$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: nGJfwztk35y2OewmJD9ylHsxnu7gt96iUS0zW0lt6YA= Subject key identifier: FB:A1:60:84:E7:CC:5A:74:CB:FB:DA:4E:19:8A:C0:E5:34:50:B3:00 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 0599 Signing time: Sun 19 May 2024 00:22:59 +0000 Manifest this update: Sun 19 May 2024 00:22:58 +0000 Manifest next update: Sun 26 May 2024 00:22:58 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: 8gY36oJ+gVoayWpOerIJSrcP4oRylNH+DxX0rJw51IE=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: ILxRTAG2MJBh4gZYgERZn7a460pBdiUjsw6+/R6E+n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: May 19 00:22:58 2024 GMT Not After : May 26 00:22:58 2024 GMT Subject: CN=66494663-62a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:0d:69:1b:0b:28:66:a7:83:f8:55:83:f4: 27:03:91:4d:ba:66:71:cc:23:08:e3:9f:52:9a:3d: a6:d4:ec:af:34:d1:b9:8c:d4:bf:8b:d6:21:66:78: e2:20:38:cc:fc:96:a8:06:24:89:0e:18:5f:34:7e: bc:bc:77:db:8b:93:2b:0d:09:c7:54:58:de:32:c7: ac:59:41:71:79:ac:96:50:f2:98:88:06:55:dd:30: c6:6c:dc:f5:1a:b0:4e:cd:e8:ac:78:61:82:03:c4: 56:51:7b:8d:27:08:21:83:0b:68:0c:09:86:67:68: 70:45:c4:d8:db:e4:09:c3:64:ff:89:f6:e9:72:38: 1e:12:db:45:e0:15:46:70:92:15:fd:14:1f:ae:e7: 61:92:ea:02:b1:52:82:fa:81:36:6a:e8:a8:17:84: 22:16:9b:96:5f:f2:59:35:8d:5e:67:41:51:32:92: 10:e3:8a:92:95:cd:ed:9f:1a:e3:ff:ea:76:69:9f: 8c:02:25:25:69:96:f6:a7:b9:d1:b1:d6:44:73:7b: 59:3e:47:b4:ce:cb:ae:de:c3:d5:cb:6c:de:0f:03: 96:6e:33:00:e6:77:9f:ea:46:57:f3:43:fb:33:6c: 85:00:d9:a4:57:4c:91:e1:05:82:56:d9:78:f1:88: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A1:60:84:E7:CC:5A:74:CB:FB:DA:4E:19:8A:C0:E5:34:50:B3:00 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:62:cd:de:ee:dd:7f:e7:6a:b4:f2:fd:c3:1d:86:0e:d0: 6f:cb:7b:24:27:8f:4a:06:45:18:a7:9b:c3:77:8a:78:95:49: 64:80:8f:7e:64:66:4b:2f:11:bc:34:50:e8:df:84:97:24:cb: 52:13:ef:6f:93:55:ed:c9:e3:5b:9a:fe:ad:eb:0e:92:4b:de: ea:41:5a:e8:ae:ff:08:20:22:4b:9b:ae:bd:ff:8d:21:5f:af: 81:24:e9:a0:a9:58:b7:d3:52:be:3c:9c:ad:61:e6:71:5b:99: db:af:3c:94:2e:0b:22:e4:f3:fd:38:4a:78:c0:6a:ec:cf:b9: 1b:14:cb:a4:f7:a3:c0:69:76:23:16:8c:ac:64:fb:c3:cd:dd: 51:46:c6:8d:57:d8:44:99:73:5f:93:ea:e6:e9:e2:db:3d:29: 44:5f:c2:70:54:0e:95:e6:13:40:03:e0:65:8f:5d:77:68:64: 7b:fb:29:c2:08:41:63:79:e6:e2:ad:da:8c:92:34:69:27:06: 8a:2f:95:92:64:0f:cd:57:68:ca:38:42:9c:3e:85:a2:bd:fd: 50:df:94:a0:c3:d8:16:41:a3:5a:2d:82:15:6f:86:83:64:3a: bf:6a:63:32:37:bf:f3:0c:5e:0f:1b:e7:f0:9e:71:10:6c:b7: 44:7a:76:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjQwNTE5MDAyMjU4WhcNMjQwNTI2MDAyMjU4WjAYMRYwFAYD VQQDEw02NjQ5NDY2My02MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA148NaRsLKGang/hVg/QnA5FNumZxzCMI459Smj2m1OyvNNG5jNS/i9YhZnji IDjM/JaoBiSJDhhfNH68vHfbi5MrDQnHVFjeMsesWUFxeayWUPKYiAZV3TDGbNz1 GrBOzeiseGGCA8RWUXuNJwghgwtoDAmGZ2hwRcTY2+QJw2T/ifbpcjgeEttF4BVG cJIV/RQfrudhkuoCsVKC+oE2auioF4QiFpuWX/JZNY1eZ0FRMpIQ44qSlc3tnxrj /+p2aZ+MAiUlaZb2p7nRsdZEc3tZPke0zsuu3sPVy2zeDwOWbjMA5nef6kZX80P7 M2yFANmkV0yR4QWCVtl48YgzNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuhYITn zFp0y/vaThmKwOU0ULMAMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANkGLN3u7df+dqtPL9wx2GDtBvy3skJ49KBkUYp5vDd4p4lUlkgI9+ ZGZLLxG8NFDo34SXJMtSE+9vk1XtyeNbmv6t6w6SS97qQVrorv8IICJLm669/40h X6+BJOmgqVi301K+PJytYeZxW5nbrzyULgsi5PP9OEp4wGrsz7kbFMuk96PAaXYj FoysZPvDzd1RRsaNV9hEmXNfk+rm6eLbPSlEX8JwVA6V5hNAA+Blj113aGR7+ynC CEFjeebirdqMkjRpJwaKL5WSZA/NV2jKOEKcPoWivf1Q35Sgw9gWQaNaLYIVb4aD ZDq/amMyN7/zDF4PG+fwnnEQbLdEenYM -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org