$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: i6j/YZOAuF7rIrlkupVjywqJ1YDRSJxnSn8AjoVW7bY= Subject key identifier: 0A:7A:6D:6A:89:A3:6B:FA:C3:72:6B:A9:D7:79:CD:61:8B:73:44:A9 Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 05E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 05D0 Signing time: Sat 01 Jun 2024 01:03:33 +0000 Manifest this update: Sat 01 Jun 2024 01:03:33 +0000 Manifest next update: Sat 08 Jun 2024 01:03:33 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: ZUEhrj5j5nUXbGo9LlvkB1hvAEtGL1IWYvC3RWM6J2Q=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: BoGn+23V2+HWaWJely/+yxh6o2gncRPgyL82FJ6K9WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Jun 1 01:03:33 2024 GMT Not After : Jun 8 01:03:33 2024 GMT Subject: CN=665a7365-adc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:c0:91:4a:1a:b0:b6:47:7d:8e:3d:39:bc: 6f:60:c2:42:4f:aa:04:ea:ed:e3:23:89:eb:a3:51: 0d:41:a7:63:8b:a1:99:33:3d:7e:f4:2a:ef:ba:c5: 58:33:9c:f8:0d:d1:24:6f:c2:bc:74:1d:3e:94:c5: 3b:dc:0e:33:3f:42:df:e0:8d:2d:27:eb:70:b9:53: 1e:01:e2:48:86:ad:26:2f:07:9e:05:9c:c5:1c:8d: 86:3d:bb:c9:3e:7a:de:45:d0:68:32:2e:52:ec:8f: 93:6f:e8:ec:8d:1d:88:cd:1f:44:bc:e8:b7:f8:24: df:bf:bd:08:0e:e0:cb:e7:89:03:22:a4:d6:ed:1c: 4b:ff:35:fc:9a:59:5b:5e:08:bf:43:eb:c7:d5:81: 23:04:9d:c7:b0:ad:b3:39:76:5c:7f:c9:86:d8:01: 24:3b:e7:30:dd:48:02:a3:87:ce:6f:61:93:d1:f5: 26:13:bf:01:3d:3e:46:ce:76:c7:ee:a5:a0:f7:a2: e9:f3:e8:54:32:cf:d9:05:ec:e2:86:c7:64:2c:06: 75:1f:86:34:03:a8:81:1d:f8:96:ee:4a:ea:6a:99: 8f:ad:e0:96:62:bc:3f:91:fe:3c:ac:8f:8a:a4:7c: 7e:cb:70:d6:22:69:1d:49:0c:80:6b:93:82:8b:2b: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:6D:6A:89:A3:6B:FA:C3:72:6B:A9:D7:79:CD:61:8B:73:44:A9 X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:82:26:05:13:88:8b:81:2c:9c:77:d8:3a:88:5d:48:e0:0c: 01:98:e6:be:8d:0d:47:49:5c:8c:44:a9:cf:34:a5:32:eb:a6: 93:cc:23:b9:13:1d:89:c3:0a:81:92:d3:e6:04:d6:f7:73:2d: 38:b5:b1:26:66:cd:bd:56:ac:3a:33:f0:0c:57:0e:2c:9f:07: 2f:12:11:fa:86:a1:d5:fc:46:33:b0:96:ad:66:e5:19:c8:6e: b0:e7:01:5c:d1:0c:85:90:c2:35:ed:3a:1a:72:ca:3b:89:b4: 87:64:4d:3d:fb:11:54:57:24:35:e4:43:c2:96:a4:77:82:cd: ea:11:b1:e1:1f:18:84:eb:b2:07:0b:47:0a:7d:1b:69:29:37: ef:25:28:79:99:b5:87:48:6b:e3:cc:23:66:84:1b:6e:bf:21: 44:33:0b:42:c9:e2:59:81:f7:fd:12:23:86:8f:2d:6d:a3:7a: 08:c2:aa:67:04:33:20:43:42:06:12:9c:01:bc:f8:6c:10:fe: b5:e6:5f:f7:c8:21:80:b0:9a:c5:5f:e2:fa:02:14:4f:e2:cc: b6:5c:e2:1f:b0:7d:b8:f9:12:d2:12:0c:55:6a:7e:8c:78:f0: a3:e3:58:61:f3:3c:2e:3d:59:10:56:6f:40:cf:ef:a8:0f:b3: b8:78:88:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjQwNjAxMDEwMzMzWhcNMjQwNjA4MDEwMzMzWjAYMRYwFAYD VQQDEw02NjVhNzM2NS1hZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyfAkUoasLZHfY49ObxvYMJCT6oE6u3jI4nro1ENQadji6GZMz1+9CrvusVY M5z4DdEkb8K8dB0+lMU73A4zP0Lf4I0tJ+twuVMeAeJIhq0mLweeBZzFHI2GPbvJ PnreRdBoMi5S7I+Tb+jsjR2IzR9EvOi3+CTfv70IDuDL54kDIqTW7RxL/zX8mllb Xgi/Q+vH1YEjBJ3HsK2zOXZcf8mG2AEkO+cw3UgCo4fOb2GT0fUmE78BPT5GznbH 7qWg96Lp8+hUMs/ZBezihsdkLAZ1H4Y0A6iBHfiW7krqapmPreCWYrw/kf48rI+K pHx+y3DWImkdSQyAa5OCiytmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp6bWqJ o2v6w3Jrqdd5zWGLc0SpMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwgiYFE4iLgSycd9g6iF1I4AwBmOa+jQ1HSVyMRKnPNKUy66aTzCO5 Ex2JwwqBktPmBNb3cy04tbEmZs29Vqw6M/AMVw4snwcvEhH6hqHV/EYzsJatZuUZ yG6w5wFc0QyFkMI17Toacso7ibSHZE09+xFUVyQ15EPClqR3gs3qEbHhHxiE67IH C0cKfRtpKTfvJSh5mbWHSGvjzCNmhBtuvyFEMwtCyeJZgff9EiOGjy1to3oIwqpn BDMgQ0IGEpwBvPhsEP615l/3yCGAsJrFX+L6AhRP4sy2XOIfsH24+RLSEgxVan6M ePCj41hh8zwuPVkQVm9Az++oD7O4eIgn -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org