$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: hXVuqAWZDjz6Su+ZmeHiQPuS7+n/vK4TB06HB9eK73k= Subject key identifier: 5E:34:1E:36:8D:87:FE:72:03:E4:C8:79:93:5C:D3:EF:AA:70:48:1C Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0B61 Signing time: Mon 06 May 2024 19:43:44 +0000 Manifest this update: Mon 06 May 2024 19:43:44 +0000 Manifest next update: Mon 13 May 2024 19:43:44 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: 7NLpeRVOM6fBR+f7DpTth1jvIIiHY1XLzbWN2RmDuZY=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: May 6 19:43:44 2024 GMT Not After : May 13 19:43:44 2024 GMT Subject: CN=663932f0-d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:61:2f:fd:4d:e2:77:a6:58:43:58:d8:8b: a5:93:e9:87:b6:80:ab:99:ee:45:bd:8a:f5:18:fc: 82:b3:37:49:25:9c:78:68:42:aa:2f:e3:a2:d4:f1: 20:9c:99:19:59:15:ab:78:2c:91:9e:ea:ca:1c:8c: 81:e5:d3:05:e4:9d:fe:69:d4:56:89:7e:60:8b:98: aa:3f:4d:a9:2f:fb:39:08:e2:b1:c6:ab:d9:ca:e4: 56:9c:7d:f6:26:85:5b:e2:5e:b1:d1:55:b1:1d:88: d1:a0:ac:e8:d1:6c:e9:5c:b6:0d:08:b0:3e:63:0a: a9:04:79:76:65:a4:70:5f:c6:3f:e2:34:3f:ce:04: 44:70:99:40:32:40:04:86:5e:cb:ff:2d:9e:19:94: 61:46:d5:a7:c3:a5:81:61:00:37:20:3b:32:83:df: a0:76:e2:7f:99:0e:4c:93:39:5f:dc:3b:cc:90:51: 3e:6b:37:a9:36:0c:7e:c5:7f:bb:c8:a6:4f:83:4e: 28:75:3e:4f:b6:95:2c:62:e7:47:88:de:9d:d2:0b: 25:1e:85:fd:04:7c:36:1e:07:49:f5:3a:91:fb:0c: bb:ba:cd:e7:bc:fc:b0:77:84:30:38:c1:99:47:9a: 5b:24:b6:d6:fc:8f:2d:dd:a5:83:d1:9d:9f:13:84: 3b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:34:1E:36:8D:87:FE:72:03:E4:C8:79:93:5C:D3:EF:AA:70:48:1C X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:ef:29:5f:4a:a3:13:64:8b:7b:56:17:3c:7a:cc:98:d5:1f: 31:5c:66:6a:ba:47:9a:4e:90:e3:6b:83:e2:38:29:0f:bb:f6: 9e:39:60:dd:77:dc:53:a4:74:d7:db:ff:40:de:41:08:09:c8: 4c:53:fb:87:a8:81:c7:13:85:a6:c4:48:ae:c7:2c:32:24:7e: 6b:50:cc:60:e8:bf:0e:fb:d6:d6:73:f9:0b:c1:5c:64:ca:ca: 70:bc:4a:d2:8a:50:89:e6:05:72:ad:fb:34:03:f5:d0:78:2c: 4c:8f:f5:1c:91:75:e6:a4:a6:f4:8e:10:9e:4a:56:68:f6:47: d5:0d:be:cb:27:3e:36:c0:45:f7:58:ef:7b:c4:e0:db:95:f2: cc:d4:e5:d9:86:b1:ca:3c:fa:04:93:9a:c3:24:ee:74:f9:27: ba:33:3a:5c:34:01:7d:77:20:57:8d:a1:46:96:0d:cf:81:d9: df:3a:93:c4:f5:af:d7:b1:46:71:fd:d0:d9:2c:a0:66:d0:e5: 62:2a:34:95:36:2b:d8:29:46:f4:f7:f0:0c:2c:80:97:f1:0a: a3:e2:34:ce:66:1b:f1:7d:a4:91:96:4e:85:7b:1a:d9:21:6e: 8a:aa:93:19:8d:b6:28:9e:7e:71:d0:70:d3:3f:10:88:cc:45: fe:b6:06:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjQwNTA2MTk0MzQ0WhcNMjQwNTEzMTk0MzQ0WjAYMRYwFAYD VQQDEw02NjM5MzJmMC1kNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBNhL/1N4nemWENY2Iulk+mHtoCrme5FvYr1GPyCszdJJZx4aEKqL+Oi1PEg nJkZWRWreCyRnurKHIyB5dMF5J3+adRWiX5gi5iqP02pL/s5COKxxqvZyuRWnH32 JoVb4l6x0VWxHYjRoKzo0WzpXLYNCLA+YwqpBHl2ZaRwX8Y/4jQ/zgREcJlAMkAE hl7L/y2eGZRhRtWnw6WBYQA3IDsyg9+gduJ/mQ5Mkzlf3DvMkFE+azepNgx+xX+7 yKZPg04odT5PtpUsYudHiN6d0gslHoX9BHw2HgdJ9TqR+wy7us3nvPywd4QwOMGZ R5pbJLbW/I8t3aWD0Z2fE4Q7IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF40HjaN h/5yA+TIeZNc0++qcEgcMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ7ylfSqMTZIt7Vhc8esyY1R8xXGZqukeaTpDja4PiOCkPu/aeOWDd d9xTpHTX2/9A3kEICchMU/uHqIHHE4WmxEiuxywyJH5rUMxg6L8O+9bWc/kLwVxk yspwvErSilCJ5gVyrfs0A/XQeCxMj/UckXXmpKb0jhCeSlZo9kfVDb7LJz42wEX3 WO97xODblfLM1OXZhrHKPPoEk5rDJO50+Se6MzpcNAF9dyBXjaFGlg3PgdnfOpPE 9a/XsUZx/dDZLKBm0OViKjSVNivYKUb09/AMLICX8Qqj4jTOZhvxfaSRlk6FexrZ IW6KqpMZjbYonn5x0HDTPxCIzEX+tgYc -----END CERTIFICATE-----Generated at Mon May 6 20:19:08 2024 by rpki-client on console-fra.rpki-client.org