$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: mhLX1fpOPNWn/PHUMpj60725Y4UIz8cYQy7eQDquV84= Subject key identifier: EE:76:09:B2:53:64:C5:50:9C:2B:68:5C:77:76:53:D7:EE:53:6C:B7 Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: 1C Signing time: Wed 15 May 2024 08:49:40 +0000 Manifest this update: Wed 15 May 2024 08:49:40 +0000 Manifest next update: Wed 22 May 2024 08:49:40 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: gsq95GxMYP1fIeVXK1IWeZ1hN2XbX7FtF3Qx9kpJt1M=) 2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: aFMYkYBw2EhyeI2pqMsreJuK3qV39ueiDtvXsuPF2Sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: May 15 08:49:40 2024 GMT Not After : May 22 08:49:40 2024 GMT Subject: CN=66447724-5366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:dc:20:74:4e:3c:be:d3:a3:1c:f3:d7:e9: b7:15:1b:24:a2:28:ac:6b:7d:56:16:b9:a5:fb:a3: 58:97:3c:92:8b:2d:1e:33:41:f1:73:9f:56:29:f0: da:99:5c:cf:64:50:d4:33:75:44:d4:0c:f5:9a:a0: b6:f0:09:3b:ba:42:c5:86:2f:9c:c8:e1:ad:94:89: 4d:b4:9f:54:8d:4c:53:9c:12:71:01:83:d0:05:5b: 4d:7e:4a:74:19:d0:3e:f7:09:41:b7:4d:51:94:a1: bd:10:c2:87:7d:16:7a:a4:90:ef:9b:5a:fe:00:c9: 5e:36:21:e9:bd:e8:d6:22:6d:24:0f:1e:b7:f0:d6: 60:46:98:17:dd:06:5c:59:c6:b9:80:56:12:f4:cd: b5:f1:c0:a6:9c:be:c5:be:9a:7e:81:34:96:53:38: 08:fe:4c:17:7f:b7:3d:6c:84:9d:15:b3:30:80:6a: 19:46:31:a6:8c:2a:19:72:e6:c9:94:f1:63:ca:67: 60:b4:83:fc:be:0c:85:87:4b:36:16:58:dc:5d:b3: 0a:fc:3c:83:a5:35:d1:5f:b8:cf:e3:35:f5:d8:d2: 62:c7:35:ca:55:20:3c:bd:b4:ec:84:eb:5c:63:f9: 36:bf:57:89:9a:66:42:7b:0b:7f:a9:e9:fa:68:a7: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:76:09:B2:53:64:C5:50:9C:2B:68:5C:77:76:53:D7:EE:53:6C:B7 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:be:26:cb:d4:dc:70:9c:c3:ed:e7:76:8f:c1:12:20:02:f0: 65:fb:5d:73:0c:0f:01:52:3e:43:60:1e:08:24:f2:6b:73:6d: 9a:10:87:55:9c:3c:52:b8:00:9e:98:56:93:20:c4:8a:77:5e: 86:25:e4:c5:cf:a7:f0:54:94:28:ec:20:ad:ac:aa:20:01:77: 33:ad:37:5c:65:a4:11:c7:77:e8:16:b4:58:9d:7b:f4:27:30: 0b:34:f8:85:fa:af:76:43:63:50:75:10:0e:d7:ba:a8:b6:11: 1b:bf:56:68:36:ed:33:10:8b:fb:d1:86:71:64:a8:91:3e:2d: 08:a2:80:d7:75:2e:d1:0c:5b:66:15:be:ec:2a:03:23:8a:54: 4f:c6:d2:cb:b4:55:af:68:df:7c:b8:60:14:ed:c5:f5:ec:ef: e9:b5:08:e4:26:af:2e:b0:dd:9a:b0:d8:a7:3a:64:86:3d:ac: 9b:ab:51:73:3a:99:de:ed:77:f1:35:e3:eb:e7:15:75:2b:60: 13:31:f9:9d:35:27:e8:69:34:31:c9:36:9b:89:54:48:98:20: 3d:56:79:b7:38:b8:ea:48:8d:17:88:1c:8a:37:0c:fb:5b:43: 6e:3c:c7:d7:e2:28:a1:79:f6:b6:55:9f:c7:c4:ac:0d:99:88: 6b:7f:6e:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUI2RDExMC8GA1UEBRMoOEUwMkI1QzRERUI1M0YyQjcxMkZGMDc3REUwNDkwODM3 NUU4MTNEQjAeFw0yNDA1MTUwODQ5NDBaFw0yNDA1MjIwODQ5NDBaMBgxFjAUBgNV BAMTDTY2NDQ3NzI0LTUzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYYNwgdE48vtOjHPPX6bcVGySiKKxrfVYWuaX7o1iXPJKLLR4zQfFzn1Yp8NqZ XM9kUNQzdUTUDPWaoLbwCTu6QsWGL5zI4a2UiU20n1SNTFOcEnEBg9AFW01+SnQZ 0D73CUG3TVGUob0Qwod9FnqkkO+bWv4AyV42Iem96NYibSQPHrfw1mBGmBfdBlxZ xrmAVhL0zbXxwKacvsW+mn6BNJZTOAj+TBd/tz1shJ0VszCAahlGMaaMKhly5smU 8WPKZ2C0g/y+DIWHSzYWWNxdswr8PIOlNdFfuM/jNfXY0mLHNcpVIDy9tOyE61xj +Ta/V4maZkJ7C3+p6fpopx11AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7nYJslNk xVCcK2hcd3ZT1+5TbLcwHwYDVR0jBBgwFoAUjgK1xN61PytxL/B33gSQg3XoE9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1QjZELzIxNTIyMTgyRTc4 RTExRUU5ODMxRUI3RUM0RjlBRTAyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamdLMXhONjFQeXR4TF9CMzNnU1FnM1hvRTlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 QjZELzIxNTIyMTgyRTc4RTExRUU5ODMxRUI3RUM0RjlBRTAyL2pnSzF4TjYxUHl0 eExfQjMzZ1NRZzNYb0U5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu+JsvU3HCcw+3ndo/BEiAC8GX7XXMMDwFSPkNgHggk8mtzbZoQh1Wc PFK4AJ6YVpMgxIp3XoYl5MXPp/BUlCjsIK2sqiABdzOtN1xlpBHHd+gWtFide/Qn MAs0+IX6r3ZDY1B1EA7Xuqi2ERu/Vmg27TMQi/vRhnFkqJE+LQiigNd1LtEMW2YV vuwqAyOKVE/G0su0Va9o33y4YBTtxfXs7+m1COQmry6w3Zqw2Kc6ZIY9rJurUXM6 md7td/E14+vnFXUrYBMx+Z01J+hpNDHJNpuJVEiYID1Webc4uOpIjReIHIo3DPtb Q248x9fiKKF59rZVn8fErA2ZiGt/bqM= -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org