$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: nV0t/H/3RXUT1oAVV1gzEahooYWpBCFLaEb61B+irXg= Subject key identifier: 11:F4:87:43:39:E1:BA:09:79:95:50:23:9B:B1:4E:F2:11:85:6E:A8 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0A48 Signing time: Sun 02 Jun 2024 20:46:07 +0000 Manifest this update: Sun 02 Jun 2024 20:46:07 +0000 Manifest next update: Sun 09 Jun 2024 20:46:07 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: ehnbE2d+wWL8Kek8aaI1tjNsZ3Xl3TMs31GBeUdcOf0=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: J1wCr3pN1RsjONx2dcBw5yx7cNEc3c4459YNy9NAPiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 20:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: Jun 2 20:46:07 2024 GMT Not After : Jun 9 20:46:07 2024 GMT Subject: CN=665cda0f-88f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:d3:cb:c5:43:a9:b7:19:22:e6:c3:38:48: 0e:36:b5:bc:bb:9e:a1:fa:a0:d8:3f:31:25:c8:30: 80:9f:8e:97:29:93:de:ff:51:81:1a:a2:d6:d1:b4: 37:83:fb:e9:4c:0f:d5:27:ce:a9:97:ad:6f:7d:d1: 1d:67:34:0e:57:98:65:30:df:a7:68:7b:c2:0f:3b: 32:c6:ac:d4:34:b0:1c:72:54:e8:7a:62:7c:59:91: 82:6a:1d:30:0f:07:77:bd:fe:f6:a4:d3:63:f0:b8: bd:1a:77:5e:e4:ef:cf:85:25:e6:9a:50:f0:98:ef: 88:19:b9:c9:75:a8:58:a3:87:6c:87:1a:ce:3c:d3: d1:cf:30:54:5c:2b:fc:cd:b0:79:0d:b0:c8:6f:3d: 4e:6c:2c:74:3c:b0:80:ac:52:16:ae:b0:01:52:44: cc:89:95:c8:c4:84:db:4e:e4:8f:b8:a5:0b:53:5e: 2d:f2:09:66:18:a4:79:ad:9e:f2:67:1a:c2:c1:f0: da:36:9e:67:7a:2f:a4:bb:0f:2d:34:ee:c8:8c:71: f2:c6:7e:ef:eb:bf:e5:e2:97:47:b6:6a:92:92:7c: 0e:4e:58:54:bf:ce:7a:47:16:57:c6:fe:a1:eb:61: fc:1d:bc:87:97:0e:b9:95:b4:a1:99:ea:29:ab:2e: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:87:43:39:E1:BA:09:79:95:50:23:9B:B1:4E:F2:11:85:6E:A8 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:b1:1b:98:dc:d7:01:a9:f6:c1:4c:5f:b7:83:03:21:36:5d: 99:eb:96:30:31:d0:fd:b2:49:81:f9:a3:b9:f7:57:ab:75:ce: 09:0f:8c:04:0c:5e:ad:86:17:bd:af:db:07:fa:2a:9a:89:ca: 1e:f0:fb:6b:c4:2f:1b:88:26:8b:39:fd:2e:62:d8:7b:81:da: bf:be:0d:fa:02:85:9b:3c:37:17:b2:f6:83:50:50:c4:57:6f: 6a:83:9a:7e:18:7a:ac:d3:f3:60:38:41:01:fb:c5:29:39:6e: 2e:b1:f2:3f:d5:d9:5d:71:10:a2:3b:c1:a5:48:4d:72:30:08: e5:0b:65:72:48:f5:8d:c0:49:38:56:52:92:57:fc:07:b4:16: 09:5b:c1:f8:7c:0e:db:84:d0:de:43:bc:f4:ef:be:81:f9:42: 86:50:78:c7:4a:0a:30:ca:a3:d0:f4:ff:c6:34:cd:47:2f:53: 04:01:93:87:7b:1c:c9:88:02:cc:06:95:98:c9:46:7b:08:a8: 13:28:64:b5:1a:c4:9f:2d:ab:c3:78:fc:a9:40:40:23:32:04: 70:01:aa:46:7f:79:48:62:b3:01:ef:68:5e:94:e8:7a:fc:10: 1b:34:04:10:ce:e4:5f:51:9c:3b:f0:b1:3f:8d:4e:76:15:0c: 8e:c3:ad:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjQwNjAyMjA0NjA3WhcNMjQwNjA5MjA0NjA3WjAYMRYwFAYD VQQDEw02NjVjZGEwZi04OGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv7Ty8VDqbcZIubDOEgONrW8u56h+qDYPzElyDCAn46XKZPe/1GBGqLW0bQ3 g/vpTA/VJ86pl61vfdEdZzQOV5hlMN+naHvCDzsyxqzUNLAcclToemJ8WZGCah0w Dwd3vf72pNNj8Li9Gnde5O/PhSXmmlDwmO+IGbnJdahYo4dshxrOPNPRzzBUXCv8 zbB5DbDIbz1ObCx0PLCArFIWrrABUkTMiZXIxITbTuSPuKULU14t8glmGKR5rZ7y ZxrCwfDaNp5nei+kuw8tNO7IjHHyxn7v67/l4pdHtmqSknwOTlhUv856RxZXxv6h 62H8HbyHlw65lbShmeopqy57XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH0h0M5 4boJeZVQI5uxTvIRhW6oMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwsRuY3NcBqfbBTF+3gwMhNl2Z65YwMdD9skmB+aO591erdc4JD4wE DF6thhe9r9sH+iqaicoe8PtrxC8biCaLOf0uYth7gdq/vg36AoWbPDcXsvaDUFDE V29qg5p+GHqs0/NgOEEB+8UpOW4usfI/1dldcRCiO8GlSE1yMAjlC2VySPWNwEk4 VlKSV/wHtBYJW8H4fA7bhNDeQ7z0776B+UKGUHjHSgowyqPQ9P/GNM1HL1MEAZOH exzJiALMBpWYyUZ7CKgTKGS1GsSfLavDePypQEAjMgRwAapGf3lIYrMB72helOh6 /BAbNAQQzuRfUZw78LE/jU52FQyOw603 -----END CERTIFICATE-----Generated at Sun Jun 2 21:40:10 2024 by rpki-client on console-fra.rpki-client.org