$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: lSIn+AJ+2Ir1jcXklppL0zq8/aDfnOaGymWPOi7DPJQ= Subject key identifier: 37:D7:CA:52:F3:96:E8:19:AF:94:23:5C:CA:52:4A:C0:B1:31:9D:75 Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0C77 Signing time: Thu 02 May 2024 18:58:37 +0000 Manifest this update: Thu 02 May 2024 18:58:36 +0000 Manifest next update: Thu 09 May 2024 18:58:36 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: 57kV5oYX0h6fdlCjF59Cuc3bMMvhM4oteSWVkPX7lp0=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: XpzukYyNZ/USlf3Fohe5yi5HxUGnn2DRa9gERGthYj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: May 2 18:58:36 2024 GMT Not After : May 9 18:58:36 2024 GMT Subject: CN=6633e25d-73e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:ce:d8:1f:7a:b0:69:d5:c5:6c:84:0e:b2: cc:62:16:b0:74:e6:71:f5:aa:f1:d8:4d:ae:a8:44: 88:5f:d9:bd:c9:46:2d:30:8a:68:b5:69:7c:f2:e9: 9d:ac:3e:6d:e7:d1:d9:29:c2:ed:e0:06:a4:2c:ee: 0e:cf:3f:f5:df:1c:e5:ef:8d:90:e0:97:66:9f:2b: ae:da:a9:0b:f7:33:88:51:1d:af:86:8f:84:98:26: 50:ed:99:ac:29:56:9f:55:80:a7:6c:13:64:79:c5: d5:dd:2e:d4:0f:72:80:e3:f7:a4:87:c7:f0:af:55: 75:b1:da:38:e3:4f:3e:5f:6a:e1:da:a3:97:15:bf: 2d:64:fa:61:4c:ab:dc:86:4a:53:3c:4a:8f:46:18: a3:ce:b6:32:2e:92:de:12:39:e6:85:b6:05:fd:0a: 98:e1:eb:51:73:e0:0e:94:4f:60:13:c9:bb:6f:6b: 09:f1:96:7b:7d:19:1a:df:fd:1d:9c:42:e3:32:5a: f9:18:36:f7:af:eb:ea:8f:ff:fa:47:78:1f:ad:d7: c0:3f:05:00:47:66:2e:8a:50:f9:5e:cc:e3:7d:1b: ef:42:f6:b2:25:d9:70:82:6f:f9:4f:d3:a5:b4:48: 6b:0a:4d:0c:9c:9e:3e:66:d1:5e:94:a8:0e:3e:af: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:CA:52:F3:96:E8:19:AF:94:23:5C:CA:52:4A:C0:B1:31:9D:75 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:78:b7:1f:39:82:cb:00:3e:05:f7:94:f0:bd:51:87:7e:11: 0e:ef:cc:83:bd:78:67:1b:eb:04:47:c4:e5:5a:45:e2:55:cc: 02:73:b7:a3:f9:05:cb:7e:32:e0:9c:65:ac:46:9b:f7:f4:fa: 3d:ef:bd:0e:bc:fa:03:77:70:4a:52:bc:69:64:b0:49:be:6e: c5:31:da:dc:57:a6:25:8b:27:8b:6f:7f:fc:37:12:f5:f8:09: 09:9e:8b:38:a1:13:a5:07:06:03:ea:f5:65:d4:37:11:87:a4: 79:0f:69:92:8c:9a:c1:7b:2b:a3:6f:70:9d:fd:73:8d:27:b0: a0:a1:7a:62:1c:f3:c1:cf:b1:bc:f6:7b:7f:b6:99:18:e0:d3: 6e:18:83:2f:2c:1f:ab:03:60:4b:66:e2:23:83:84:fc:6e:1f: 4a:85:08:ba:5d:23:65:e4:2e:2d:08:d3:f1:e0:3d:de:6d:91: 29:c4:f4:e5:8d:38:a4:4b:0c:d3:60:b8:44:5b:7a:36:51:7d: 6a:ef:e6:20:11:11:a5:4a:0e:ea:f2:6c:86:83:0a:60:ef:76: ac:62:60:56:d7:b2:7e:fe:59:c1:1a:cc:f5:61:b2:15:20:43: 6f:7e:d5:2f:3a:d1:3b:de:95:e5:3a:f4:da:f9:e3:38:3f:40: de:ac:73:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjQwNTAyMTg1ODM2WhcNMjQwNTA5MTg1ODM2WjAYMRYwFAYD VQQDEw02NjMzZTI1ZC03M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqbO2B96sGnVxWyEDrLMYhawdOZx9arx2E2uqESIX9m9yUYtMIpotWl88umd rD5t59HZKcLt4AakLO4Ozz/13xzl742Q4Jdmnyuu2qkL9zOIUR2vho+EmCZQ7Zms KVafVYCnbBNkecXV3S7UD3KA4/ekh8fwr1V1sdo4408+X2rh2qOXFb8tZPphTKvc hkpTPEqPRhijzrYyLpLeEjnmhbYF/QqY4etRc+AOlE9gE8m7b2sJ8ZZ7fRka3/0d nELjMlr5GDb3r+vqj//6R3gfrdfAPwUAR2YuilD5XszjfRvvQvayJdlwgm/5T9Ol tEhrCk0MnJ4+ZtFelKgOPq+cAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfXylLz lugZr5QjXMpSSsCxMZ11MB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjeLcfOYLLAD4F95TwvVGHfhEO78yDvXhnG+sER8TlWkXiVcwCc7ej +QXLfjLgnGWsRpv39Po9770OvPoDd3BKUrxpZLBJvm7FMdrcV6YliyeLb3/8NxL1 +AkJnos4oROlBwYD6vVl1DcRh6R5D2mSjJrBeyujb3Cd/XONJ7CgoXpiHPPBz7G8 9nt/tpkY4NNuGIMvLB+rA2BLZuIjg4T8bh9KhQi6XSNl5C4tCNPx4D3ebZEpxPTl jTikSwzTYLhEW3o2UX1q7+YgERGlSg7q8myGgwpg73asYmBW17J+/lnBGsz1YbIV IENvftUvOtE73pXlOvTa+eM4P0DerHNy -----END CERTIFICATE-----Generated at Thu May 2 20:50:20 2024 by rpki-client on console-fra.rpki-client.org