$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: vxTJ2J2Ft1roipn0q8kE9nTvXa1KMzxeyFDD0ytsa0A= Subject key identifier: F2:BD:A1:21:8F:FE:B4:2F:AA:6B:D6:5F:5E:B5:D8:E5:4D:CD:A5:72 Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 08C5 Signing time: Sat 18 May 2024 21:26:25 +0000 Manifest this update: Sat 18 May 2024 21:26:25 +0000 Manifest next update: Sat 25 May 2024 21:26:25 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: KyBvy8ZrBJF6Z3ZyVJD1b2JN+kTgk+S2/6keclqHTx8=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: 5aI99GUDZShXwnlxZx4fEHO4WkhnQZ4b/FSeYn7GuUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: May 18 21:26:25 2024 GMT Not After : May 25 21:26:25 2024 GMT Subject: CN=66491d01-0db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:53:64:d3:74:21:05:09:82:6c:7b:c8:9c: b0:72:d9:f3:e2:f5:cc:3b:91:10:32:01:54:ce:53: e7:57:35:b8:f8:ac:b4:de:90:ff:38:b3:cb:76:e0: 96:c6:32:55:a6:cc:1b:ce:19:a9:5c:85:6c:44:8b: 71:a0:1a:87:37:9e:6b:64:13:4c:5d:24:2e:86:2b: 20:41:61:2f:c7:2e:f7:be:79:a6:b3:e8:4b:e0:66: 00:1a:03:49:61:b4:7d:bc:ce:c5:bd:ed:63:d4:cd: 97:02:32:d7:ef:d2:26:22:b5:4f:1d:4b:ff:ea:3f: 53:9d:61:44:4c:28:97:1b:80:ff:c3:16:be:19:01: 5e:e4:f1:5d:84:a2:7f:4a:6f:bf:0a:ce:51:a7:68: c5:92:bc:91:6f:11:82:11:84:fa:0b:f6:33:e0:eb: 14:5c:b0:85:67:1b:f3:4c:13:a2:82:4e:df:9e:38: a1:08:dd:b4:9c:33:8d:56:d9:ef:51:de:24:c1:04: 75:00:f8:e3:a7:79:34:39:0d:17:7a:09:34:da:a9: 4f:57:fe:97:26:be:d1:a7:b7:9a:d1:99:2e:99:94: dd:1f:bc:23:fa:7b:1c:38:1e:cb:8a:a3:35:6f:b9: b7:bd:11:3c:39:de:ac:e2:9d:7f:cb:4a:de:62:8f: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:A1:21:8F:FE:B4:2F:AA:6B:D6:5F:5E:B5:D8:E5:4D:CD:A5:72 X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8e:9d:58:f2:9d:64:52:44:c5:84:5f:07:e2:e1:7a:f1:b7: 2a:28:67:2d:88:95:30:61:7a:2f:0d:ed:cc:e8:53:19:68:06: 29:e9:17:85:c1:f9:19:07:cc:cf:13:a0:7f:c8:83:75:01:83: 66:61:dc:39:c7:e3:ef:e0:9e:db:c9:6d:83:34:4d:ef:16:92: c2:d2:98:53:5f:38:1a:c9:c6:cd:5b:7d:32:9c:60:11:a7:12: 34:d0:7a:98:9c:0f:aa:eb:7d:4d:2e:97:b3:a9:ea:46:3f:01: f3:39:0d:55:c4:75:c5:0c:53:a4:9c:63:62:e6:03:e8:30:40: c5:eb:33:3c:f6:62:14:b8:50:0c:c7:65:1d:0f:b2:d2:a8:ac: 8d:8a:95:7b:c4:ea:f7:28:6d:94:4d:bd:a2:2c:5f:70:35:a5: 85:21:05:49:7e:04:60:40:f2:bb:5c:13:e2:ed:9c:e1:b2:24: a3:cb:8d:ae:d6:43:74:7e:ec:0e:a7:74:4c:2f:e8:61:4c:81: e6:58:63:0e:b9:7e:2f:56:80:28:04:54:9d:c1:2d:72:12:39: 89:1a:83:aa:23:dc:27:f2:e2:d8:55:4b:c4:a9:7a:d9:7e:1a: 66:7a:05:53:50:5f:91:8c:84:cc:02:8e:09:e7:4c:23:83:8e: e0:8d:37:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjQwNTE4MjEyNjI1WhcNMjQwNTI1MjEyNjI1WjAYMRYwFAYD VQQDEw02NjQ5MWQwMS0wZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cFTZNN0IQUJgmx7yJywctnz4vXMO5EQMgFUzlPnVzW4+Ky03pD/OLPLduCW xjJVpswbzhmpXIVsRItxoBqHN55rZBNMXSQuhisgQWEvxy73vnmms+hL4GYAGgNJ YbR9vM7Fve1j1M2XAjLX79ImIrVPHUv/6j9TnWFETCiXG4D/wxa+GQFe5PFdhKJ/ Sm+/Cs5Rp2jFkryRbxGCEYT6C/Yz4OsUXLCFZxvzTBOigk7fnjihCN20nDONVtnv Ud4kwQR1APjjp3k0OQ0Xegk02qlPV/6XJr7Rp7ea0ZkumZTdH7wj+nscOB7LiqM1 b7m3vRE8Od6s4p1/y0reYo8ZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK9oSGP /rQvqmvWX1612OVNzaVyMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzjp1Y8p1kUkTFhF8H4uF68bcqKGctiJUwYXovDe3M6FMZaAYp6ReF wfkZB8zPE6B/yIN1AYNmYdw5x+Pv4J7byW2DNE3vFpLC0phTXzgaycbNW30ynGAR pxI00HqYnA+q631NLpezqepGPwHzOQ1VxHXFDFOknGNi5gPoMEDF6zM89mIUuFAM x2UdD7LSqKyNipV7xOr3KG2UTb2iLF9wNaWFIQVJfgRgQPK7XBPi7ZzhsiSjy42u 1kN0fuwOp3RML+hhTIHmWGMOuX4vVoAoBFSdwS1yEjmJGoOqI9wn8uLYVUvEqXrZ fhpmegVTUF+RjITMAo4J50wjg47gjTde -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org