$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft File: jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft (raw, json) Hash identifier: 0viFAPf0aiPEssAzTxTLjy6mOSzFwMYOPNiZ3Wik7WU= Subject key identifier: 32:F7:31:28:97:EA:88:70:16:3C:9A:61:BB:FB:1E:7E:F5:19:1D:BD Authority key identifier: 8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 Certificate issuer: /CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Certificate serial: 0DE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft Manifest number: 14C0 Signing time: Sat 18 May 2024 18:28:18 +0000 Manifest this update: Sat 18 May 2024 18:28:17 +0000 Manifest next update: Sat 25 May 2024 18:28:17 +0000 Files and hashes: 1: jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl (hash: gGu+J52IuN8XU1LBOY9x08soZcLtxPbcSn5oHAzL7iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Validity Not Before: May 18 18:28:17 2024 GMT Not After : May 25 18:28:17 2024 GMT Subject: CN=6648f341-229b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:0b:16:ab:81:7d:37:a7:8b:94:06:55:c9: 2b:9b:43:07:3b:a2:e9:a0:08:f8:38:c3:85:a5:4d: 85:32:cb:b6:64:d9:fb:5c:d2:e0:6d:e9:cb:29:dd: c6:42:b9:72:1d:de:54:b2:d6:84:1c:11:cd:af:d3: 64:66:5b:87:09:39:d5:c2:17:52:b1:0f:e3:e2:47: f9:0b:d6:6c:25:bd:d8:90:c5:04:a8:3d:c7:16:6a: 2e:91:38:af:51:86:f0:6d:1b:6f:c2:df:03:6b:ca: 8f:b4:0d:b9:01:14:b3:ef:be:02:d1:fd:46:ad:41: 15:b7:f0:5d:ab:8d:e4:0c:2f:89:fc:a9:99:d6:99: b5:84:31:aa:df:f0:6f:22:9c:0c:fd:17:74:93:d4: 18:8e:8c:2b:10:30:2a:18:b6:6c:46:1d:e7:d6:ca: df:ec:bd:1d:e1:a7:21:8a:c2:43:f2:b9:9c:b0:18: 3b:dd:b0:6e:10:fd:e1:1c:d6:8a:8f:94:dd:ab:ac: 94:15:ec:58:c7:49:e5:6a:a9:d5:f3:5d:1a:af:5a: ea:dc:1f:20:1f:7f:00:19:9e:8c:47:41:a1:81:11: 3c:ef:41:c5:6e:48:92:d4:57:b5:29:c7:dc:96:b1: 71:60:e2:af:3b:ae:23:7d:e3:4a:cf:a0:fb:34:50: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:31:28:97:EA:88:70:16:3C:9A:61:BB:FB:1E:7E:F5:19:1D:BD X509v3 Authority Key Identifier: keyid:8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:30:e1:17:04:ed:cb:e3:8b:ff:12:84:5d:2f:92:03:01: 04:bb:0f:fc:1c:fb:16:74:bb:0a:88:a0:3a:4d:a7:63:6b:01: 7a:47:10:bc:04:30:34:d3:f0:b8:e4:fd:7a:c7:88:42:60:e4: ab:d0:cd:ea:68:3e:1c:d3:98:49:79:a8:be:ce:c7:b1:f0:77: 89:e9:37:d9:ae:62:1c:90:e9:9e:17:ab:49:15:22:cb:49:b3: 6e:5b:59:56:8b:80:94:4b:11:9e:80:4f:a5:5b:95:9e:e1:e8: e5:48:ff:1b:01:23:44:a8:36:d3:ac:46:3e:3b:7b:fa:29:1f: 5e:80:55:7d:37:0a:4f:cd:ff:ab:b4:6a:96:ac:e2:e9:29:12: 1a:ae:23:45:9e:65:28:20:78:51:9f:68:c9:85:a9:75:23:17: e6:ed:1d:d9:b3:57:1b:f2:a6:45:d7:43:72:cf:73:c7:de:49: 0e:82:5e:3a:d6:16:7c:d1:85:18:9c:7e:17:bf:63:72:db:ca: 42:79:29:90:70:f0:f4:32:3e:24:38:ae:04:f9:6c:f7:4a:8f: 14:a3:88:1a:7d:cf:11:da:a5:38:71:11:e7:a8:5c:76:44:2e: e5:b3:18:81:19:4e:63:73:c2:52:52:df:37:b6:2c:3c:d3:9b: 9f:d7:99:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKDhFMzZCREY4RThCODE4NjVCNDI3ODUzRjdDNkJDNTMy RDBDQTZENDgwHhcNMjQwNTE4MTgyODE3WhcNMjQwNTI1MTgyODE3WjAYMRYwFAYD VQQDEw02NjQ4ZjM0MS0yMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrELFquBfTeni5QGVckrm0MHO6LpoAj4OMOFpU2FMsu2ZNn7XNLgbenLKd3G QrlyHd5UstaEHBHNr9NkZluHCTnVwhdSsQ/j4kf5C9ZsJb3YkMUEqD3HFmoukTiv UYbwbRtvwt8Da8qPtA25ARSz774C0f1GrUEVt/Bdq43kDC+J/KmZ1pm1hDGq3/Bv IpwM/Rd0k9QYjowrEDAqGLZsRh3n1srf7L0d4achisJD8rmcsBg73bBuEP3hHNaK j5Tdq6yUFexYx0nlaqnV810ar1rq3B8gH38AGZ6MR0GhgRE870HFbkiS1Fe1Kcfc lrFxYOKvO64jfeNKz6D7NFAkIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL3MSiX 6ohwFjyaYbv7Hn71GR29MB8GA1UdIwQYMBaAFI42vfjouBhltCeFP3xrxTLQym1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdHVzBKNFVfZkd2Rk10REti VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pqYTktT2k0R0dXMEo0VV9mR3ZGTXRES2JVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdH VzBKNFVfZkd2Rk10REtiVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLyDDhFwTty+OL/xKEXS+SAwEEuw/8HPsWdLsKiKA6TadjawF6RxC8 BDA00/C45P16x4hCYOSr0M3qaD4c05hJeai+zsex8HeJ6TfZrmIckOmeF6tJFSLL SbNuW1lWi4CUSxGegE+lW5We4ejlSP8bASNEqDbTrEY+O3v6KR9egFV9NwpPzf+r tGqWrOLpKRIariNFnmUoIHhRn2jJhal1Ixfm7R3Zs1cb8qZF10Nyz3PH3kkOgl46 1hZ80YUYnH4Xv2Ny28pCeSmQcPD0Mj4kOK4E+Wz3So8Uo4gafc8R2qU4cRHnqFx2 RC7lsxiBGU5jc8JSUt83tiw805uf15l8 -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org