$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: /ANFq/+i8S8EdslXfKtdRxJOCa/sQy+fQ3dMDoAXh7g= Subject key identifier: FF:BE:90:34:1A:5C:7F:4C:43:5F:B2:7B:44:11:23:5F:B7:26:E1:84 Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 01BC Signing time: Wed 29 May 2024 04:57:46 +0000 Manifest this update: Wed 29 May 2024 04:57:45 +0000 Manifest next update: Wed 05 Jun 2024 04:57:45 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: w1HBeC9j5WVlHMnydqV/jI8Ssg+YKO+caiGX8b2/Gpc=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: 4clEgqFiQcFhhVn8RtWoRMGuL2CUr/0AykbxtMSuzDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 04:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: May 29 04:57:45 2024 GMT Not After : Jun 5 04:57:45 2024 GMT Subject: CN=6656b5ca-d8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:a4:67:66:36:5d:cf:95:c7:8c:2a:8e:2c: 64:42:14:f8:e7:72:8b:92:8c:c5:82:3c:3f:3b:be: c8:bc:8b:d3:16:79:32:fb:35:0b:2d:a9:33:35:27: ee:72:bb:24:6b:a7:c7:54:0c:ad:52:a3:34:ae:a5: c2:2b:90:87:30:b4:7e:d3:2d:ad:31:cc:73:ba:b0: 3e:0e:e3:fb:6a:e6:d0:ba:b4:17:2f:c9:cd:43:ff: e0:a5:67:c1:ec:71:24:ba:0f:47:39:9c:25:ee:00: d1:d9:bf:86:a1:aa:92:08:51:5f:df:54:32:7e:16: ef:09:90:9d:b3:cc:7f:a0:68:1b:51:b0:2e:c6:ac: b8:93:6d:14:d4:94:12:7d:d5:b3:08:a1:52:03:11: 81:92:91:cf:9e:84:9e:d7:3c:69:be:cd:b4:13:4f: 8f:86:8d:f6:10:39:71:e8:73:e2:03:13:be:e0:77: 0e:3e:20:93:12:7b:80:e6:30:4a:8c:ee:cf:cf:5b: 29:5c:f5:6a:d5:73:fd:f8:61:8b:b3:74:34:96:2a: a8:ef:13:4f:37:e3:83:bb:d9:4a:b8:9a:fb:10:75: 3d:b2:d8:88:e5:be:87:92:ad:12:a1:2e:28:78:18: 02:28:e8:06:b6:a8:63:56:28:e8:53:03:66:a7:df: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BE:90:34:1A:5C:7F:4C:43:5F:B2:7B:44:11:23:5F:B7:26:E1:84 X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:36:28:51:1f:0e:18:c4:3a:62:fc:7f:11:33:7a:0f:48: 00:84:d1:7d:9a:f2:80:79:b7:c5:ab:32:57:ea:8f:c2:6e:6d: 1c:1c:a8:e2:4b:3c:a4:8a:6c:a7:1b:47:5e:69:1f:2f:ad:a4: 4a:b5:b8:ec:af:92:ad:e4:de:87:8d:cb:77:86:e3:9a:f3:b1: ec:cb:77:6f:25:aa:ce:9e:b2:29:8c:9f:ad:d9:6a:6e:c7:6d: 5f:87:17:99:4b:61:f5:fa:83:ad:3f:f4:42:b9:cd:a0:6b:b4: 62:dc:5f:0d:af:1d:07:2a:f4:83:dc:eb:1e:d8:17:ce:63:5b: 77:72:f0:61:3f:96:84:d4:29:99:13:fb:36:8f:79:c4:14:53: 64:ca:cc:53:0b:ce:6c:25:e6:f2:d3:d2:03:d2:21:a7:6d:16: 08:3f:5b:bb:43:4d:7e:2f:1f:df:1b:23:3f:ad:4f:66:00:bb: 23:b8:b8:1f:4b:b4:a0:c6:07:55:30:1e:fa:2d:50:dc:d6:3e: 17:17:a3:ac:98:3b:aa:78:7d:7e:8b:fb:82:7a:b9:36:e2:84: 52:6b:b8:1d:09:25:62:a3:30:72:8d:7e:7d:64:eb:a8:9b:ec: 8b:05:07:1b:79:85:56:87:5b:07:93:e9:e6:6c:09:1a:18:d1: f4:73:88:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjQwNTI5MDQ1NzQ1WhcNMjQwNjA1MDQ1NzQ1WjAYMRYwFAYD VQQDEw02NjU2YjVjYS1kOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkSkZ2Y2Xc+Vx4wqjixkQhT453KLkozFgjw/O77IvIvTFnky+zULLakzNSfu crska6fHVAytUqM0rqXCK5CHMLR+0y2tMcxzurA+DuP7aubQurQXL8nNQ//gpWfB 7HEkug9HOZwl7gDR2b+GoaqSCFFf31QyfhbvCZCds8x/oGgbUbAuxqy4k20U1JQS fdWzCKFSAxGBkpHPnoSe1zxpvs20E0+Pho32EDlx6HPiAxO+4HcOPiCTEnuA5jBK jO7Pz1spXPVq1XP9+GGLs3Q0liqo7xNPN+ODu9lKuJr7EHU9stiI5b6Hkq0SoS4o eBgCKOgGtqhjVijoUwNmp9/42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP++kDQa XH9MQ1+ye0QRI1+3JuGEMB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChuDYoUR8OGMQ6Yvx/ETN6D0gAhNF9mvKAebfFqzJX6o/Cbm0cHKji SzykimynG0deaR8vraRKtbjsr5Kt5N6Hjct3huOa87Hsy3dvJarOnrIpjJ+t2Wpu x21fhxeZS2H1+oOtP/RCuc2ga7Ri3F8Nrx0HKvSD3Ose2BfOY1t3cvBhP5aE1CmZ E/s2j3nEFFNkysxTC85sJeby09ID0iGnbRYIP1u7Q01+Lx/fGyM/rU9mALsjuLgf S7SgxgdVMB76LVDc1j4XF6OsmDuqeH1+i/uCerk24oRSa7gdCSViozByjX59ZOuo m+yLBQcbeYVWh1sHk+nmbAkaGNH0c4gD -----END CERTIFICATE-----Generated at Wed May 29 05:26:29 2024 by rpki-client on console-fra.rpki-client.org