$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft File: tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json) Hash identifier: 1DUI1/xdjgjKNmtKgpKzzXIZec946s83dm2ORckVn3w= Subject key identifier: 02:63:83:1A:21:B8:87:D1:B6:BC:D1:74:E8:79:8D:A2:64:CC:18:5D Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft Manifest number: 07FA Signing time: Sat 18 May 2024 21:54:05 +0000 Manifest this update: Sat 18 May 2024 21:54:04 +0000 Manifest next update: Sat 25 May 2024 21:54:04 +0000 Files and hashes: 1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: LXU80LkVw+g+7x4+eHdedjSCdSU4jqz4SWPhPFgavQI=) 2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: hhnjaRcINrEByfxVX2Ik0Y0OI4Bh5WMZ9oaxrBpeV/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: May 18 21:54:04 2024 GMT Not After : May 25 21:54:04 2024 GMT Subject: CN=6649237c-32ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:58:92:66:c5:f4:b2:ff:d7:d2:d0:27:12: e6:31:6b:5d:ca:38:65:ee:6d:0e:9a:45:2a:1c:90: 12:1a:ed:d2:f6:77:0e:d8:d9:0f:36:d0:bd:f8:17: 78:73:f8:fa:31:de:b2:20:72:7e:9c:be:ca:67:ab: 87:23:25:76:9c:0d:a5:77:33:7d:06:76:26:16:bc: 81:63:1e:47:2c:13:55:70:67:ad:8c:95:7c:f0:6d: 80:8c:4c:5e:c9:a4:67:21:4b:2b:ec:41:85:ab:50: 04:30:a4:19:54:73:2e:7e:ae:27:82:ff:cc:4d:4d: 37:80:11:2d:71:37:ba:ed:ef:66:1c:29:c4:eb:d7: 0d:44:59:0e:cd:48:0c:80:19:be:f6:9b:dc:6b:01: b9:cb:ee:eb:17:00:86:d4:a7:88:3d:e7:09:5d:2c: 61:b0:84:b5:cc:c0:52:e4:06:8a:ad:8f:b8:54:42: 3b:d0:e4:7b:04:4b:02:bf:d8:e6:e1:f6:98:c8:23: a7:ed:15:32:6e:d7:ef:01:b3:28:c5:e2:32:d9:6a: a5:19:3d:e4:34:e0:b6:26:bc:0b:e6:34:37:f9:a6: bd:14:3a:d9:50:e6:3c:d6:91:79:bc:d3:44:a1:61: e6:9a:65:0b:9a:19:e3:f6:33:eb:51:f5:c3:5b:18: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:63:83:1A:21:B8:87:D1:B6:BC:D1:74:E8:79:8D:A2:64:CC:18:5D X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:10:99:3d:4c:51:17:0e:3a:11:81:d2:9d:f2:b2:32:b4:6d: 74:bb:51:09:35:b1:66:5a:3e:41:ff:f0:c2:31:ae:78:84:12: 5b:1c:68:c2:e9:9a:fd:3e:58:a6:54:d6:b9:08:60:99:fe:54: 64:06:91:ae:41:e0:74:69:03:20:40:97:95:c9:3e:29:b3:4c: b6:b6:93:8e:5e:25:7a:f8:36:33:a8:09:2a:f6:2b:4c:a8:70: 83:e5:21:fc:93:88:49:73:3a:92:20:99:d0:b9:61:6d:11:be: 70:23:eb:c0:38:92:80:e8:8b:fc:99:dd:e6:cd:02:33:d0:17: 33:99:71:c8:f4:66:c2:4b:8b:c9:84:a0:14:f0:45:d3:8f:1f: 0e:af:ed:f3:63:94:9e:1f:68:63:11:97:26:d8:4b:11:f1:a1: 0e:51:05:60:9d:29:00:ed:7b:dc:5f:c9:fa:41:7e:98:b4:60: 4a:f9:e3:0d:24:ae:f2:60:b5:05:f9:ab:ab:66:0f:69:a8:24: c5:85:62:11:2d:dc:b2:71:fb:6f:ad:0d:4d:31:90:44:aa:ce: 6b:03:7d:24:16:49:9c:f8:00:69:5d:28:cc:21:a5:2a:2f:42: f2:22:cb:eb:d7:10:5e:37:66:64:d9:d4:6e:98:c8:34:10:30: db:8a:ec:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjQwNTE4MjE1NDA0WhcNMjQwNTI1MjE1NDA0WjAYMRYwFAYD VQQDEw02NjQ5MjM3Yy0zMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a9YkmbF9LL/19LQJxLmMWtdyjhl7m0OmkUqHJASGu3S9ncO2NkPNtC9+Bd4 c/j6Md6yIHJ+nL7KZ6uHIyV2nA2ldzN9BnYmFryBYx5HLBNVcGetjJV88G2AjExe yaRnIUsr7EGFq1AEMKQZVHMufq4ngv/MTU03gBEtcTe67e9mHCnE69cNRFkOzUgM gBm+9pvcawG5y+7rFwCG1KeIPecJXSxhsIS1zMBS5AaKrY+4VEI70OR7BEsCv9jm 4faYyCOn7RUybtfvAbMoxeIy2WqlGT3kNOC2JrwL5jQ3+aa9FDrZUOY81pF5vNNE oWHmmmULmhnj9jPrUfXDWxh+vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJjgxoh uIfRtrzRdOh5jaJkzBhdMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RURBQy81ODNBRjIwNEI1MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1J OGZ1czg3VERwRVZ4OHAzM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEJk9TFEXDjoRgdKd8rIytG10u1EJNbFmWj5B//DCMa54hBJbHGjC 6Zr9PlimVNa5CGCZ/lRkBpGuQeB0aQMgQJeVyT4ps0y2tpOOXiV6+DYzqAkq9itM qHCD5SH8k4hJczqSIJnQuWFtEb5wI+vAOJKA6Iv8md3mzQIz0BczmXHI9GbCS4vJ hKAU8EXTjx8Or+3zY5SeH2hjEZcm2EsR8aEOUQVgnSkA7XvcX8n6QX6YtGBK+eMN JK7yYLUF+aurZg9pqCTFhWIRLdyycftvrQ1NMZBEqs5rA30kFkmc+ABpXSjMIaUq L0LyIsvr1xBeN2Zk2dRumMg0EDDbiuz8 -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org