$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft File: jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json) Hash identifier: 1tL19aA1+/yTbl3Q/lTAD6nRz1DfOOuWCGwo/7ssfGE= Subject key identifier: DF:E9:04:20:DD:FE:4E:94:C6:EC:65:EC:61:3A:81:2E:B2:09:5F:5E Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Certificate serial: 3404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft Manifest number: 33E7 Signing time: Tue 28 May 2024 15:32:31 +0000 Manifest this update: Tue 28 May 2024 15:32:31 +0000 Manifest next update: Tue 04 Jun 2024 15:32:31 +0000 Files and hashes: 1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: 5aoXM5eIBrADNWTeHuMdaMeEtM7mB1J0oQOfOaEwv+Y=) 2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 4wUvtaULYPuKbTljMkobM/yg8tzZzA7WYIANpp5xNk8=) 3: 9554034062CB11EEA41B6D2EC4F9AE02.roa (hash: qHzKeQu0CeIpw5WUN0ykmHCi3DMHGAmWzohdpPXKxzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 15:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13316 (0x3404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Validity Not Before: May 28 15:32:31 2024 GMT Not After : Jun 4 15:32:31 2024 GMT Subject: CN=6655f90f-1030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:6d:64:d2:3c:7c:b2:a8:19:30:e0:91:98: cf:17:36:57:a3:f0:4b:6d:63:da:af:23:e5:9c:39: ea:0f:2f:fc:f6:fd:7d:9b:f0:36:0c:dd:a0:29:6c: 4b:be:be:cf:32:26:17:c1:b0:30:2b:67:cc:02:eb: 22:17:6e:d1:f3:de:8a:a1:0a:07:ff:fb:e3:d7:d4: b1:da:df:e9:62:65:c8:9a:4e:e3:26:ae:e7:6f:25: bc:3d:9a:18:f2:28:eb:c7:cf:a5:bc:ca:b6:5a:31: 9e:70:96:60:3c:07:2e:84:17:b1:1a:67:27:dd:b3: bb:78:dd:ec:fc:b9:d9:e7:98:bf:c5:92:0f:38:47: 3e:cb:e6:78:2a:73:05:a3:f9:f8:2f:3a:57:fb:91: 88:75:5d:dd:db:5c:18:81:3a:f0:6b:42:6f:04:86: 41:0f:5d:63:44:d4:a3:a5:ab:cf:00:10:5e:21:4f: d6:d9:51:2f:2f:5e:bb:d5:0e:1c:f6:d7:01:d6:87: 10:57:24:24:10:42:a5:8b:c0:7e:b6:d8:62:94:ae: e8:92:45:2d:b3:76:37:64:ac:c1:61:a5:92:b7:88: fe:15:58:42:0c:fd:67:83:d4:15:f7:fd:0b:df:a4: a8:b7:92:19:b1:9a:f4:62:1f:90:83:68:f1:42:61: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:04:20:DD:FE:4E:94:C6:EC:65:EC:61:3A:81:2E:B2:09:5F:5E X509v3 Authority Key Identifier: keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:0d:68:81:9d:74:ba:dd:81:31:58:e1:be:13:b6:1b:50: 0f:8a:6c:1a:ca:87:31:97:dd:0e:56:c4:12:66:92:2d:ec:ec: 56:21:76:74:02:a3:85:41:0d:cf:20:2c:66:f5:2c:39:c5:81: 9a:bd:a8:c6:9a:d9:24:53:18:82:23:e5:47:31:d0:30:f2:1a: b3:52:e6:79:8b:c5:49:4f:2f:17:1c:90:96:c6:24:3e:ce:58: 45:e5:05:90:a4:0b:27:2f:97:34:71:1e:5d:c7:af:a5:b8:5f: 10:20:f4:c9:2e:9c:4a:31:f9:6e:62:ef:35:8b:6d:8a:7d:61: d5:bb:62:7e:02:6d:f0:52:36:8c:3e:f4:96:8d:d9:23:0e:fc: 09:74:f6:8e:b9:f3:e9:95:80:22:ab:98:b1:8d:6b:93:bf:7f: 47:40:5a:06:37:4c:a6:13:6b:ec:cc:a6:5a:95:15:74:a7:31: a8:f9:66:88:96:32:b2:51:bd:81:2e:cb:0b:8c:11:f6:b0:85: 8c:1c:2c:6c:55:5a:65:0c:90:02:30:5b:4b:39:09:7e:23:e1: a8:3d:6a:54:7a:d4:19:45:e6:98:0b:e3:1f:38:71:93:9f:b3: d0:31:b9:82:da:a5:a6:a5:23:c0:12:e9:d8:41:8c:c0:c1:cc: 7a:5d:d2:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG NTVFNjAzNUYwHhcNMjQwNTI4MTUzMjMxWhcNMjQwNjA0MTUzMjMxWjAYMRYwFAYD VQQDEw02NjU1ZjkwZi0xMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSttZNI8fLKoGTDgkZjPFzZXo/BLbWParyPlnDnqDy/89v19m/A2DN2gKWxL vr7PMiYXwbAwK2fMAusiF27R896KoQoH//vj19Sx2t/pYmXImk7jJq7nbyW8PZoY 8ijrx8+lvMq2WjGecJZgPAcuhBexGmcn3bO7eN3s/LnZ55i/xZIPOEc+y+Z4KnMF o/n4LzpX+5GIdV3d21wYgTrwa0JvBIZBD11jRNSjpavPABBeIU/W2VEvL1671Q4c 9tcB1ocQVyQkEEKli8B+tthilK7okkUts3Y3ZKzBYaWSt4j+FVhCDP1ng9QV9/0L 36Sot5IZsZr0Yh+Qg2jxQmEyXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/pBCDd /k6Uxuxl7GE6gS6yCV9eMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk eTB1d2FGaDVlWm4xWG1BMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrQ1ogZ10ut2BMVjhvhO2G1APimwayocxl90OVsQSZpIt7OxWIXZ0 AqOFQQ3PICxm9Sw5xYGavajGmtkkUxiCI+VHMdAw8hqzUuZ5i8VJTy8XHJCWxiQ+ zlhF5QWQpAsnL5c0cR5dx6+luF8QIPTJLpxKMfluYu81i22KfWHVu2J+Am3wUjaM PvSWjdkjDvwJdPaOufPplYAiq5ixjWuTv39HQFoGN0ymE2vszKZalRV0pzGo+WaI ljKyUb2BLssLjBH2sIWMHCxsVVplDJACMFtLOQl+I+GoPWpUetQZReaYC+MfOHGT n7PQMbmC2qWmpSPAEunYQYzAwcx6XdJu -----END CERTIFICATE-----Generated at Tue May 28 17:50:52 2024 by rpki-client on console-fra.rpki-client.org