$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: ATtZQ5KKzNHLu+t777XD2jPIIZJ+CLfs+vw1KYbiQDs= Subject key identifier: 54:94:BB:46:D0:3D:75:DF:78:23:22:EA:46:21:65:F3:8D:39:5C:6F Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0B71 Signing time: Sat 18 May 2024 19:32:45 +0000 Manifest this update: Sat 18 May 2024 19:32:44 +0000 Manifest next update: Sat 25 May 2024 19:32:44 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: e/gRu/SVsFhkEXa14GA2Y6t5UvVuqpHVW/wm79Ni3UM=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: BA4+rkh2SPpSokTG1BeEsEpJkA+FLG7pCWiAPmWCubw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: May 18 19:32:44 2024 GMT Not After : May 25 19:32:44 2024 GMT Subject: CN=6649025c-59d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:36:b0:b7:a2:c1:0e:5c:55:2a:b0:66:ba: bb:0a:92:13:27:fd:a3:1a:70:28:aa:d8:12:05:e6: 45:6e:2c:9d:59:f5:d5:e0:fd:f3:96:fd:fa:d9:b3: 6f:6f:01:bb:a5:45:08:f8:b7:d7:25:ba:51:aa:78: 02:26:46:8c:ab:2d:d4:d8:48:d9:7e:4a:af:46:10: 5e:d7:e3:fc:a5:0d:bb:49:5f:18:47:e9:7a:a3:4a: a9:91:62:f3:7d:e9:e1:cb:2d:34:cd:1f:4f:58:08: b5:95:17:21:bb:2f:0e:eb:8a:5c:c6:fd:79:0b:44: f2:f6:58:18:15:10:03:cc:32:84:ce:32:57:20:b1: 45:80:f2:4c:43:86:dc:85:67:49:70:6d:59:87:70: ef:3b:52:d8:9a:fd:47:30:0a:3b:27:e9:b2:f0:02: ef:a5:6a:9a:71:f0:71:34:95:08:83:53:b7:52:0a: 92:be:68:06:d0:84:54:a0:90:fb:c2:de:a2:43:b8: 73:31:9f:98:4d:d9:3d:de:15:e9:81:c2:82:f8:9d: 70:db:7c:a9:f7:d1:ab:95:4f:d1:a9:bd:3f:e0:50: 4e:4f:64:93:e9:a7:b1:35:82:68:6d:03:36:0b:a5: ac:88:35:28:e8:a0:fb:fe:a3:98:55:c5:f4:a9:3a: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:94:BB:46:D0:3D:75:DF:78:23:22:EA:46:21:65:F3:8D:39:5C:6F X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:16:0e:98:81:3c:61:20:44:a6:26:7a:de:ec:bd:c0:ed:b9: 09:89:2e:58:b5:4c:09:33:d8:52:2a:b9:99:a4:4a:9b:75:72: 03:ee:34:bc:d0:56:d5:d9:36:ad:48:4a:9d:cf:2f:99:21:70: aa:7b:b2:64:67:f0:53:90:96:80:27:e2:be:8d:ef:53:68:8a: fb:f8:3d:bb:9d:9d:c3:50:61:fb:33:75:af:6b:59:0a:d8:dc: fd:05:f0:a8:99:f6:4a:e6:2e:17:0b:49:5f:96:28:e8:06:01: bd:3c:ad:be:f1:7b:c0:81:e0:a3:54:47:e4:02:6b:b8:17:77: 87:45:02:24:f3:5b:00:8c:77:d2:0b:0c:33:a5:a7:b6:6c:32: 74:d5:5e:74:2c:bf:78:e0:b0:24:d2:30:92:79:07:f1:50:c0: e7:2f:03:81:e4:33:ee:2c:18:5d:c9:19:66:1c:ab:64:db:b5: 72:67:55:63:21:94:30:c9:86:55:3d:76:81:21:77:eb:7b:94: bc:c2:36:95:ea:57:e9:0b:2d:83:49:17:fd:b5:f4:8d:fb:c3: ff:59:f3:09:94:5e:28:9a:15:36:50:50:c2:64:ea:9d:6a:e3: 33:5d:ef:f9:76:86:1a:fe:50:f6:0e:de:e6:1b:b5:24:48:04: 55:8e:a7:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjQwNTE4MTkzMjQ0WhcNMjQwNTI1MTkzMjQ0WjAYMRYwFAYD VQQDEw02NjQ5MDI1Yy01OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Cc2sLeiwQ5cVSqwZrq7CpITJ/2jGnAoqtgSBeZFbiydWfXV4P3zlv362bNv bwG7pUUI+LfXJbpRqngCJkaMqy3U2EjZfkqvRhBe1+P8pQ27SV8YR+l6o0qpkWLz fenhyy00zR9PWAi1lRchuy8O64pcxv15C0Ty9lgYFRADzDKEzjJXILFFgPJMQ4bc hWdJcG1Zh3DvO1LYmv1HMAo7J+my8ALvpWqacfBxNJUIg1O3UgqSvmgG0IRUoJD7 wt6iQ7hzMZ+YTdk93hXpgcKC+J1w23yp99GrlU/Rqb0/4FBOT2ST6aexNYJobQM2 C6WsiDUo6KD7/qOYVcX0qTrXcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSUu0bQ PXXfeCMi6kYhZfONOVxvMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHFg6YgTxhIESmJnre7L3A7bkJiS5YtUwJM9hSKrmZpEqbdXID7jS8 0FbV2TatSEqdzy+ZIXCqe7JkZ/BTkJaAJ+K+je9TaIr7+D27nZ3DUGH7M3Wva1kK 2Nz9BfComfZK5i4XC0lflijoBgG9PK2+8XvAgeCjVEfkAmu4F3eHRQIk81sAjHfS Cwwzpae2bDJ01V50LL944LAk0jCSeQfxUMDnLwOB5DPuLBhdyRlmHKtk27VyZ1Vj IZQwyYZVPXaBIXfre5S8wjaV6lfpCy2DSRf9tfSN+8P/WfMJlF4omhU2UFDCZOqd auMzXe/5doYa/lD2Dt7mG7UkSARVjqdR -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org