$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: qoIyJbfbfMrDtDTje3ltIWZO1hZe9la5R/AyKlq2Af8= Subject key identifier: A9:25:14:6E:D5:C4:2F:38:CB:98:7F:0D:15:43:30:91:57:6F:3D:D9 Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: E5 Signing time: Wed 01 May 2024 06:15:16 +0000 Manifest this update: Wed 01 May 2024 06:15:16 +0000 Manifest next update: Wed 08 May 2024 06:15:16 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: g8+jfWNFjoghsLgXHoXzEJgMEtW/ZjtuB8qHeCFAVHk=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: LxFKpaBLLiL4XtnZYPCkOU9w/U8/2UUxvuYKcFhpa5w=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: LBfH7RWj7WEPhZ3PqtOEAEDirP2HRxdsl8cOuzTfDFc=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: 49Phf83M/BDNcmAGvej0vL1yUca9YSTCXUbi0nuOASc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: May 1 06:15:16 2024 GMT Not After : May 8 06:15:16 2024 GMT Subject: CN=6631ddf4-2ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:9b:ef:41:f3:75:6b:08:33:27:08:9b:a0: 1a:f2:fa:42:37:83:42:ed:55:bb:bb:23:3e:b6:34: 8c:52:d3:f9:be:b1:f4:9c:48:61:1f:31:7f:6c:23: 32:11:6b:99:a6:e7:fa:b2:ec:21:a9:33:9e:9c:77: 07:f4:7d:c6:38:ce:0c:51:c1:c3:a4:3c:5a:52:68: ad:fe:3a:17:9c:8b:e1:8a:d9:14:f5:8b:60:7f:b2: b5:47:9f:0b:7f:9c:e6:ef:ca:a8:bb:7a:51:18:1f: 17:52:51:af:f8:c9:e9:44:0e:fe:ec:a6:27:d3:2f: 75:a0:8c:5a:c0:22:8a:b7:78:bf:1d:73:63:7b:8e: 89:14:71:1b:01:3e:fa:3a:0b:d7:77:25:85:c6:ce: bf:96:ff:bb:fc:3c:84:30:85:ff:ff:cf:e6:e9:65: 87:d8:18:05:26:89:9f:23:49:f7:7f:09:ee:69:46: 03:c3:86:dc:8b:5d:a5:04:a3:16:66:8f:aa:15:be: 3f:84:f0:bf:cb:cf:8d:a9:03:41:41:fa:1a:21:8e: f2:c9:f0:88:86:36:70:7f:58:7a:1f:e5:43:16:a0: 80:c7:80:a9:ba:83:ab:15:fe:2b:35:3a:f7:84:f9: 27:22:53:48:c0:15:b5:1f:03:59:f4:12:70:41:fd: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:14:6E:D5:C4:2F:38:CB:98:7F:0D:15:43:30:91:57:6F:3D:D9 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:1c:7b:aa:a1:79:30:8f:b4:9c:99:d9:60:0e:68:1c:c0:a8: b6:27:c0:65:1a:e2:d2:60:33:a3:fb:29:04:7d:cb:42:2d:96: f9:3d:b1:85:2c:1e:65:4a:5d:2c:dd:1b:46:31:fa:e6:b3:2c: d4:d5:b8:b4:d9:3f:ca:9c:03:89:f5:45:8a:f1:ad:b4:1e:c9: cb:e4:be:86:41:a9:b9:ec:99:61:27:4c:3d:87:fc:f6:22:35: 75:30:59:6b:0c:52:98:18:cc:5f:37:d0:18:d3:90:ec:e7:0f: a4:c0:3e:db:4f:4c:cb:cb:e6:54:3d:cd:03:e9:d5:56:ed:de: e4:e7:17:3e:cc:60:d2:1f:dc:76:5a:a9:34:bc:8e:c0:bc:41: 3e:a5:42:ed:a4:c7:63:16:14:e1:cc:ad:33:ea:a6:a7:c1:38: 1b:af:eb:73:6f:c2:4b:cd:2c:04:04:c5:cc:ac:db:3a:c0:7b: da:2e:7c:fb:29:79:6d:b3:c2:58:ed:5a:1e:be:ab:bf:a2:92: d5:76:91:1a:1f:e0:c8:1a:7e:b0:94:9f:19:c5:4b:e4:7a:9d: 7f:57:0c:57:a7:17:5d:e4:88:59:14:49:af:81:09:05:3a:20: cc:84:58:53:bb:9a:4f:e5:32:76:6a:f8:36:1f:f6:80:9a:9d: 04:6f:08:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjQwNTAxMDYxNTE2WhcNMjQwNTA4MDYxNTE2WjAYMRYwFAYD VQQDEw02NjMxZGRmNC0yZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/ub70HzdWsIMycIm6Aa8vpCN4NC7VW7uyM+tjSMUtP5vrH0nEhhHzF/bCMy EWuZpuf6suwhqTOenHcH9H3GOM4MUcHDpDxaUmit/joXnIvhitkU9Ytgf7K1R58L f5zm78qou3pRGB8XUlGv+MnpRA7+7KYn0y91oIxawCKKt3i/HXNje46JFHEbAT76 OgvXdyWFxs6/lv+7/DyEMIX//8/m6WWH2BgFJomfI0n3fwnuaUYDw4bci12lBKMW Zo+qFb4/hPC/y8+NqQNBQfoaIY7yyfCIhjZwf1h6H+VDFqCAx4CpuoOrFf4rNTr3 hPknIlNIwBW1HwNZ9BJwQf3sawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKklFG7V xC84y5h/DRVDMJFXbz3ZMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnHHuqoXkwj7ScmdlgDmgcwKi2J8BlGuLSYDOj+ykEfctCLZb5PbGF LB5lSl0s3RtGMfrmsyzU1bi02T/KnAOJ9UWK8a20HsnL5L6GQam57JlhJ0w9h/z2 IjV1MFlrDFKYGMxfN9AY05Ds5w+kwD7bT0zLy+ZUPc0D6dVW7d7k5xc+zGDSH9x2 Wqk0vI7AvEE+pULtpMdjFhThzK0z6qanwTgbr+tzb8JLzSwEBMXMrNs6wHvaLnz7 KXlts8JY7Voevqu/opLVdpEaH+DIGn6wlJ8ZxUvkep1/VwxXpxdd5IhZFEmvgQkF OiDMhFhTu5pP5TJ2avg2H/aAmp0Ebwi4 -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org