$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft File: b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json) Hash identifier: O7xtdl1oh9Fp41IbU0AgbJIYQboZXbptPImOTd4FUlU= Subject key identifier: 0C:7F:22:8B:5A:30:4A:33:81:B3:BF:58:91:6C:BC:82:A1:13:C8:9E Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft Manifest number: 18 Signing time: Sun 19 May 2024 08:42:46 +0000 Manifest this update: Sun 19 May 2024 08:42:45 +0000 Manifest next update: Sun 26 May 2024 08:42:45 +0000 Files and hashes: 1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: zw0mVFcsNli/nKmJGUls7hk2KSUOhxjkRpM+X6dazwQ=) 2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: hIArzUTqWHT4MqlhM8xybTzjqQskXt82VMmP1skP/zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Validity Not Before: May 19 08:42:45 2024 GMT Not After : May 26 08:42:45 2024 GMT Subject: CN=6649bb86-473a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:d1:3a:44:56:2f:7f:00:64:a8:53:ba:8d: b7:31:30:98:df:53:55:89:d8:73:a2:9a:90:e0:95: d9:94:0b:e7:15:f1:a9:22:93:e1:5c:ba:12:35:e3: 0c:7d:9d:64:f1:69:12:86:be:4e:91:43:db:d0:75: 2b:5b:7a:78:f0:8d:32:6d:0c:6b:02:c4:43:51:59: 5c:04:f2:a3:ee:79:9e:d1:64:03:6c:d9:7b:e4:00: 95:0b:ac:6c:ce:b2:2c:b2:96:c8:de:89:8c:68:a2: a2:2c:b1:01:fd:85:68:df:ee:32:f0:c9:72:30:c2: 58:2f:76:0c:71:7e:a9:e7:ba:ca:07:64:43:b5:11: 19:86:4e:ae:ae:a6:1b:6c:f3:be:11:86:6b:90:a6: f2:11:53:5b:16:6b:ec:ec:cb:a5:4c:4c:21:28:38: 89:d4:40:19:b1:d3:0a:ba:8f:91:da:1d:68:98:98: 3c:9d:df:21:14:f0:7e:89:32:dc:5b:69:5f:85:d0: 84:d7:d5:c1:43:19:ce:2e:c3:5c:49:bd:de:af:7a: 90:21:96:0c:1d:39:60:58:f7:63:7d:31:08:7c:04: 74:2d:11:80:ef:ac:e6:9c:22:eb:74:1e:b5:e0:2b: 6e:a9:fb:a6:73:34:93:21:e7:0b:c3:95:e8:4f:9a: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:22:8B:5A:30:4A:33:81:B3:BF:58:91:6C:BC:82:A1:13:C8:9E X509v3 Authority Key Identifier: keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:16:60:3b:65:a9:b2:af:13:ed:55:36:95:c4:37:63:98: 70:e7:04:ec:3b:9b:72:52:9d:1e:24:ea:ba:c1:0a:d8:69:2d: 1c:99:28:03:29:81:dc:74:3a:2d:2f:6c:47:e0:03:46:13:ac: 4d:4a:6e:4c:ea:d2:0e:9f:eb:f4:35:99:46:cf:74:ec:91:49: 6f:7b:f0:24:fb:cc:9d:46:eb:55:d7:02:3a:b0:3a:0b:f8:4d: 52:2f:2f:09:c4:37:95:bd:07:10:70:ce:63:e2:5c:8d:85:b5: 0b:b2:88:8b:b8:4f:5d:69:5f:85:66:e8:cc:88:d9:b9:06:8b: 11:04:89:ba:3f:04:4c:13:de:d8:bb:0a:39:3f:a3:bc:a8:fe: 12:5e:14:20:6a:ae:e1:30:10:f8:de:d4:e7:a5:c2:6e:2b:5c: b5:07:36:a0:cf:b2:fa:92:00:26:93:34:4f:57:d0:7b:3f:56: c5:2a:dc:cd:58:68:7e:74:bc:fd:12:6e:53:97:74:32:20:1a: ab:85:ff:54:ae:89:05:17:2a:0a:9f:16:ea:cd:86:59:b0:64: 04:9e:11:16:24:e8:c2:e3:7a:b6:d1:74:f7:de:19:ca:62:cd: 15:e4:e8:f8:40:c9:1f:c8:29:9a:fa:c5:7c:c0:a4:83:c9:5e: f6:c1:c1:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDMjExMC8GA1UEBRMoNkZFOEMxNjE4RkZBRkZCMkNDRkY1NjlFOEVBOTE1REFG QTRENEUzNjAeFw0yNDA1MTkwODQyNDVaFw0yNDA1MjYwODQyNDVaMBgxFjAUBgNV BAMTDTY2NDliYjg2LTQ3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3F9E6RFYvfwBkqFO6jbcxMJjfU1WJ2HOimpDgldmUC+cV8akik+FcuhI14wx9 nWTxaRKGvk6RQ9vQdStbenjwjTJtDGsCxENRWVwE8qPueZ7RZANs2XvkAJULrGzO siyylsjeiYxooqIssQH9hWjf7jLwyXIwwlgvdgxxfqnnusoHZEO1ERmGTq6uphts 874RhmuQpvIRU1sWa+zsy6VMTCEoOInUQBmx0wq6j5HaHWiYmDyd3yEU8H6JMtxb aV+F0ITX1cFDGc4uw1xJvd6vepAhlgwdOWBY92N9MQh8BHQtEYDvrOacIut0HrXg K26p+6ZzNJMh5wvDlehPmt1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDH8ii1ow SjOBs79YkWy8gqETyJ4wHwYDVR0jBBgwFoAUb+jBYY/6/7LM/1aejqkV2vpNTjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkMyLzFFN0ZGRjlBRjBD RDExRUU4ODFEM0MxNkM0RjlBRTAyL2ItakJZWV82XzdMTV8xYWVqcWtWMnZwTlRq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYi1qQllZXzZfN0xNXzFhZWpxa1YydnBOVGpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkMyLzFFN0ZGRjlBRjBDRDExRUU4ODFEM0MxNkM0RjlBRTAyL2ItakJZWV82XzdM TV8xYWVqcWtWMnZwTlRqWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIrFmA7ZamyrxPtVTaVxDdjmHDnBOw7m3JSnR4k6rrBCthpLRyZKAMp gdx0Oi0vbEfgA0YTrE1Kbkzq0g6f6/Q1mUbPdOyRSW978CT7zJ1G61XXAjqwOgv4 TVIvLwnEN5W9BxBwzmPiXI2FtQuyiIu4T11pX4Vm6MyI2bkGixEEibo/BEwT3ti7 Cjk/o7yo/hJeFCBqruEwEPje1Oelwm4rXLUHNqDPsvqSACaTNE9X0Hs/VsUq3M1Y aH50vP0SblOXdDIgGquF/1SuiQUXKgqfFurNhlmwZASeERYk6MLjerbRdPfeGcpi zRXk6PhAyR/IKZr6xXzApIPJXvbBwQM= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org