$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: 1USAateCoZPGQtQyl0LAtzqrO4a40asOCVM0RNz1NIY= Subject key identifier: BF:9C:B9:F6:4B:EB:A6:73:07:E4:39:D7:04:5E:94:D1:EC:C8:B1:1C Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 16AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 16A0 Signing time: Thu 02 May 2024 17:11:31 +0000 Manifest this update: Thu 02 May 2024 17:11:31 +0000 Manifest next update: Thu 09 May 2024 17:11:31 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: 5bDL0gsqEQWcIF1bYOavqhDz5VhqrDdNUjg1nQ/efp0=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: +BlU0mmGgL9NyHyE1EN1dLynTmrUKfBUWghh1q9yVeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5806 (0x16ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: May 2 17:11:31 2024 GMT Not After : May 9 17:11:31 2024 GMT Subject: CN=6633c943-fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:30:78:bb:fa:95:c7:12:f4:83:f7:db:74: 5f:3f:fa:c0:e1:e1:bb:5b:f5:a4:63:68:2b:f7:73: f8:ed:66:2b:30:70:a1:c2:8f:7f:e0:c7:56:cb:61: f3:99:a8:87:54:a6:44:5d:92:84:4c:7e:24:ae:8d: 35:a7:0f:d3:6f:88:a7:62:39:b8:35:b8:5e:1e:02: 83:08:65:cb:e0:13:1e:bb:99:f7:c1:60:ec:99:36: a6:60:11:07:4e:8e:7e:be:47:7d:f4:90:d4:8f:74: f5:cd:4c:1b:f2:5f:4c:9b:35:ef:1a:ab:a0:27:cb: 49:6f:4f:6e:b7:5e:b6:82:90:2b:1e:bc:03:f1:70: 80:03:42:76:fb:22:cc:7c:ee:21:1f:24:d7:d0:d8: 30:94:ec:d0:6d:fc:bc:8e:b9:09:b3:a2:5d:24:86: ad:45:cc:7f:f7:53:f4:50:6c:7b:bb:33:4c:49:29: 90:61:c4:d9:56:87:ce:5a:9b:3b:56:c9:49:42:8f: 4b:2e:a7:c3:66:ef:01:59:7c:e1:8d:21:5e:de:95: 35:36:f8:5c:32:ec:3a:c4:28:c4:0a:9f:ef:75:c0: 2e:5d:7f:ec:d3:4b:f1:3a:91:01:1f:42:9f:ce:36: d8:66:98:db:31:28:da:b1:2a:ee:a0:26:8f:4c:b0: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:B9:F6:4B:EB:A6:73:07:E4:39:D7:04:5E:94:D1:EC:C8:B1:1C X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9a:43:10:80:41:6f:84:c1:be:fd:a3:dd:9a:c6:d9:44:61: 44:e1:f0:43:22:a1:db:98:a6:15:5a:ac:9d:7a:97:02:14:b9: 48:80:7a:f1:db:60:2e:66:1b:17:8b:2f:ff:5d:29:16:ce:1a: b2:1c:85:b5:40:e0:38:bb:30:2a:d7:c8:13:74:c1:e3:16:1d: 6c:94:96:19:c7:a3:97:e1:6c:b2:85:a8:24:10:a9:1c:db:dd: 59:a3:07:e8:f3:c4:ed:d9:d1:62:55:3f:70:e2:d1:8e:68:97: 40:05:88:18:0f:1a:ef:f1:cb:dd:e3:4c:0f:c6:a7:75:12:68: f7:96:d4:01:1a:d5:6f:65:0d:10:5c:ff:a5:49:ce:e8:1c:06: db:8d:3d:2d:59:bf:f0:78:af:3b:39:14:77:68:3b:68:93:b1: 47:cb:d0:58:d9:86:f3:94:18:f9:cb:e7:84:7d:1f:4f:bb:70: e6:35:0b:a9:1a:9e:3a:92:ed:96:d6:d5:a0:c6:5d:a4:26:44: 1c:79:e8:89:d8:f1:2a:c4:af:de:ac:64:e0:21:23:39:9b:bd: 1d:4e:a1:f0:94:56:10:ab:d2:07:49:67:59:aa:1c:0e:83:a0: a4:88:c5:cf:13:d6:74:24:af:6a:02:6b:e9:11:ad:65:de:4f: 3d:46:8e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjQwNTAyMTcxMTMxWhcNMjQwNTA5MTcxMTMxWjAYMRYwFAYD VQQDEw02NjMzYzk0My1mZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDEweLv6lccS9IP323RfP/rA4eG7W/WkY2gr93P47WYrMHChwo9/4MdWy2Hz maiHVKZEXZKETH4kro01pw/Tb4inYjm4NbheHgKDCGXL4BMeu5n3wWDsmTamYBEH To5+vkd99JDUj3T1zUwb8l9MmzXvGqugJ8tJb09ut162gpArHrwD8XCAA0J2+yLM fO4hHyTX0NgwlOzQbfy8jrkJs6JdJIatRcx/91P0UGx7uzNMSSmQYcTZVofOWps7 VslJQo9LLqfDZu8BWXzhjSFe3pU1NvhcMuw6xCjECp/vdcAuXX/s00vxOpEBH0Kf zjbYZpjbMSjasSruoCaPTLCH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+cufZL 66ZzB+Q51wRelNHsyLEcMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmkMQgEFvhMG+/aPdmsbZRGFE4fBDIqHbmKYVWqydepcCFLlIgHrx 22AuZhsXiy//XSkWzhqyHIW1QOA4uzAq18gTdMHjFh1slJYZx6OX4WyyhagkEKkc 291Zowfo88Tt2dFiVT9w4tGOaJdABYgYDxrv8cvd40wPxqd1Emj3ltQBGtVvZQ0Q XP+lSc7oHAbbjT0tWb/weK87ORR3aDtok7FHy9BY2YbzlBj5y+eEfR9Pu3DmNQup Gp46ku2W1tWgxl2kJkQceeiJ2PEqxK/erGTgISM5m70dTqHwlFYQq9IHSWdZqhwO g6CkiMXPE9Z0JK9qAmvpEa1l3k89Ro6A -----END CERTIFICATE-----Generated at Thu May 2 20:04:25 2024 by rpki-client on console-ams.rpki-client.org