1:14:1f:74:76:38:22:8c:4b:97:5c: 4f:9d:f7:fa:e5:5f:4d:39:77:77:a0:16:ec:b1:f2:74:ef:ab: 6f:67:64:f3:03:33:98:5b:60:53:78:82:43:30:43:d6:f6:47: 3c:f7:af:c9:88:87:96:de:13:ed:4f:2e:c0:7d:d1:6d:05:55: b9:7b:fd:30:6c:91:f2:56:31:54:25:19:53:2f:5b:46:7d:f6: e9:ab:a4:25:0e:b0:1f:f6:ea:c1:b1:08:1b:58:b8:0d:eb:5d: fb:49:36:97:24:5a:f4:86:03:57:4b:14:53:c6:10:3d:25:5c: 72:39:0f:20:08:e2:19:b5:3e:6c:0d:38:cd:76:15:22:d4:9c: 1b:ee:ba:3a:17:91:01:7e:86:10:bc:1f:49:e2:fb:f3:cc:21: 4f:1c:3f:f6:4b:57:5f:25:f2:85:18:c6:3d:20:a5:b0:8d:9c: 05:e4:c0:0e:d1:b0:4b:1c:50:fa:58:83:e2:27:82:b2:ee:e7: 2b:f2:d6:84:6b:5f:cd:bf:51:0c:70:03:73:84:60:95:57:58: ec:61:e7:31:aa:20:7c:2e:d5:77:f5:7e:9e:bf:68:d1:ae:24: ce:8c:f6:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1NUMxMTAvBgNVBAUTKDI3REEwMDU0Q0ZCQUIzRTNEQjA2M0ZDMjNEMzM1QjM3 Qjg5RTQxOTUwHhcNMjQwNTE5MDUxMjU1WhcNMjQwNTI2MDUxMjU1WjAYMRYwFAYD VQQDEw02NjQ5OGE1Ny02NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeQRpFfDCbYEhz6r0PZB4LqcLa9CHc6c4+UnmnaUInNuY6I0l5whOhV3TX+W c9TjrwpCRvTFAfpTDQFovHl5dYrIzaanBJm6svU2xpjfC+Q9O0WnPRDnVUDfMQqk 0yLKpx1e1vKhH8XnQ5DGrEhNKQ7Dikl56KzCbwn5XbiD+gQEhGhqbskp8c0cqEFE IGUXHkLkdtqE7w8mYrkBgTJmUVaUuiswJ2YHDVrta/FKUQue82KbjBZ244ZrEj1J Z8zh/fXSiH+bPQicCgldLInWiJv+U0anbTeUirYvxx/7M2P9CEmErnNnOCGGOLQ6 M+2Xe8ZEJo4pePKBlYB4djhS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW8s5MJ UOm5NNKWJ1YOls+66Ju9MB8GA1UdIwQYMBaAFCfaAFTPurPj2wY/wj0zWze4nkGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU1Qy8zNDk4MDBCRTYz MzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMtUGJCal9DUFROYk43aWVR WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5b0FWTS02cy1QYkJqX0NQVE5iTjdpZVFaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU1Qy8zNDk4MDBCRTYzMzYxMUVEQTY0RkQ5NDRDNEY5QUUwMi9KOW9BVk0tNnMt UGJCal9DUFROYk43aWVRWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzZqM49EDZ5udModz8SEPetUp6EwYs+ogPsRQfdHY4IoxLl1xPnff6 5V9NOXd3oBbssfJ076tvZ2TzAzOYW2BTeIJDMEPW9kc896/JiIeW3hPtTy7AfdFt BVW5e/0wbJHyVjFUJRlTL1tGffbpq6QlDrAf9urBsQgbWLgN6137STaXJFr0hgNX SxRTxhA9JVxyOQ8gCOIZtT5sDTjNdhUi1Jwb7ro6F5EBfoYQvB9J4vvzzCFPHD/2 S1dfJfKFGMY9IKWwjZwF5MAO0bBLHFD6WIPiJ4Ky7ucr8taEa1/Nv1EMcANzhGCV V1jsYecxqiB8LtV39X6ev2jRriTOjPam -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org