$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: ZnpF3ufsI8emrA8Rf20rCW/7v21so2++gVKdihII3+Y= Subject key identifier: 83:05:6C:78:89:EE:3A:18:CB:41:68:AC:FC:9C:FD:19:F1:D1:62:9A Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 09F0 Signing time: Sun 26 May 2024 17:16:25 +0000 Manifest this update: Sun 26 May 2024 17:16:24 +0000 Manifest next update: Sun 02 Jun 2024 17:16:24 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: UClbuw4ZA+j0nG6f23Tweuv03q/BwnmL5FPRnzi8824=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: May 26 17:16:24 2024 GMT Not After : Jun 2 17:16:24 2024 GMT Subject: CN=66536e69-95d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:3d:9f:15:f9:b8:4c:44:77:62:bf:a5:dc: 23:7f:f2:67:b1:16:b7:7c:fd:56:5d:1e:4a:31:bd: e8:37:61:27:27:c0:fc:5e:aa:ea:17:37:ec:5c:6f: 2c:e4:2c:53:12:a2:7a:c4:5e:9c:a3:fd:3e:c6:62: 3f:57:8f:57:59:d4:f8:46:05:e0:7d:39:39:df:40: 92:92:4e:07:5c:5e:08:ba:47:c3:31:55:42:f7:ea: 63:c0:f8:00:15:e3:83:fc:2b:60:c9:57:5f:66:72: c5:a2:cd:2f:6d:a3:42:6b:ce:fb:9c:b2:22:5d:92: 8d:c2:f1:e3:af:65:ce:07:bd:8f:07:0b:a9:8c:d0: 6a:14:83:97:8b:6b:a8:a8:dd:91:85:c6:e0:ff:95: b1:a2:83:c0:99:49:01:c5:44:e7:b0:82:18:86:d3: 76:33:50:0b:3f:62:ca:77:19:37:23:d2:0d:50:2d: 4a:52:ed:aa:fe:11:13:2c:d2:c8:9e:67:00:18:73: f3:93:31:3b:b5:ea:44:85:a5:dc:95:aa:b1:39:18: 7f:b3:30:d3:3f:b3:97:6e:9a:2b:87:1d:f4:63:bd: 4a:60:2d:b3:5c:d5:81:79:1e:cc:ae:53:2d:1a:50: 30:b3:77:e8:cb:b6:a9:45:40:56:a7:16:47:b9:d5: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:6C:78:89:EE:3A:18:CB:41:68:AC:FC:9C:FD:19:F1:D1:62:9A X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:dc:f6:8e:ef:2f:42:7f:0a:87:ff:c9:db:97:29:ef:83:d2: 68:5f:ad:51:92:1d:dd:15:85:81:90:49:07:0b:f1:7d:45:c5: 73:10:ec:cd:27:08:df:83:86:58:7c:a7:ba:b4:f7:29:d5:e2: 38:c4:b9:9c:eb:41:da:34:18:a9:a6:b1:d0:4b:39:63:f4:6a: fe:9a:e7:2e:89:34:49:c3:93:6d:d5:f0:79:da:a0:80:89:fe: 1a:76:05:05:42:74:c3:e6:f2:2f:93:ac:50:6c:bb:bb:99:ea: b7:b4:3f:09:ad:07:76:c1:2b:d8:38:60:57:33:96:39:8a:77: 86:4f:d4:30:f8:54:1e:a3:9a:7a:01:d4:16:40:21:3c:9d:05: 22:cd:04:44:cb:95:aa:7f:5a:f4:a5:cc:9b:db:74:1a:f7:32: 93:87:e9:84:ee:1d:2e:9e:21:b0:a8:e8:8f:0a:8b:21:8d:1d: cf:b7:38:8a:4e:e5:99:3a:f5:07:e0:f5:b6:75:02:29:a7:51: fb:86:e6:92:87:7f:30:ed:83:a0:1d:ff:01:75:cc:7a:d6:ba: 6e:15:1c:f1:89:52:ff:1e:b8:57:cb:15:b5:c5:a5:f8:7c:54: 8d:1c:ab:82:5f:66:bd:30:36:fa:15:82:f9:b2:e6:eb:8b:1b: 33:71:a8:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjQwNTI2MTcxNjI0WhcNMjQwNjAyMTcxNjI0WjAYMRYwFAYD VQQDEw02NjUzNmU2OS05NWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzw89nxX5uExEd2K/pdwjf/JnsRa3fP1WXR5KMb3oN2EnJ8D8XqrqFzfsXG8s 5CxTEqJ6xF6co/0+xmI/V49XWdT4RgXgfTk530CSkk4HXF4IukfDMVVC9+pjwPgA FeOD/CtgyVdfZnLFos0vbaNCa877nLIiXZKNwvHjr2XOB72PBwupjNBqFIOXi2uo qN2Rhcbg/5WxooPAmUkBxUTnsIIYhtN2M1ALP2LKdxk3I9INUC1KUu2q/hETLNLI nmcAGHPzkzE7tepEhaXclaqxORh/szDTP7OXbporhx30Y71KYC2zXNWBeR7MrlMt GlAws3foy7apRUBWpxZHudUCCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMFbHiJ 7joYy0ForPyc/Rnx0WKaMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx3PaO7y9CfwqH/8nblynvg9JoX61Rkh3dFYWBkEkHC/F9RcVzEOzN Jwjfg4ZYfKe6tPcp1eI4xLmc60HaNBipprHQSzlj9Gr+mucuiTRJw5Nt1fB52qCA if4adgUFQnTD5vIvk6xQbLu7meq3tD8JrQd2wSvYOGBXM5Y5ineGT9Qw+FQeo5p6 AdQWQCE8nQUizQREy5Wqf1r0pcyb23Qa9zKTh+mE7h0uniGwqOiPCoshjR3PtziK TuWZOvUH4PW2dQIpp1H7huaSh38w7YOgHf8Bdcx61rpuFRzxiVL/HrhXyxW1xaX4 fFSNHKuCX2a9MDb6FYL5subrixszcahh -----END CERTIFICATE-----Generated at Sun May 26 19:10:23 2024 by rpki-client on console-ams.rpki-client.org