$ rpki-client -vvf rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft File: JzleQrl9eM47L4WUayfnxogHVDI.mft (raw, json) Hash identifier: dEH+DOjVjiUI/Zq6SWP6nr7ys1vJ5FbxHvnuEuH0YfI= Subject key identifier: A9:F4:2D:8A:D4:91:65:C4:86:85:B2:02:69:FE:B7:1D:89:49:36:23 Authority key identifier: 27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32 Certificate issuer: /CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft Manifest number: 0677 Signing time: Thu 02 May 2024 23:38:12 +0000 Manifest this update: Thu 02 May 2024 23:38:11 +0000 Manifest next update: Thu 09 May 2024 23:38:11 +0000 Files and hashes: 1: JzleQrl9eM47L4WUayfnxogHVDI.crl (hash: 3TnCTxQRtgvcPuA7qBKUJeSLc1pM7bE6NcZ+qlLK2Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432 Validity Not Before: May 2 23:38:11 2024 GMT Not After : May 9 23:38:11 2024 GMT Subject: CN=663423e4-9978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:fd:a6:87:e2:fa:44:22:af:03:f4:12:fd: 20:18:0c:c4:d7:97:b4:d2:4b:57:78:c5:32:a7:8f: 32:04:9d:a5:58:21:05:57:a7:cd:ab:8a:bc:a8:99: 83:91:1d:c9:d1:23:d3:b7:10:c5:13:72:57:7f:a4: 87:b0:cb:06:87:b1:ed:1b:84:99:72:f8:10:19:03: 16:4c:4d:d0:f7:56:65:3f:a7:97:55:b1:67:6e:f7: 08:cf:a0:23:9e:d7:9b:89:0e:a1:61:d3:e0:f2:d2: 48:f7:2e:df:43:24:3e:38:0c:bb:42:50:3f:60:d3: 61:af:34:6c:00:64:64:d4:38:c3:ba:05:5d:91:d3: 5a:6a:4e:b2:bb:71:8f:93:46:95:89:06:75:8b:b5: 38:fc:8e:ad:0b:4a:40:e1:66:a9:c0:3c:01:3d:92: d5:6b:6c:e7:1e:64:ac:19:ba:a3:41:41:e9:2f:cf: 88:87:76:a8:15:16:49:67:30:36:99:11:d0:97:82: 69:7e:c7:c9:36:48:b8:ed:20:f1:e7:52:8e:e1:7e: db:6b:94:10:82:1f:2b:88:1c:09:fe:31:39:02:0b: 60:73:99:0d:98:0b:59:32:ed:2b:3e:ba:2d:0f:98: 52:fb:9a:79:13:e7:58:17:b1:cf:bf:5e:4d:a8:ea: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:2D:8A:D4:91:65:C4:86:85:B2:02:69:FE:B7:1D:89:49:36:23 X509v3 Authority Key Identifier: keyid:27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fc:2e:44:e3:ae:ad:1c:d2:55:61:ed:96:3d:99:6e:b2:0d: 3e:37:bc:1b:86:71:96:e2:99:ed:34:3c:6b:9c:14:ed:e0:a6: f5:85:1d:4f:cc:81:87:4b:cc:f8:71:51:e7:08:67:22:d4:67: b9:43:76:aa:c7:ec:57:b0:a9:9f:9a:8b:dc:89:bf:2c:7c:b8: 45:04:53:41:8b:9b:18:c4:79:f0:e1:e1:35:b5:ab:82:fa:7a: 5d:ec:7c:48:e4:ac:5c:5a:34:28:f1:b0:0d:72:d5:58:69:65: b3:b9:d3:e8:be:bf:c9:b8:90:c3:53:78:59:97:83:70:b6:df: 13:7d:a0:d4:e6:48:34:75:ad:34:ed:27:ee:fc:ba:9b:ed:2f: df:b5:27:9c:b8:75:7d:d9:71:88:b0:58:ed:62:47:75:79:9f: 8b:92:43:64:f8:37:f6:95:4d:ad:24:c2:8e:5c:d2:61:38:b4: 82:79:d9:6c:8d:05:74:8e:08:65:76:f5:96:2e:54:b1:86:28: bc:62:ab:71:f7:c9:05:50:3d:91:4a:3f:08:8a:f8:1d:ff:e1: 9a:6c:64:40:fb:97:43:2f:86:f4:a2:22:31:67:d5:bb:a2:43: fc:31:f7:4c:ac:86:33:c2:3d:ad:bb:7f:e8:6a:c9:af:ff:38: 74:94:7e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1NjAxMTAvBgNVBAUTKDI3Mzk1RTQyQjk3RDc4Q0UzQjJGODU5NDZCMjdFN0M2 ODgwNzU0MzIwHhcNMjQwNTAyMjMzODExWhcNMjQwNTA5MjMzODExWjAYMRYwFAYD VQQDEw02NjM0MjNlNC05OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jH9pofi+kQirwP0Ev0gGAzE15e00ktXeMUyp48yBJ2lWCEFV6fNq4q8qJmD kR3J0SPTtxDFE3JXf6SHsMsGh7HtG4SZcvgQGQMWTE3Q91ZlP6eXVbFnbvcIz6Aj ntebiQ6hYdPg8tJI9y7fQyQ+OAy7QlA/YNNhrzRsAGRk1DjDugVdkdNaak6yu3GP k0aViQZ1i7U4/I6tC0pA4WapwDwBPZLVa2znHmSsGbqjQUHpL8+Ih3aoFRZJZzA2 mRHQl4JpfsfJNki47SDx51KO4X7ba5QQgh8riBwJ/jE5Agtgc5kNmAtZMu0rProt D5hS+5p5E+dYF7HPv15NqOo+awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn0LYrU kWXEhoWyAmn+tx2JSTYjMB8GA1UdIwQYMBaAFCc5XkK5fXjOOy+FlGsn58aIB1Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTU2MC9DRTE3MDI1QzJF N0QxMUVCOUVGNzQyNjdDNEY5QUUwMi9KemxlUXJsOWVNNDdMNFdVYXlmbnhvZ0hW REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6bGVRcmw5ZU00N0w0V1VheWZueG9nSFZESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTU2MC9DRTE3MDI1QzJFN0QxMUVCOUVGNzQyNjdDNEY5QUUwMi9KemxlUXJsOWVN NDdMNFdVYXlmbnhvZ0hWREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9/C5E466tHNJVYe2WPZlusg0+N7wbhnGW4pntNDxrnBTt4Kb1hR1P zIGHS8z4cVHnCGci1Ge5Q3aqx+xXsKmfmovcib8sfLhFBFNBi5sYxHnw4eE1tauC +npd7HxI5KxcWjQo8bANctVYaWWzudPovr/JuJDDU3hZl4Nwtt8TfaDU5kg0da00 7Sfu/Lqb7S/ftSecuHV92XGIsFjtYkd1eZ+LkkNk+Df2lU2tJMKOXNJhOLSCedls jQV0jghldvWWLlSxhii8Yqtx98kFUD2RSj8Iivgd/+GabGRA+5dDL4b0oiIxZ9W7 okP8MfdMrIYzwj2tu3/oasmv/zh0lH4w -----END CERTIFICATE-----Generated at Fri May 3 00:28:39 2024 by rpki-client on console-fra.rpki-client.org