$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft File: jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft (raw, json) Hash identifier: tFBvlhoPAPKpZZzN/J3zGy4qvHPBc8MIdV42jPI/TDU= Subject key identifier: 7F:39:4A:E1:24:76:CE:45:F7:DD:77:BB:31:09:C0:10:66:E3:0D:11 Authority key identifier: 8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 Certificate issuer: /CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Certificate serial: 0DE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft Manifest number: 14BE Signing time: Thu 16 May 2024 18:35:54 +0000 Manifest this update: Thu 16 May 2024 18:35:54 +0000 Manifest next update: Thu 23 May 2024 18:35:54 +0000 Files and hashes: 1: jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl (hash: SM8X9Yt6KnC22pyZxMHNFfu0baseyBDGkDcp+I4HZPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Validity Not Before: May 16 18:35:54 2024 GMT Not After : May 23 18:35:54 2024 GMT Subject: CN=6646520a-cb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:74:5c:8a:85:04:e1:46:fa:49:0b:92:56: e5:8f:e4:d8:b0:29:38:4a:28:da:f2:8a:30:b0:33: f1:b3:96:91:9a:5d:d6:5e:c6:d1:22:b9:9d:92:e9: 0c:bc:68:73:59:2e:94:44:07:26:1f:e4:0f:ed:3a: bf:ef:6a:75:64:1c:85:2a:b5:3a:17:df:fc:68:67: 0b:50:8a:e3:87:be:1d:56:ef:e3:41:e4:42:c7:09: ca:95:ee:00:ca:c9:d3:d9:d5:b0:d1:8d:20:09:d2: 44:d5:95:74:c4:fd:fd:5a:5e:66:7d:08:37:c9:9d: c0:07:05:64:c4:29:c5:7e:ad:51:07:1a:bb:53:44: af:10:54:f1:7b:f2:ee:47:59:38:a6:b2:d5:60:28: c2:a7:ec:d2:45:ae:ee:e3:67:29:94:1e:4d:f3:41: f3:31:7a:43:fe:14:aa:f6:73:10:a5:a9:b0:51:98: 5f:07:b1:15:fc:5b:42:27:11:10:c5:29:54:dc:7a: 8f:cd:94:5e:b4:f0:b5:86:36:9e:55:8c:75:d6:54: 52:fc:b6:f7:da:a7:51:a0:87:f9:10:09:19:0b:d6: 46:d1:85:ab:77:22:25:c7:e8:d3:f7:a9:67:aa:ed: b5:f4:3f:e5:25:f0:d3:c9:f9:b7:89:36:10:31:45: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:4A:E1:24:76:CE:45:F7:DD:77:BB:31:09:C0:10:66:E3:0D:11 X509v3 Authority Key Identifier: keyid:8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:75:c3:08:36:97:55:e5:a7:ec:15:6b:9d:d6:df:1f:0e:37: ba:e6:53:c2:6d:30:af:0e:72:c7:79:ce:46:18:50:b5:d4:cf: 60:f1:22:69:12:f7:5f:67:2a:1a:e3:78:e4:47:02:c4:e9:8d: b1:41:2e:dc:dc:4d:91:f9:b2:2e:1f:a4:1b:41:3c:fc:db:56: 60:89:77:6e:9d:a7:05:86:d9:98:e0:bd:8a:56:d7:7b:9e:f0: 2e:f7:99:56:95:12:4f:79:01:1b:a3:4e:93:00:fb:b7:3f:a5: 52:dc:2e:ac:90:b2:60:8e:9f:c7:e9:83:c5:21:1c:74:81:d0: 83:bf:86:e0:51:48:0e:2b:2e:cf:29:8b:d3:43:28:e3:18:38: 1d:56:ed:a1:3f:a7:c7:4e:38:d3:80:0a:da:d9:4d:2f:fc:d3: 7c:be:52:44:52:0f:fc:e4:a5:d9:05:d9:17:ad:a6:59:31:9c: 49:21:e8:8e:f9:ff:54:4e:a0:b2:b5:ae:01:59:18:db:1e:60: 17:a4:5a:11:17:ca:a8:84:5c:44:58:07:56:da:59:e4:c3:4a: ce:1f:b5:88:8d:88:56:b1:67:ce:a1:9f:0e:c4:c7:e5:5f:eb: f2:37:32:a4:35:52:27:de:6e:38:bb:bb:9f:17:1a:03:1f:91: 0e:dc:f0:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKDhFMzZCREY4RThCODE4NjVCNDI3ODUzRjdDNkJDNTMy RDBDQTZENDgwHhcNMjQwNTE2MTgzNTU0WhcNMjQwNTIzMTgzNTU0WjAYMRYwFAYD VQQDEw02NjQ2NTIwYS1jYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDV0XIqFBOFG+kkLklblj+TYsCk4Sija8oowsDPxs5aRml3WXsbRIrmdkukM vGhzWS6URAcmH+QP7Tq/72p1ZByFKrU6F9/8aGcLUIrjh74dVu/jQeRCxwnKle4A ysnT2dWw0Y0gCdJE1ZV0xP39Wl5mfQg3yZ3ABwVkxCnFfq1RBxq7U0SvEFTxe/Lu R1k4prLVYCjCp+zSRa7u42cplB5N80HzMXpD/hSq9nMQpamwUZhfB7EV/FtCJxEQ xSlU3HqPzZRetPC1hjaeVYx11lRS/Lb32qdRoIf5EAkZC9ZG0YWrdyIlx+jT96ln qu219D/lJfDTyfm3iTYQMUUmSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH85SuEk ds5F9913uzEJwBBm4w0RMB8GA1UdIwQYMBaAFI42vfjouBhltCeFP3xrxTLQym1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdHVzBKNFVfZkd2Rk10REti VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pqYTktT2k0R0dXMEo0VV9mR3ZGTXRES2JVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdH VzBKNFVfZkd2Rk10REtiVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZdcMINpdV5afsFWud1t8fDje65lPCbTCvDnLHec5GGFC11M9g8SJp EvdfZyoa43jkRwLE6Y2xQS7c3E2R+bIuH6QbQTz821ZgiXdunacFhtmY4L2KVtd7 nvAu95lWlRJPeQEbo06TAPu3P6VS3C6skLJgjp/H6YPFIRx0gdCDv4bgUUgOKy7P KYvTQyjjGDgdVu2hP6fHTjjTgAra2U0v/NN8vlJEUg/85KXZBdkXraZZMZxJIeiO +f9UTqCyta4BWRjbHmAXpFoRF8qohFxEWAdW2lnkw0rOH7WIjYhWsWfOoZ8OxMfl X+vyNzKkNVIn3m44u7ufFxoDH5EO3PDq -----END CERTIFICATE-----Generated at Thu May 16 19:10:55 2024 by rpki-client on console-fra.rpki-client.org