$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: X5Ts1gssBOSSfsddYqqeuHPrtzWSd/V2zkDmaULe3PE= Subject key identifier: 50:6D:73:6C:CE:B0:CD:D8:B6:6B:A3:2D:1C:C7:7D:7E:C8:D4:A1:90 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 7B Signing time: Fri 17 May 2024 07:32:09 +0000 Manifest this update: Fri 17 May 2024 07:32:09 +0000 Manifest next update: Fri 24 May 2024 07:32:09 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: fBu2z1GRU8UZ5iB6hgX/0RcaTr2lra3K+2r93LKT444=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: 8PpMQcwgyZDensMES5SphGUs7cJ+1Igr/jYNKPqOVGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: May 17 07:32:09 2024 GMT Not After : May 24 07:32:09 2024 GMT Subject: CN=664707f9-9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:2e:39:41:3d:7a:f2:89:e0:7d:21:c6:bb: c6:13:0c:25:74:9a:f6:0b:f9:77:08:19:d1:5e:26: 1d:76:50:8f:bc:97:5f:d7:b7:bc:b4:3b:74:70:2e: b5:40:c2:2d:07:b4:a7:62:8d:6e:96:42:08:cf:fe: e0:6d:a3:92:5f:86:ab:d4:6f:fb:d2:bb:57:98:b8: 7c:80:23:a0:02:72:b7:1b:2e:2f:11:6a:52:ba:42: 11:0e:66:8f:98:8a:18:57:c0:c6:77:ed:98:41:3d: 00:0c:1c:fd:1e:93:28:d9:7b:7a:18:4b:1a:1d:52: f4:88:4f:22:f4:42:43:4e:97:95:40:13:f4:c7:84: 26:74:ff:27:22:33:e0:e9:20:e0:fe:4c:b1:b3:90: 2a:ae:c4:ca:bd:63:ed:82:2a:e7:37:38:b9:a3:47: 97:c5:a5:89:d2:a1:86:32:14:ff:3d:1c:b1:83:38: 40:b7:17:f5:02:45:31:a6:52:d1:c3:1e:c3:68:73: 91:d4:cb:13:7e:52:79:d8:04:70:57:ca:da:a5:4c: 2a:d1:b8:49:42:60:90:40:b7:94:bb:7f:d8:80:3f: 7d:e9:df:ca:6f:f9:cd:aa:72:0a:94:64:55:c4:8a: 48:d3:b1:3a:94:87:a6:da:cd:4b:d4:12:e6:cf:6c: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:73:6C:CE:B0:CD:D8:B6:6B:A3:2D:1C:C7:7D:7E:C8:D4:A1:90 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:44:e7:9b:39:96:ce:b5:7c:2c:66:24:14:97:d8:bd:f8:19: 1b:ed:86:b9:67:0a:9d:19:26:b4:bb:af:e1:b2:97:37:0c:3e: 53:e5:22:50:f5:e8:89:d5:1e:ae:be:15:00:5d:fe:96:45:8f: 1a:cf:20:3b:34:62:05:16:65:07:98:46:ae:96:f4:a4:f3:3c: ed:79:8b:9f:1f:ab:74:61:05:12:fd:52:1b:52:d0:0c:0d:03: ad:6f:ce:67:e5:10:84:cc:8f:1f:2c:29:49:cb:79:5a:ad:04: 9e:1f:a4:62:17:a2:af:43:b0:7f:88:91:8e:39:84:9d:a6:70: 17:8c:a5:60:3a:93:47:f0:dd:58:1f:4f:5b:21:ae:46:4e:71: de:c5:b5:85:07:37:6e:61:1e:74:e8:62:1a:f0:ac:f1:db:a4: 4f:0a:e1:60:66:5e:a7:09:d5:84:c8:f1:6e:8b:46:1f:22:65: e6:ff:a4:cf:8a:80:1b:89:79:90:42:10:3b:56:71:b6:44:de: 0c:18:88:98:68:a6:70:22:3a:3a:0d:1d:a1:32:0e:7d:6a:22: a4:35:e4:9f:94:ea:69:aa:fc:58:bc:9f:99:51:43:3b:54:bd: 19:53:c4:1b:d8:25:26:25:f5:77:fd:43:f0:c5:c3:96:00:e7: 4f:7c:6d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjQwNTE3MDczMjA5WhcNMjQwNTI0MDczMjA5WjAYMRYwFAYD VQQDEw02NjQ3MDdmOS05YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ8uOUE9evKJ4H0hxrvGEwwldJr2C/l3CBnRXiYddlCPvJdf17e8tDt0cC61 QMItB7SnYo1ulkIIz/7gbaOSX4ar1G/70rtXmLh8gCOgAnK3Gy4vEWpSukIRDmaP mIoYV8DGd+2YQT0ADBz9HpMo2Xt6GEsaHVL0iE8i9EJDTpeVQBP0x4QmdP8nIjPg 6SDg/kyxs5AqrsTKvWPtgirnNzi5o0eXxaWJ0qGGMhT/PRyxgzhAtxf1AkUxplLR wx7DaHOR1MsTflJ52ARwV8rapUwq0bhJQmCQQLeUu3/YgD996d/Kb/nNqnIKlGRV xIpI07E6lIem2s1L1BLmz2ykSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBtc2zO sM3YtmujLRzHfX7I1KGQMB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRROebOZbOtXwsZiQUl9i9+Bkb7Ya5ZwqdGSa0u6/hspc3DD5T5SJQ 9eiJ1R6uvhUAXf6WRY8azyA7NGIFFmUHmEaulvSk8zzteYufH6t0YQUS/VIbUtAM DQOtb85n5RCEzI8fLClJy3larQSeH6RiF6KvQ7B/iJGOOYSdpnAXjKVgOpNH8N1Y H09bIa5GTnHexbWFBzduYR506GIa8Kzx26RPCuFgZl6nCdWEyPFui0YfImXm/6TP ioAbiXmQQhA7VnG2RN4MGIiYaKZwIjo6DR2hMg59aiKkNeSflOppqvxYvJ+ZUUM7 VL0ZU8Qb2CUmJfV3/UPwxcOWAOdPfG0S -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org