$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: bVRnvDE7+pM3XEum9i8TR9JSu/ihz7LtT3JK/g16lVc= Subject key identifier: EA:30:DB:82:D9:BC:42:27:4B:DF:BE:25:05:94:AE:C3:57:2E:99:3B Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 03E8 Signing time: Tue 07 May 2024 02:15:02 +0000 Manifest this update: Tue 07 May 2024 02:15:01 +0000 Manifest next update: Tue 14 May 2024 02:15:01 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 10esvpUMJ0dr/NITRgXXDnTTf7lug+D3VYCXJKYOzFA=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: Rxz3YNja8eJhNPjW7naf/EqV61xDq0txB+95xdVztFs=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: fMF5RUo699+Rmx6D/LupKJOUzI9JpaFtoJ9Xd1uISe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: May 7 02:15:01 2024 GMT Not After : May 14 02:15:01 2024 GMT Subject: CN=66398ea5-a90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:f5:46:11:88:55:17:ba:13:7a:ec:d1:a8: c6:ff:28:37:7a:42:68:58:54:3b:90:87:5a:f1:4c: 7b:c4:25:17:dd:cf:fc:d8:0c:95:e0:5e:ca:39:9b: f5:9a:48:3c:8d:2b:c3:4c:b5:d6:63:67:e8:bd:26: aa:e2:dd:9d:45:47:dc:9d:57:c9:d9:66:2a:6c:c7: 3e:62:28:4a:b6:c7:dc:00:4b:da:12:44:41:80:bc: e6:13:14:0d:3e:a0:83:99:40:73:7b:5e:99:f9:94: 9d:48:bb:c7:c1:1e:5a:f5:72:34:11:5f:87:90:3d: 22:bc:bb:e1:a4:3b:21:cd:98:4b:f5:bd:34:6d:26: 27:13:89:d6:39:7f:48:f7:2c:c4:b7:b8:f9:d4:ad: c5:e9:75:33:99:c1:3d:af:f4:74:d3:ad:e0:e2:e4: b3:5d:ec:f8:23:36:e7:44:5d:d9:86:8f:60:48:d5: e5:b1:c7:32:e7:63:c6:9c:27:36:f3:42:70:ce:56: 6d:12:71:fc:b3:03:68:6c:ef:73:93:b2:3e:61:10: 83:ed:82:03:8c:1f:c9:bb:f7:b8:9a:b9:74:e2:db: ef:b9:8a:29:0e:c4:70:c9:79:dd:d9:95:ef:c9:75: ce:a2:d3:b0:89:f7:d3:9a:b0:4e:c9:35:64:06:d4: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:30:DB:82:D9:BC:42:27:4B:DF:BE:25:05:94:AE:C3:57:2E:99:3B X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:51:35:f6:f5:08:27:b7:6c:f6:ea:53:45:29:f8:a6:da:83: e6:7d:1b:2b:db:cd:72:0a:69:b6:05:41:2d:d0:9a:8f:eb:b5: 83:57:74:09:04:61:19:03:7a:39:47:58:87:8f:25:f1:56:60: 21:11:d1:a5:79:8a:50:10:7e:e2:68:1b:9e:05:f5:36:4f:c9: 2c:87:21:0f:5f:b2:e8:34:19:70:6b:e7:d6:07:0d:7b:73:c8: c0:af:75:1e:e8:64:a2:4a:aa:1e:47:95:f5:e7:de:b7:db:a6: 4b:4b:d6:0b:52:b7:50:d4:73:fe:08:db:ab:cb:0d:07:a6:03: f9:dc:c2:d7:18:e3:8d:fc:96:d6:a0:95:f5:cd:c8:ab:28:aa: 94:6c:0c:44:84:b3:bf:d0:e9:b8:e3:59:11:4e:f2:2f:82:10: 09:2f:12:d5:4d:20:21:ce:28:29:c3:57:5a:12:7b:a6:e4:88: 8a:99:81:95:b0:b9:99:4a:6e:54:91:fa:3b:05:93:56:d7:c6: 63:3a:0e:a0:62:13:0b:d4:f1:30:fb:a2:46:18:21:7f:ec:33: 21:1b:69:d9:7c:6d:7c:0e:b7:d7:97:d7:2e:f8:8f:d2:85:03: 9e:48:d9:26:40:51:c2:b9:72:d1:88:4b:41:33:1c:95:c7:a3: de:e9:c9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjQwNTA3MDIxNTAxWhcNMjQwNTE0MDIxNTAxWjAYMRYwFAYD VQQDEw02NjM5OGVhNS1hOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CX1RhGIVRe6E3rs0ajG/yg3ekJoWFQ7kIda8Ux7xCUX3c/82AyV4F7KOZv1 mkg8jSvDTLXWY2fovSaq4t2dRUfcnVfJ2WYqbMc+YihKtsfcAEvaEkRBgLzmExQN PqCDmUBze16Z+ZSdSLvHwR5a9XI0EV+HkD0ivLvhpDshzZhL9b00bSYnE4nWOX9I 9yzEt7j51K3F6XUzmcE9r/R0063g4uSzXez4IzbnRF3Zho9gSNXlsccy52PGnCc2 80JwzlZtEnH8swNobO9zk7I+YRCD7YIDjB/Ju/e4mrl04tvvuYopDsRwyXnd2ZXv yXXOotOwiffTmrBOyTVkBtRSoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOow24LZ vEInS9++JQWUrsNXLpk7MB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyUTX29Qgnt2z26lNFKfim2oPmfRsr281yCmm2BUEt0JqP67WDV3QJ BGEZA3o5R1iHjyXxVmAhEdGleYpQEH7iaBueBfU2T8kshyEPX7LoNBlwa+fWBw17 c8jAr3Ue6GSiSqoeR5X1596326ZLS9YLUrdQ1HP+CNuryw0HpgP53MLXGOON/JbW oJX1zcirKKqUbAxEhLO/0Om441kRTvIvghAJLxLVTSAhzigpw1daEnum5IiKmYGV sLmZSm5Ukfo7BZNW18ZjOg6gYhML1PEw+6JGGCF/7DMhG2nZfG18DrfXl9cu+I/S hQOeSNkmQFHCuXLRiEtBMxyVx6Pe6cle -----END CERTIFICATE-----Generated at Tue May 7 03:12:18 2024 by rpki-client on console-fra.rpki-client.org