$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: cYMqWp6w1IVTwX8kFNGSIRZuQd+NAGd0wXODXg9j8PY= Subject key identifier: 37:48:BE:D2:27:1B:FB:88:A4:3B:C7:45:CC:BC:B3:46:2C:DE:6F:30 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0A47 Signing time: Fri 31 May 2024 21:06:30 +0000 Manifest this update: Fri 31 May 2024 21:06:29 +0000 Manifest next update: Fri 07 Jun 2024 21:06:29 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: vjMxhigx2BnDiqf0N7Y70dwE3pTE981e2+zKawtwzyQ=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: J1wCr3pN1RsjONx2dcBw5yx7cNEc3c4459YNy9NAPiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: May 31 21:06:29 2024 GMT Not After : Jun 7 21:06:29 2024 GMT Subject: CN=665a3bd5-10b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:26:69:ac:8c:3b:0c:c9:f1:0c:d8:e3:d4: 93:c2:8c:09:7f:7d:98:8e:d7:86:82:92:6a:87:ac: 31:4a:90:a4:0f:c0:27:e5:34:dc:b2:26:6e:88:ac: 2c:f2:ff:26:50:8a:9e:61:b6:bc:f2:35:6d:5f:22: 16:55:f2:0e:4b:d9:49:5d:c6:0d:e4:aa:71:a7:b9: 44:21:ca:4f:e5:1d:66:22:e6:c6:7d:52:cf:ce:ba: 8c:ea:0e:63:60:a3:2d:8f:b7:20:dd:fc:eb:29:e7: 10:06:e0:f5:0a:ae:95:8b:20:ab:67:cb:79:64:72: 3a:40:f3:51:3c:f1:38:de:ba:95:6d:03:9d:3a:40: 93:cc:12:59:ce:39:53:cf:4a:3b:7e:d2:ed:67:ac: fa:08:b2:b2:e0:d9:2a:f8:dc:9b:2f:42:01:0d:2a: e0:05:b1:e0:45:1d:04:0c:10:55:62:03:05:72:18: 6c:d4:b4:a3:8b:1e:0f:02:4f:36:d3:27:69:11:d2: 59:dd:23:fc:91:1e:43:96:8a:49:bf:5a:76:8a:5c: e5:30:b8:f6:80:3b:c1:be:bb:54:a4:eb:f6:12:b1: 01:53:74:96:5b:38:2a:b1:8b:b4:a4:67:7a:d1:67: 99:e3:a7:cf:1a:84:b3:df:5e:30:71:48:b2:57:6b: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:48:BE:D2:27:1B:FB:88:A4:3B:C7:45:CC:BC:B3:46:2C:DE:6F:30 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:e5:b6:07:7f:0a:1d:73:ad:ef:8d:d5:ea:4b:d6:a3:a7:a9: e1:8f:7d:eb:d6:97:36:07:79:e7:04:c2:0f:7a:37:4a:fa:33: cc:92:a5:cc:aa:ce:b3:9d:62:97:6c:e5:3f:5b:c3:ef:b2:6b: 7d:11:26:06:bc:c9:6e:84:7f:f0:29:d5:12:e8:32:9a:94:a3: c4:c0:0c:56:1d:c0:fb:02:c5:9f:b6:a0:b3:e2:0f:c7:88:f5: f5:2c:9f:e7:38:84:ad:60:b3:54:89:ad:cc:64:58:74:0a:5a: 31:05:e2:e5:d4:53:a3:82:5f:54:a2:b2:4f:cf:95:90:16:d1: 95:4c:79:d9:ea:8c:64:87:74:f8:13:e6:52:2f:3d:51:63:b6: ed:5f:9e:dd:82:34:1b:79:d5:c1:44:06:39:4c:d4:39:b0:50: 6f:22:48:cb:3a:fe:4e:b5:99:b8:e6:da:06:07:88:73:2e:1c: 5e:24:43:4e:1e:ee:94:c2:dd:45:fc:15:3c:0b:7e:7e:62:e1: 5a:24:01:64:75:c1:8a:39:52:b6:9c:d2:5b:fc:ea:de:3b:b2: 57:f7:d7:5d:c8:66:23:86:b8:c5:1f:7e:b1:b3:6b:1c:73:da: 23:e4:33:d5:50:7b:d9:0e:14:88:7c:26:18:54:98:75:bf:79: 54:7b:a3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjQwNTMxMjEwNjI5WhcNMjQwNjA3MjEwNjI5WjAYMRYwFAYD VQQDEw02NjVhM2JkNS0xMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUsmaayMOwzJ8QzY49STwowJf32YjteGgpJqh6wxSpCkD8An5TTcsiZuiKws 8v8mUIqeYba88jVtXyIWVfIOS9lJXcYN5Kpxp7lEIcpP5R1mIubGfVLPzrqM6g5j YKMtj7cg3fzrKecQBuD1Cq6ViyCrZ8t5ZHI6QPNRPPE43rqVbQOdOkCTzBJZzjlT z0o7ftLtZ6z6CLKy4Nkq+NybL0IBDSrgBbHgRR0EDBBVYgMFchhs1LSjix4PAk82 0ydpEdJZ3SP8kR5DlopJv1p2ilzlMLj2gDvBvrtUpOv2ErEBU3SWWzgqsYu0pGd6 0WeZ46fPGoSz314wcUiyV2uSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdIvtIn G/uIpDvHRcy8s0Ys3m8wMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV5bYHfwodc63vjdXqS9ajp6nhj33r1pc2B3nnBMIPejdK+jPMkqXM qs6znWKXbOU/W8Pvsmt9ESYGvMluhH/wKdUS6DKalKPEwAxWHcD7AsWftqCz4g/H iPX1LJ/nOIStYLNUia3MZFh0CloxBeLl1FOjgl9UorJPz5WQFtGVTHnZ6oxkh3T4 E+ZSLz1RY7btX57dgjQbedXBRAY5TNQ5sFBvIkjLOv5OtZm45toGB4hzLhxeJENO Hu6Uwt1F/BU8C35+YuFaJAFkdcGKOVK2nNJb/OreO7JX99ddyGYjhrjFH36xs2sc c9oj5DPVUHvZDhSIfCYYVJh1v3lUe6OG -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org