$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: LfY8KA/QpfKNXtBMZHc3/2U49oEcF++lC5A4Ak/cbRs= Subject key identifier: E4:3A:BD:96:C0:51:FF:39:BC:96:52:A0:3A:B6:B9:48:75:D4:0E:A0 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 0114 Signing time: Sun 19 May 2024 05:22:54 +0000 Manifest this update: Sun 19 May 2024 05:22:53 +0000 Manifest next update: Sun 26 May 2024 05:22:53 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: 18rDCGF5yVAgsRiso3+geaPEIwLRh8mzowGgoyevmmg=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: Mknc50H9prGQmPc0Hg1FmmwuzNQqJGLRT+YSmNTMqkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: May 19 05:22:53 2024 GMT Not After : May 26 05:22:53 2024 GMT Subject: CN=66498cad-60a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:f0:bf:1e:96:da:69:29:aa:e6:b1:19:b5: 89:7f:e3:0f:c9:d5:a9:a1:23:11:30:0b:ed:75:93: 16:64:bb:75:a0:e4:75:cd:aa:8e:5f:cd:06:f0:7e: 63:06:bd:dc:44:50:46:ec:c5:6f:ed:fb:88:a1:75: 7a:58:46:d0:81:e4:88:3f:ed:20:1f:28:f5:f0:f5: a4:10:c5:ac:26:59:4c:42:af:ed:5e:c9:ed:09:94: 5d:4f:d9:e3:3e:46:32:58:4f:38:37:7d:e1:14:ee: 73:b5:c6:cd:e8:38:4f:b0:04:dc:a3:aa:41:a4:e7: 13:e1:02:93:53:1c:7e:ee:03:30:94:f4:24:7b:b4: b0:55:18:68:cc:32:8a:5b:c4:9b:7b:6c:76:3c:98: 5f:ad:bf:01:60:a2:50:55:a4:0d:bb:b3:7d:b2:d5: 5e:ea:0a:8a:36:f2:cf:f0:d8:af:08:06:54:01:7a: 81:73:57:56:b2:bb:97:a3:fe:98:74:d7:c0:16:88: c1:bb:d0:b7:59:42:07:95:ff:99:89:f9:fc:c5:25: b1:bb:a4:d6:ac:99:43:85:d2:3c:56:db:95:5d:b7: 3f:dc:85:a7:ed:a1:28:60:24:62:9b:2f:e0:d3:24: 7f:85:40:d2:8f:95:73:32:c4:38:85:a6:74:55:a7: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:BD:96:C0:51:FF:39:BC:96:52:A0:3A:B6:B9:48:75:D4:0E:A0 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:80:40:fa:44:48:14:74:d3:82:11:65:99:49:c7:b0:2f:92: a0:bb:ef:8c:55:0a:25:4d:07:73:a1:0f:50:b1:f9:fe:95:b0: 65:a7:11:9e:57:ce:06:c9:75:5f:e3:7f:96:e3:12:f7:b3:6c: ce:bd:9a:78:49:86:06:5b:d2:8d:28:11:45:17:6e:20:fc:f5: 49:c2:40:5e:bc:c3:b4:a6:26:70:13:f8:bd:0d:7b:78:21:e7: f0:d5:59:b6:b0:3f:90:91:b9:cc:36:da:c4:2a:e5:31:05:25: 56:8c:b2:7b:84:27:4a:8c:a8:1f:67:c3:01:37:b1:cb:07:8f: 6a:7f:e5:16:6a:21:a3:3e:d3:3b:b1:7c:ab:57:47:47:50:58: 5b:ef:31:b9:f5:2d:02:1d:ca:26:5d:e4:a1:f6:dc:2b:bc:1e: c0:16:eb:32:21:ea:52:eb:80:02:a3:7f:63:cd:c3:a5:2e:55: 13:fc:1e:17:24:16:a5:a3:39:45:31:cc:9b:39:b1:58:38:5a: 98:34:2f:8b:a9:05:44:7e:19:22:76:64:9f:04:d7:a1:9d:37: 25:98:0b:92:48:cf:20:85:6f:63:a7:c3:a9:ed:ef:43:88:9b: d6:c1:de:ad:aa:e6:bf:3c:8d:30:93:e3:fd:ad:82:38:6e:42: a6:6d:72:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjQwNTE5MDUyMjUzWhcNMjQwNTI2MDUyMjUzWjAYMRYwFAYD VQQDEw02NjQ5OGNhZC02MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Dwvx6W2mkpquaxGbWJf+MPydWpoSMRMAvtdZMWZLt1oOR1zaqOX80G8H5j Br3cRFBG7MVv7fuIoXV6WEbQgeSIP+0gHyj18PWkEMWsJllMQq/tXsntCZRdT9nj PkYyWE84N33hFO5ztcbN6DhPsATco6pBpOcT4QKTUxx+7gMwlPQke7SwVRhozDKK W8Sbe2x2PJhfrb8BYKJQVaQNu7N9stVe6gqKNvLP8NivCAZUAXqBc1dWsruXo/6Y dNfAFojBu9C3WUIHlf+Zifn8xSWxu6TWrJlDhdI8VtuVXbc/3IWn7aEoYCRimy/g 0yR/hUDSj5VzMsQ4haZ0Vad3mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ6vZbA Uf85vJZSoDq2uUh11A6gMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfgED6REgUdNOCEWWZScewL5Kgu++MVQolTQdzoQ9Qsfn+lbBlpxGe V84GyXVf43+W4xL3s2zOvZp4SYYGW9KNKBFFF24g/PVJwkBevMO0piZwE/i9DXt4 Iefw1Vm2sD+QkbnMNtrEKuUxBSVWjLJ7hCdKjKgfZ8MBN7HLB49qf+UWaiGjPtM7 sXyrV0dHUFhb7zG59S0CHcomXeSh9twrvB7AFusyIepS64ACo39jzcOlLlUT/B4X JBalozlFMcybObFYOFqYNC+LqQVEfhkidmSfBNehnTclmAuSSM8ghW9jp8Op7e9D iJvWwd6tqua/PI0wk+P9rYI4bkKmbXJ2 -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org