$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: rzYP55rTAqsZQb8xX4V7uGFk0mXIwK1zkc7/oYAz45M= Subject key identifier: 6A:F6:89:41:15:7E:AB:EE:92:87:87:62:4A:B3:2E:11:13:F7:69:05 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 0F8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 0F89 Signing time: Thu 02 May 2024 18:10:37 +0000 Manifest this update: Thu 02 May 2024 18:10:37 +0000 Manifest next update: Thu 09 May 2024 18:10:37 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: FpLxOFW+qyxOzB/r3TihvO+YTGuy73FgutFx3YzQJds=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: tKbPfXDC2Fwj+8ivwZ/PNB5Op2vLI8CIJgf4lWUv2p0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3983 (0xf8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: May 2 18:10:37 2024 GMT Not After : May 9 18:10:37 2024 GMT Subject: CN=6633d71d-eba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:22:aa:d8:7b:c0:f2:38:ce:db:e2:6d:73: 5c:d0:eb:2d:bd:56:7f:3a:6d:0c:4c:bf:23:cc:72: e5:64:8f:a6:52:87:67:1a:6c:7c:f4:8c:12:e3:58: 49:47:03:61:f6:cf:b8:f2:f9:87:7f:87:8c:47:63: fb:a9:0c:76:34:6e:3d:ee:27:3e:37:14:cd:82:82: 17:32:47:59:92:cb:09:8b:f9:f7:b1:58:04:df:d2: 4b:b5:a3:85:f6:32:62:8c:61:9b:16:ad:94:7b:e7: 32:c3:20:19:f9:95:ba:d7:de:e5:42:5c:ec:68:12: 9d:92:dc:65:90:4f:e9:08:8b:69:ea:13:61:cd:ff: 67:45:d0:4b:ec:0e:01:68:25:35:ae:07:2f:78:87: a4:55:13:38:a6:5b:cd:fa:43:ef:23:26:75:03:ee: 96:c8:b2:85:3f:95:4c:53:6d:a5:e7:48:9a:af:f8: 9e:16:69:15:ee:f3:9f:6d:a9:2e:24:16:6a:7c:bd: cb:4a:a9:c2:86:2e:95:0d:fb:e5:d1:56:7e:31:41: 85:f4:28:86:79:c7:b5:e1:9d:61:7f:b0:28:5c:fa: 22:12:0c:68:70:ed:ce:7b:91:f7:0e:c5:46:ac:4b: 67:1c:6e:71:a6:dd:34:c5:ae:b1:df:d9:bf:cd:90: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:89:41:15:7E:AB:EE:92:87:87:62:4A:B3:2E:11:13:F7:69:05 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a3:98:59:a4:48:04:c6:ea:69:c1:17:dc:b6:0f:3a:65:f4: c7:4e:aa:39:90:a0:b1:6a:62:bf:3d:90:e0:28:3a:08:e2:80: ae:13:f5:60:51:76:55:7b:cf:6b:28:50:9a:c4:f6:a6:b0:ff: a9:51:84:9c:6f:c8:ac:37:d9:22:75:a7:8e:ed:f8:39:ba:0f: 86:30:e9:75:73:62:c4:46:91:42:dc:ec:c0:8b:76:cd:8c:d1: ff:42:07:ef:e2:d2:69:be:7c:d0:80:d5:45:7a:7f:4e:84:62: 01:42:9e:5b:a7:69:6e:bb:61:31:2d:62:76:84:62:29:88:cb: 24:5b:ce:72:d9:3a:b6:c5:e0:b4:00:6b:6c:05:2e:1f:2c:9c: bf:8d:dc:c0:53:2b:92:dc:67:4a:86:eb:65:b7:6d:9c:64:47: 9c:08:61:62:38:68:eb:e9:c2:a8:c7:d2:75:0c:f5:0e:c9:3e: 11:eb:45:19:18:2f:23:91:42:cb:81:f5:e0:bd:12:48:27:ee: b1:07:32:1a:85:b4:7c:97:84:c9:5d:13:2e:aa:9c:72:7a:60: 12:98:6a:1e:d9:9f:ef:65:a2:fe:43:24:8b:62:2a:a0:2b:f8: 61:16:ba:e8:a9:55:a3:a7:48:99:6e:ba:7e:1d:3d:ee:6b:20: 5c:bc:45:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjQwNTAyMTgxMDM3WhcNMjQwNTA5MTgxMDM3WjAYMRYwFAYD VQQDEw02NjMzZDcxZC1lYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZMiqth7wPI4ztvibXNc0OstvVZ/Om0MTL8jzHLlZI+mUodnGmx89IwS41hJ RwNh9s+48vmHf4eMR2P7qQx2NG497ic+NxTNgoIXMkdZkssJi/n3sVgE39JLtaOF 9jJijGGbFq2Ue+cywyAZ+ZW6197lQlzsaBKdktxlkE/pCItp6hNhzf9nRdBL7A4B aCU1rgcveIekVRM4plvN+kPvIyZ1A+6WyLKFP5VMU22l50iar/ieFmkV7vOfbaku JBZqfL3LSqnChi6VDfvl0VZ+MUGF9CiGece14Z1hf7AoXPoiEgxocO3Oe5H3DsVG rEtnHG5xpt00xa6x39m/zZAP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGr2iUEV fqvukoeHYkqzLhET92kFMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZo5hZpEgExuppwRfctg86ZfTHTqo5kKCxamK/PZDgKDoI4oCuE/Vg UXZVe89rKFCaxPamsP+pUYScb8isN9kidaeO7fg5ug+GMOl1c2LERpFC3OzAi3bN jNH/Qgfv4tJpvnzQgNVFen9OhGIBQp5bp2luu2ExLWJ2hGIpiMskW85y2Tq2xeC0 AGtsBS4fLJy/jdzAUyuS3GdKhutlt22cZEecCGFiOGjr6cKox9J1DPUOyT4R60UZ GC8jkULLgfXgvRJIJ+6xBzIahbR8l4TJXRMuqpxyemASmGoe2Z/vZaL+QySLYiqg K/hhFrroqVWjp0iZbrp+HT3uayBcvEX8 -----END CERTIFICATE-----Generated at Thu May 2 20:04:26 2024 by rpki-client on console-ams.rpki-client.org