$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: Nh4OKcVBgDu1opkZ9FjwRqd12jBVmKtY+NM0k4mDF6U= Subject key identifier: CB:84:A1:E4:D2:29:3E:58:F4:5A:61:1C:89:B1:06:F9:F8:A0:30:68 Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: B5 Signing time: Thu 25 Apr 2024 06:25:08 +0000 Manifest this update: Thu 25 Apr 2024 06:25:08 +0000 Manifest next update: Thu 02 May 2024 06:25:08 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: sjse/Dho9kfE9fQKBC6CdU1hHQiYbnC9Q9ZA7R+63Js=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: XdjG4uHL5z6+XBjKDCeJYvoNR322IymaPGaDji///S0=) 3: EC081D70FA4811EDA9C77777C4F9AE02.roa (hash: Nd8Xg3w8bT1Gp6BbYLh8IpKdI4rHMo3hUB4EEQjEyVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 06:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Apr 25 06:25:08 2024 GMT Not After : May 2 06:25:08 2024 GMT Subject: CN=6629f744-15b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:02:52:91:0e:1a:80:09:2b:af:2e:00:46: 70:35:fd:e7:67:dc:ba:4e:c4:f4:5a:66:a8:65:ae: f2:94:fa:bf:3d:42:97:e0:fb:a9:30:a8:68:63:63: 6f:c2:94:d1:2c:6e:15:0f:db:c8:a0:a9:79:84:e1: 82:cc:1c:27:c6:40:67:13:b4:6e:d7:e3:c1:a7:48: f0:01:9c:b3:22:b6:08:b1:07:c7:e9:a2:b3:5c:0e: 2b:23:56:cc:c8:54:2c:d7:c1:05:ab:86:16:bb:c9: 7e:c8:70:e7:b2:e3:47:4d:63:35:5f:53:c2:4b:00: c0:c4:19:1d:f9:44:8e:59:8f:0a:38:06:ae:89:1c: 27:62:4e:3f:77:b9:91:b6:c4:76:31:8a:b0:8d:f5: 1c:cf:f2:b0:6c:b5:42:33:86:40:e5:f6:c3:b6:d5: bd:b6:cd:c8:50:1a:4d:e1:1f:04:eb:01:4b:0e:c1: 24:cb:e5:39:07:e8:76:72:68:8c:d5:27:ca:f7:c2: ea:c6:40:61:b8:44:dc:a3:e0:f2:b5:2c:f8:e3:ca: ba:9b:57:fe:f5:51:4f:5e:23:02:e2:9c:f2:a6:07: d0:1a:e8:2c:c0:02:35:f0:5c:32:b5:c2:97:0e:bf: 0b:0e:65:15:81:ba:85:b8:8b:0d:88:7b:6c:19:70: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:84:A1:E4:D2:29:3E:58:F4:5A:61:1C:89:B1:06:F9:F8:A0:30:68 X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:6c:fa:da:75:44:b5:b6:bf:fc:8f:29:01:eb:d7:c8:cc: 8e:4e:e0:1b:58:dc:13:b8:3a:40:ae:5a:86:c7:4b:69:00:90: ea:69:d8:79:ab:b4:09:b8:ee:01:7f:2e:f3:55:17:75:9b:a0: 1b:b6:54:07:32:72:9d:1e:ff:37:6a:1c:4a:f1:a8:81:fd:72: 01:a7:84:86:30:68:6c:18:fb:77:89:5e:3d:1b:e3:34:c8:51: 22:af:0e:73:66:c1:3f:fe:9b:0e:b4:70:22:ea:ed:40:c0:05: 63:fd:bf:f9:59:17:5d:0d:94:54:55:66:b3:32:10:5f:a1:5b: 77:77:1e:ac:38:f8:bb:9f:ca:c3:c5:fe:7b:4c:2a:f8:2f:42: 0d:dd:69:aa:52:bc:b8:8f:25:a7:2f:30:62:5e:a1:d0:3c:d0: cd:75:70:9c:98:a0:36:3a:94:69:aa:4d:bb:9e:e0:93:0d:eb: 29:8f:5d:51:b5:4e:fa:17:81:a7:62:62:92:2e:fa:0f:d2:0e: d4:ce:bf:3a:a3:9f:5f:c8:70:69:94:ad:71:16:e9:64:cb:a4: a0:b1:ba:8f:8e:51:c0:10:d2:c3:54:87:73:e6:d9:45:73:4a: 69:6d:d9:8a:8e:e2:60:3f:12:94:03:1c:4e:58:51:ce:fa:82: ef:57:51:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjQwNDI1MDYyNTA4WhcNMjQwNTAyMDYyNTA4WjAYMRYwFAYD VQQDEw02NjI5Zjc0NC0xNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaECUpEOGoAJK68uAEZwNf3nZ9y6TsT0WmaoZa7ylPq/PUKX4PupMKhoY2Nv wpTRLG4VD9vIoKl5hOGCzBwnxkBnE7Ru1+PBp0jwAZyzIrYIsQfH6aKzXA4rI1bM yFQs18EFq4YWu8l+yHDnsuNHTWM1X1PCSwDAxBkd+USOWY8KOAauiRwnYk4/d7mR tsR2MYqwjfUcz/KwbLVCM4ZA5fbDttW9ts3IUBpN4R8E6wFLDsEky+U5B+h2cmiM 1SfK98LqxkBhuETco+DytSz448q6m1f+9VFPXiMC4pzypgfQGugswAI18FwytcKX Dr8LDmUVgbqFuIsNiHtsGXDY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuEoeTS KT5Y9FphHImxBvn4oDBoMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfd2z62nVEtba//I8pAevXyMyOTuAbWNwTuDpArlqGx0tpAJDqadh5 q7QJuO4Bfy7zVRd1m6AbtlQHMnKdHv83ahxK8aiB/XIBp4SGMGhsGPt3iV49G+M0 yFEirw5zZsE//psOtHAi6u1AwAVj/b/5WRddDZRUVWazMhBfoVt3dx6sOPi7n8rD xf57TCr4L0IN3WmqUry4jyWnLzBiXqHQPNDNdXCcmKA2OpRpqk27nuCTDespj11R tU76F4GnYmKSLvoP0g7Uzr86o59fyHBplK1xFulky6SgsbqPjlHAENLDVIdz5tlF c0ppbdmKjuJgPxKUAxxOWFHO+oLvV1FG -----END CERTIFICATE-----Generated at Thu Apr 25 07:18:34 2024 by rpki-client on console-fra.rpki-client.org