$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json) Hash identifier: MfoIv9W+HolmXH+WP+P/OLJX81Jed+rbIkLBX1ezPK4= Subject key identifier: 9A:6F:4E:42:0B:01:77:63:69:1A:8C:E3:B4:DD:86:AD:C7:A8:1D:44 Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft Manifest number: 7C Signing time: Sun 19 May 2024 07:16:36 +0000 Manifest this update: Sun 19 May 2024 07:16:35 +0000 Manifest next update: Sun 26 May 2024 07:16:35 +0000 Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: E7NzRN+e4d9hoCKIbGj3X93wg54uJFHeal6Es33wGA8=) 2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: elKim0+kuVj5n91meyvY+LXLxWJNR5sixE2vqJMQIt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Validity Not Before: May 19 07:16:35 2024 GMT Not After : May 26 07:16:35 2024 GMT Subject: CN=6649a753-de07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ab:6c:e2:a4:38:83:2e:42:e3:ce:bd:19:fc: ab:ca:da:c5:ef:b2:84:7f:b5:29:b4:4b:c9:0e:ed: 29:0d:b2:56:ad:93:1f:83:1a:35:0f:64:84:f7:06: 84:56:55:9e:03:75:91:07:94:58:14:d0:dd:29:10: c1:83:06:81:fd:4a:94:ec:a5:5c:d0:ac:80:4e:cb: f7:55:3c:ca:be:ce:0e:21:47:2f:de:54:43:86:b6: 10:1b:24:dc:0f:04:a4:37:9c:98:b2:14:18:96:f8: 20:96:74:11:ba:42:c7:62:20:f2:e8:0c:07:4e:9b: d6:02:36:ff:55:82:23:3b:0f:d1:c3:7b:ef:ea:4a: c5:e1:45:c5:6f:ed:03:c8:ca:d3:a7:9e:3f:67:68: 18:ec:c5:14:24:1c:fa:59:80:ba:59:07:a4:fe:49: 62:3e:93:c4:7b:10:29:81:fe:43:ed:41:a4:88:6e: 3d:62:38:39:07:5d:14:e4:08:9b:c9:e3:c0:21:07: 43:70:eb:89:99:0b:d6:e2:a2:7b:ae:6c:51:46:31: 60:15:c2:29:88:a1:8c:be:c3:99:26:bc:62:ee:47: 85:88:be:7b:1e:4b:8c:1a:df:2d:00:d0:b2:c5:08: 1b:68:9f:1e:ee:ca:a0:40:68:b6:63:0d:12:b9:cf: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6F:4E:42:0B:01:77:63:69:1A:8C:E3:B4:DD:86:AD:C7:A8:1D:44 X509v3 Authority Key Identifier: keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:82:56:46:48:f0:72:de:8e:a0:fb:fd:f2:86:b3:60:2b: a7:3d:59:89:a0:fe:72:d4:ee:69:78:83:ab:62:8c:ce:1a:0a: 4e:cc:6c:ea:16:21:35:d4:dd:21:72:8b:1b:18:33:68:78:b3: 2d:2f:db:ed:c5:8a:46:9a:32:20:2d:1d:1f:67:1b:10:d0:79: c7:7c:07:91:19:98:37:f1:2f:fc:0a:51:d4:1f:39:9d:ba:49: 12:06:3a:6d:1d:84:9b:80:8e:63:e0:41:02:0b:78:9f:f7:7e: b7:ef:43:61:83:f3:3d:c4:da:45:04:80:b4:3b:e5:73:1b:cd: 01:85:b1:ec:43:2c:5b:13:2e:8f:35:22:0e:f8:ee:32:76:b3: dd:8d:46:0a:e7:36:c9:2c:b3:71:6a:49:6c:41:4e:4c:35:2b: d6:cf:fb:58:80:10:9f:cd:a0:bc:9a:61:af:85:00:ef:03:1b: 38:b9:a0:f5:1c:01:a2:94:4b:84:a1:b3:b1:0e:ef:57:83:d0: f1:3e:1d:b8:4a:49:91:cb:93:b7:cd:1e:2b:38:cf:4a:1a:d4: 2e:17:c5:0a:3c:28:31:86:f4:f6:ce:7b:ed:c6:e0:4e:b3:71: 31:d7:9d:3f:c5:91:c9:85:f3:68:80:11:16:c5:a3:af:c8:e3: 53:fa:54:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTkxMTExMC8GA1UEBRMoMjU5NjlFNzNBOThEOTlGNDJFQUM4OTQyNkM2Qjk0OTND ODVEMzMxQTAeFw0yNDA1MTkwNzE2MzVaFw0yNDA1MjYwNzE2MzVaMBgxFjAUBgNV BAMTDTY2NDlhNzUzLWRlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0q2zipDiDLkLjzr0Z/KvK2sXvsoR/tSm0S8kO7SkNslatkx+DGjUPZIT3BoRW VZ4DdZEHlFgU0N0pEMGDBoH9SpTspVzQrIBOy/dVPMq+zg4hRy/eVEOGthAbJNwP BKQ3nJiyFBiW+CCWdBG6QsdiIPLoDAdOm9YCNv9VgiM7D9HDe+/qSsXhRcVv7QPI ytOnnj9naBjsxRQkHPpZgLpZB6T+SWI+k8R7ECmB/kPtQaSIbj1iODkHXRTkCJvJ 48AhB0Nw64mZC9bionuubFFGMWAVwimIoYy+w5kmvGLuR4WIvnseS4wa3y0A0LLF CBtonx7uyqBAaLZjDRK5zy5hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmm9OQgsB d2NpGozjtN2GrceoHUQwHwYDVR0jBBgwFoAUJZaec6mNmfQurIlCbGuUk8hdMxow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OTExL0JDMDk1M0E2NTk2 RjExRUU5QjFBQUUyOEM0RjlBRTAyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlphZWM2bU5tZlF1cklsQ2JHdVVrOGhkTXhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OTExL0JDMDk1M0E2NTk2RjExRUU5QjFBQUUyOEM0RjlBRTAyL0paYWVjNm1ObWZR dXJJbENiR3VVazhoZE14by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfNglZGSPBy3o6g+/3yhrNgK6c9WYmg/nLU7ml4g6tijM4aCk7MbOoW ITXU3SFyixsYM2h4sy0v2+3FikaaMiAtHR9nGxDQecd8B5EZmDfxL/wKUdQfOZ26 SRIGOm0dhJuAjmPgQQILeJ/3frfvQ2GD8z3E2kUEgLQ75XMbzQGFsexDLFsTLo81 Ig747jJ2s92NRgrnNskss3FqSWxBTkw1K9bP+1iAEJ/NoLyaYa+FAO8DGzi5oPUc AaKUS4Shs7EO71eD0PE+HbhKSZHLk7fNHis4z0oa1C4XxQo8KDGG9PbOe+3G4E6z cTHXnT/FkcmF82iAERbFo6/I41P6VJs= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org