$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: f8+Kfc6cvAnnbbsFDnZ9jTUmIZdtXyRHe+aaDxU8fUo= Subject key identifier: 1C:50:04:6B:CF:FA:49:5E:8F:4D:C0:45:0A:51:81:32:33:47:41:05 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 09BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 097A Signing time: Sat 18 May 2024 21:04:24 +0000 Manifest this update: Sat 18 May 2024 21:04:23 +0000 Manifest next update: Sat 25 May 2024 21:04:23 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: EjbhPIRzzarXL6v+2KWqotY4Cl3/emgotO3i/LRZOZ8=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: 9m0W2FQ4YS04f2f33IhcE/GlmanitrvhdKUjBVJSUN4=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: nR6QCa+MB7YSDpak9XFs6VT7XUSfxtJwpnIkjVWImHM=) 4: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: YBvgqMAPKWiQEgBajy4UQ9Cl4DxiHgtXkIrFv7H3slA=) 5: F4FCC41E648311EC88370386C4F9AE02.roa (hash: uBd7wqS5FzwlrG48DaxCrdDsP3hHPdjs7eX9N2oc5P0=) 6: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: QpX0oxMLfUAcrz2bWhbSWm3h+GuCIQ3Vp9k4sS0B1e4=) 7: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: Jr2u5OCbXfc8ZHsnFS1YJNQxUnvRkCAchbaehRZ47VY=) 8: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: 87bbjmigpdWAoAH/3Dyv4qwXksoI6JwqK+M1QF9hs/E=) 9: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: vRZLwVAMVN7eHTrm80N9IbU9MLfnHedC9U2pQSU1+qI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: May 18 21:04:23 2024 GMT Not After : May 25 21:04:23 2024 GMT Subject: CN=664917d8-5d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:b9:2c:4e:6d:70:97:5b:c4:44:1b:db:92: 81:cc:0e:ee:97:0e:a6:69:a8:2d:14:df:13:e9:8e: de:1a:20:90:13:3a:9c:cd:02:de:22:4b:83:8b:af: eb:d8:f1:bf:b0:5d:fa:39:ca:b9:fb:45:f6:1d:e7: 4f:1e:19:bb:cc:1e:c5:c1:a3:a7:a9:27:d0:d3:80: 59:0a:0e:b4:86:d3:ea:86:62:ce:08:b6:36:31:f3: ac:fd:f9:b6:91:78:de:4d:e7:53:37:66:75:91:42: 9a:b1:d0:54:93:38:0b:c0:69:ad:48:42:f8:5d:6d: 07:c2:bc:a0:3c:39:06:d0:c1:bd:35:82:ba:4d:6b: 8d:27:1d:09:2a:c4:50:e6:60:40:17:00:19:cc:d1: 4c:5b:66:c9:79:99:16:f6:51:bd:9e:9d:29:e3:17: f0:5d:56:bb:d0:01:f9:d4:a5:34:57:fc:9c:d2:fc: d5:18:cd:e8:32:98:66:de:cc:60:18:81:a6:a7:a3: 37:c6:74:83:18:3c:6c:0c:41:bb:3f:5a:0e:68:a2: e5:d9:23:88:6c:2b:15:5d:93:0b:b6:2b:e0:80:4d: fa:d7:d2:6b:6f:ef:1f:48:24:e0:0a:d5:bd:3d:ba: c8:3e:70:7a:43:b2:d0:c7:7b:15:6d:fe:e1:18:bd: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:50:04:6B:CF:FA:49:5E:8F:4D:C0:45:0A:51:81:32:33:47:41:05 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:8b:b7:d5:fa:78:d9:72:78:03:5a:4d:22:ff:f0:ba:4b:49: 29:d2:96:26:08:e7:cb:ca:7f:ad:8c:64:28:21:ca:b5:cc:32: 47:65:cb:fc:99:41:27:ce:19:6b:c8:60:6d:b9:7e:75:ae:4b: aa:87:ac:e9:bc:57:2b:1c:93:b8:2f:d9:40:f4:18:04:55:3b: 5b:a1:3d:d1:bc:be:28:fb:67:20:93:0c:48:61:40:bb:06:ea: b1:23:3a:5a:d5:08:04:f0:d7:e7:6c:be:d9:f1:01:ad:0d:fd: 26:b1:8f:f7:3f:4c:6f:e6:3d:a3:2c:7f:1b:16:9c:4a:5d:15: 2c:a2:93:b5:fc:96:92:14:c5:d2:d7:cb:30:5b:c0:03:2b:74: 5a:98:1c:0d:50:c0:af:57:2b:87:1a:0d:b8:3a:d0:f3:6c:c5: 3d:c1:f4:c3:ba:94:4b:39:a7:55:9a:ea:e8:32:71:d3:fd:8d: f2:d2:f4:5c:e9:23:00:79:f6:6d:2c:02:64:e9:52:bc:32:bf: 93:1f:5d:97:70:82:63:5f:f6:e8:26:5e:90:85:b5:f8:a6:7a: 89:96:6b:16:03:26:ab:33:d5:91:13:1e:92:db:70:e7:07:74: 66:1c:d9:e2:ef:d4:9f:6b:75:eb:ef:5f:25:5b:b8:6c:34:f0: 92:e6:be:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjQwNTE4MjEwNDIzWhcNMjQwNTI1MjEwNDIzWjAYMRYwFAYD VQQDEw02NjQ5MTdkOC01ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QC5LE5tcJdbxEQb25KBzA7ulw6maagtFN8T6Y7eGiCQEzqczQLeIkuDi6/r 2PG/sF36Ocq5+0X2HedPHhm7zB7FwaOnqSfQ04BZCg60htPqhmLOCLY2MfOs/fm2 kXjeTedTN2Z1kUKasdBUkzgLwGmtSEL4XW0HwrygPDkG0MG9NYK6TWuNJx0JKsRQ 5mBAFwAZzNFMW2bJeZkW9lG9np0p4xfwXVa70AH51KU0V/yc0vzVGM3oMphm3sxg GIGmp6M3xnSDGDxsDEG7P1oOaKLl2SOIbCsVXZMLtivggE3619Jrb+8fSCTgCtW9 PbrIPnB6Q7LQx3sVbf7hGL0ESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxQBGvP +klej03ARQpRgTIzR0EFMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFi7fV+njZcngDWk0i//C6S0kp0pYmCOfLyn+tjGQoIcq1zDJHZcv8 mUEnzhlryGBtuX51rkuqh6zpvFcrHJO4L9lA9BgEVTtboT3RvL4o+2cgkwxIYUC7 BuqxIzpa1QgE8NfnbL7Z8QGtDf0msY/3P0xv5j2jLH8bFpxKXRUsopO1/JaSFMXS 18swW8ADK3RamBwNUMCvVyuHGg24OtDzbMU9wfTDupRLOadVmuroMnHT/Y3y0vRc 6SMAefZtLAJk6VK8Mr+TH12XcIJjX/boJl6QhbX4pnqJlmsWAyarM9WREx6S23Dn B3RmHNni79Sfa3Xr718lW7hsNPCS5r4m -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org