$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft File: JWZWaoTF3OdvO385CN5_MrhnZwc.mft (raw, json) Hash identifier: nciOSb7oVrnA92I0D/UGrB8LOTLMdWDR8yuokIpOm/g= Subject key identifier: 7D:43:10:64:F9:FB:57:5A:85:34:99:19:4E:76:0C:1D:C3:C6:80:F0 Authority key identifier: 25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 Certificate issuer: /CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft Manifest number: 01AF Signing time: Fri 03 May 2024 04:38:49 +0000 Manifest this update: Fri 03 May 2024 04:38:49 +0000 Manifest next update: Fri 10 May 2024 04:38:49 +0000 Files and hashes: 1: JWZWaoTF3OdvO385CN5_MrhnZwc.crl (hash: hGu1PJuhGJVJ536RNvVOgteaTJbulw2ZpUe3n56MgXM=) 2: 282282B60D3011ED8DC4D26BC4F9AE02.roa (hash: 4clEgqFiQcFhhVn8RtWoRMGuL2CUr/0AykbxtMSuzDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF37/serialNumber=2566566A84C5DCE76F3B7F3908DE7F32B8676707 Validity Not Before: May 3 04:38:49 2024 GMT Not After : May 10 04:38:49 2024 GMT Subject: CN=66346a59-a509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:cf:e4:94:20:4b:90:ba:68:b2:00:c7:4c: dd:83:60:e2:c2:da:1d:33:37:46:75:6e:4b:80:36: 52:2f:ba:9e:a0:4e:51:9d:e1:26:45:ea:dc:b5:05: a8:0f:7d:b2:0f:eb:46:45:9a:07:6d:26:ae:dd:17: 59:70:c6:13:3d:f8:9b:07:45:1c:28:bc:ee:66:5b: 68:b7:95:4e:af:1e:44:b2:a6:50:26:3e:a2:d5:2b: 8c:fe:ba:cd:f2:5b:a9:6d:aa:0c:ed:82:ad:ec:28: f8:7d:57:a3:c6:78:6e:3c:76:fc:b5:3a:dd:65:58: 58:70:5d:f7:de:8b:e2:55:d6:f5:fb:ff:67:ff:d9: 24:f0:1f:11:8c:ce:1c:3c:14:2b:44:dc:b8:a1:97: 2e:c7:08:3b:8f:7b:7a:b0:85:f3:aa:b4:1c:8a:5b: d6:5e:a7:db:68:ce:03:af:e5:dd:e9:ca:96:65:24: f3:50:26:35:f8:3e:3c:30:68:77:61:1a:e1:de:b2: 36:15:1c:8e:9f:95:a2:97:f1:35:ce:7b:5e:97:2b: 62:15:ab:90:1e:87:18:b5:c8:c1:91:cc:98:10:0e: 6b:5f:1a:57:c1:ea:5d:90:e3:31:59:60:a0:99:19: 82:e8:5f:98:65:17:98:5c:5b:21:ae:5b:18:ae:fe: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:10:64:F9:FB:57:5A:85:34:99:19:4E:76:0C:1D:C3:C6:80:F0 X509v3 Authority Key Identifier: keyid:25:66:56:6A:84:C5:DC:E7:6F:3B:7F:39:08:DE:7F:32:B8:67:67:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWZWaoTF3OdvO385CN5_MrhnZwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF37/C8CC5AB40D2D11EDB2C9BB69C4F9AE02/JWZWaoTF3OdvO385CN5_MrhnZwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:b0:88:d6:fb:8f:b9:cc:f4:a1:3f:bd:14:38:7f:38:d0: 91:55:cc:0f:bb:e5:21:d2:8c:95:c8:f6:49:dc:6f:27:3d:81: fc:be:5d:6d:7f:e5:3c:75:39:9d:52:66:19:91:41:38:b3:54: 59:78:21:70:be:86:50:6d:a8:80:a1:9b:77:a0:60:9d:95:8c: 6e:dd:dc:47:98:bc:93:bb:fe:d1:b4:f7:65:c8:b7:10:d1:d5: c4:f0:da:65:00:c6:0c:b0:7f:b3:0d:77:6a:21:33:b0:ea:1d: ef:b4:ef:3b:97:58:b1:b6:3b:ce:20:ce:0a:9a:62:00:91:92: e4:07:b7:d4:f1:bb:fc:07:53:15:2a:41:3e:c0:5c:38:21:ad: 01:8e:7c:17:16:fa:b9:37:6c:e2:88:c5:c4:82:72:99:92:fb: ce:1b:f5:d4:e0:b3:33:8d:85:b4:4c:8d:2b:ec:51:54:cf:df: 7d:76:e5:4f:86:f2:b2:23:cc:20:75:8b:b5:ce:f1:ee:3a:f4: df:2d:90:ea:0f:97:4f:a2:52:60:82:03:9e:f6:94:28:bb:7e: 69:9a:72:8e:8f:0a:95:c9:b1:19:22:b9:44:34:a9:91:40:3a: 0a:50:23:93:75:16:c1:c2:9a:c7:9f:d4:8f:89:75:e7:9b:89: 8b:53:92:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMzcxMTAvBgNVBAUTKDI1NjY1NjZBODRDNURDRTc2RjNCN0YzOTA4REU3RjMy Qjg2NzY3MDcwHhcNMjQwNTAzMDQzODQ5WhcNMjQwNTEwMDQzODQ5WjAYMRYwFAYD VQQDEw02NjM0NmE1OS1hNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbXP5JQgS5C6aLIAx0zdg2DiwtodMzdGdW5LgDZSL7qeoE5RneEmRerctQWo D32yD+tGRZoHbSau3RdZcMYTPfibB0UcKLzuZltot5VOrx5EsqZQJj6i1SuM/rrN 8lupbaoM7YKt7Cj4fVejxnhuPHb8tTrdZVhYcF333oviVdb1+/9n/9kk8B8RjM4c PBQrRNy4oZcuxwg7j3t6sIXzqrQcilvWXqfbaM4Dr+Xd6cqWZSTzUCY1+D48MGh3 YRrh3rI2FRyOn5Wil/E1zntelytiFauQHocYtcjBkcyYEA5rXxpXwepdkOMxWWCg mRmC6F+YZReYXFshrlsYrv5Q1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1DEGT5 +1dahTSZGU52DB3DxoDwMB8GA1UdIwQYMBaAFCVmVmqExdznbzt/OQjefzK4Z2cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYzNy9DOENDNUFCNDBE MkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNPZHZPMzg1Q041X01yaG5a d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXWldhb1RGM09kdk8zODVDTjVfTXJoblp3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYzNy9DOENDNUFCNDBEMkQxMUVEQjJDOUJCNjlDNEY5QUUwMi9KV1pXYW9URjNP ZHZPMzg1Q041X01yaG5ad2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgKrCI1vuPucz0oT+9FDh/ONCRVcwPu+Uh0oyVyPZJ3G8nPYH8vl1t f+U8dTmdUmYZkUE4s1RZeCFwvoZQbaiAoZt3oGCdlYxu3dxHmLyTu/7RtPdlyLcQ 0dXE8NplAMYMsH+zDXdqITOw6h3vtO87l1ixtjvOIM4KmmIAkZLkB7fU8bv8B1MV KkE+wFw4Ia0BjnwXFvq5N2ziiMXEgnKZkvvOG/XU4LMzjYW0TI0r7FFUz999duVP hvKyI8wgdYu1zvHuOvTfLZDqD5dPolJgggOe9pQou35pmnKOjwqVybEZIrlENKmR QDoKUCOTdRbBwprHn9SPiXXnm4mLU5JO -----END CERTIFICATE-----Generated at Fri May 3 06:28:41 2024 by rpki-client on console-fra.rpki-client.org