$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: sZ700zIdZfQVRZE4u7erkuxpnJTJeWu/vUForkE83MQ= Subject key identifier: DB:33:FB:23:58:93:B6:46:F3:6E:B7:86:C3:FA:FF:DE:5F:EF:9D:3A Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 010D Signing time: Fri 03 May 2024 05:31:14 +0000 Manifest this update: Fri 03 May 2024 05:31:14 +0000 Manifest next update: Fri 10 May 2024 05:31:14 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: HPYOCuahVbUnt/njw1zbav6JZo+9heFMDF5AJqomMBQ=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: Mknc50H9prGQmPc0Hg1FmmwuzNQqJGLRT+YSmNTMqkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: May 3 05:31:14 2024 GMT Not After : May 10 05:31:14 2024 GMT Subject: CN=663476a2-74b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:96:2f:2a:17:27:9f:91:b9:c9:01:61:e5: d9:d2:3e:58:da:45:40:83:7f:4d:38:6a:23:78:7c: 21:bd:a5:c2:25:f2:02:45:85:b9:31:e4:62:bc:76: 46:6b:ee:a3:20:67:a3:25:e0:f8:4b:fe:9a:be:be: ac:bf:9a:96:a4:29:26:c9:ec:aa:0a:ab:d1:63:c4: 06:63:58:69:84:a6:16:96:74:54:73:95:7c:36:94: cd:2a:97:43:4a:c3:cd:1b:2a:8d:38:51:ce:c1:25: cc:23:01:0b:39:53:f1:7e:aa:a2:47:46:02:09:e0: 49:8c:f6:6b:34:ef:91:d3:3f:83:59:d4:cd:ae:83: 5a:66:8b:84:22:b8:de:2b:8d:11:ff:a7:f5:16:b4: 05:3b:b0:77:0b:09:5c:1b:c9:59:7d:a0:00:3a:44: d4:ec:ae:52:22:58:c1:41:31:07:ad:6b:83:1f:7e: 76:af:83:65:41:ff:ed:bc:2a:da:8f:cb:8a:81:9b: e2:33:a9:6d:b5:f6:ce:ac:ab:78:a9:6c:76:20:55: 2c:90:9f:c9:d2:0a:1a:9a:f6:a9:26:b8:d8:52:3b: c4:47:34:cd:fb:08:57:a4:e1:7c:b6:2b:c8:80:5d: 02:01:36:bb:90:a7:84:4f:1e:f8:81:1c:3f:4f:d3: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:33:FB:23:58:93:B6:46:F3:6E:B7:86:C3:FA:FF:DE:5F:EF:9D:3A X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c5:51:0e:0f:55:eb:d8:bc:4e:e1:86:2c:dc:65:b2:1f:b3: 18:14:15:c8:72:09:6e:4e:85:8a:f8:6a:f3:b1:f8:c4:c0:48: 70:6e:9a:f1:22:f6:de:20:d9:62:2d:e3:0a:71:b4:5c:e2:e9: 59:39:e5:99:c5:f3:ae:bf:ef:74:7d:1b:78:26:ba:60:9d:8a: f9:01:13:58:23:bd:66:ce:04:67:ca:e4:13:99:82:76:a6:87: e4:a1:d6:a0:99:5c:3e:4e:8b:db:6d:25:22:5d:2d:08:49:cf: 97:c2:f5:fb:73:62:bd:49:70:c5:3b:2e:e4:8e:5f:a6:a6:57: 63:41:0b:77:24:cb:83:7b:23:59:36:ec:77:cf:25:94:da:6f: e0:eb:8f:8e:37:41:fb:a9:99:63:2d:63:be:e4:04:51:1f:29: 4d:a8:70:9b:7e:39:07:c3:1d:8b:e3:6f:63:d2:ab:f9:5e:a9: c4:24:ca:34:19:a1:63:18:24:35:d0:e3:8c:82:19:64:e4:57: d1:40:f8:1e:04:2c:14:ed:05:fc:44:3a:fe:60:99:cd:df:2e: e6:b1:83:57:65:66:7f:72:a5:80:b8:3b:96:f0:24:79:af:b0: 38:0b:49:1b:5b:d4:f6:04:0c:28:a2:9a:8c:a6:b9:09:23:3d: a7:92:f7:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjQwNTAzMDUzMTE0WhcNMjQwNTEwMDUzMTE0WjAYMRYwFAYD VQQDEw02NjM0NzZhMi03NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AGWLyoXJ5+RuckBYeXZ0j5Y2kVAg39NOGojeHwhvaXCJfICRYW5MeRivHZG a+6jIGejJeD4S/6avr6sv5qWpCkmyeyqCqvRY8QGY1hphKYWlnRUc5V8NpTNKpdD SsPNGyqNOFHOwSXMIwELOVPxfqqiR0YCCeBJjPZrNO+R0z+DWdTNroNaZouEIrje K40R/6f1FrQFO7B3CwlcG8lZfaAAOkTU7K5SIljBQTEHrWuDH352r4NlQf/tvCra j8uKgZviM6lttfbOrKt4qWx2IFUskJ/J0goamvapJrjYUjvERzTN+whXpOF8tivI gF0CATa7kKeETx74gRw/T9OifwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsz+yNY k7ZG8263hsP6/95f7506MB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9xVEOD1Xr2LxO4YYs3GWyH7MYFBXIcgluToWK+GrzsfjEwEhwbprx IvbeINliLeMKcbRc4ulZOeWZxfOuv+90fRt4JrpgnYr5ARNYI71mzgRnyuQTmYJ2 pofkodagmVw+TovbbSUiXS0ISc+XwvX7c2K9SXDFOy7kjl+mpldjQQt3JMuDeyNZ Nux3zyWU2m/g64+ON0H7qZljLWO+5ARRHylNqHCbfjkHwx2L429j0qv5XqnEJMo0 GaFjGCQ10OOMghlk5FfRQPgeBCwU7QX8RDr+YJnN3y7msYNXZWZ/cqWAuDuW8CR5 r7A4C0kbW9T2BAwoopqMprkJIz2nkvc8 -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org