$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: qoqRlILaGzbdoFPJ0yg/hgpEK2YiM84n+LCAtxgpB7k= Subject key identifier: C4:D1:E0:C9:54:A0:39:FD:D3:5A:0D:61:64:8E:C6:BF:93:BC:AA:A9 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 1735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 171B Signing time: Sat 18 May 2024 17:04:45 +0000 Manifest this update: Sat 18 May 2024 17:04:45 +0000 Manifest next update: Sat 25 May 2024 17:04:45 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: RANKC+B40kqwscI4sMRrtIav5PChHcj6eYk+Rjpeigg=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: nNzpdELVKNRl5WUSWmg/LO6N2saexXQbVGDjlO1n1sg=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: OD6nXUKGXzCUdlcbkAvBElIcsCXerzCD3UT0ObpuF8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5941 (0x1735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: May 18 17:04:45 2024 GMT Not After : May 25 17:04:45 2024 GMT Subject: CN=6648dfad-ec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:29:5a:51:3f:63:22:50:51:ec:a1:95:74: 09:e1:85:27:15:7c:f6:09:78:65:8f:76:1d:0a:e4: 4f:ad:6f:13:38:d0:13:16:09:ff:3c:02:51:07:02: db:78:39:81:32:84:65:a5:52:1e:68:1a:25:1a:46: 11:dd:e4:69:81:18:17:f2:77:f8:fb:d1:82:57:4c: ca:5a:67:b9:3f:4a:a3:f0:9b:21:e2:15:1f:38:c0: f3:d8:84:d9:b4:8e:82:66:ce:19:00:8e:b2:f5:bb: 73:05:2e:0b:6a:b0:04:99:56:ab:f3:ec:a3:a1:23: e9:82:11:e5:cd:55:97:14:20:b8:46:b8:6f:52:00: 08:45:89:df:93:a1:56:4a:02:ba:dc:09:d6:43:72: 3a:7f:bf:39:dd:16:33:72:7b:a7:2d:b7:bd:15:65: f6:68:7c:5e:36:06:19:cd:9b:04:db:c9:07:40:71: 39:33:d6:6d:f3:f2:e4:24:e5:a9:34:23:76:1f:bb: 38:0c:1f:a8:f7:22:79:43:d4:b0:5e:e5:5b:c5:0c: 3f:d9:72:89:94:26:f2:d0:eb:b7:12:0a:47:7c:e4: 79:90:d9:57:f4:13:c5:8e:c3:02:43:4f:5e:7e:53: e9:19:58:79:13:c6:78:b3:b4:cb:f7:e7:b6:af:cc: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D1:E0:C9:54:A0:39:FD:D3:5A:0D:61:64:8E:C6:BF:93:BC:AA:A9 X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:37:53:b2:7b:fd:6e:e7:1b:b0:1f:c5:af:9d:18:0e:17:b0: dc:9d:54:1a:ec:5c:d5:00:52:82:96:8e:c6:21:16:b3:8c:98: e8:20:ff:28:07:f0:4c:55:2e:22:db:a9:47:7c:c7:0a:9b:ea: 6d:f2:2a:21:3d:68:2a:d3:28:46:80:5c:b0:65:86:e8:15:38: 81:9d:3d:1f:7b:87:ab:84:4d:62:05:b8:be:64:b8:21:93:5a: 04:1d:8d:bc:cc:f9:35:5a:7f:96:bc:b0:16:f8:50:f1:53:22: 72:93:a6:61:1b:0f:0e:3d:34:3f:28:7d:b4:8f:66:dd:fb:2d: ef:c2:01:12:aa:c2:39:18:a6:df:20:a7:dd:90:87:2f:bd:51: 41:e9:92:b2:52:c0:b8:79:ba:c7:23:91:96:8c:8e:6b:6c:ab: f0:a9:f5:9b:00:f7:66:a8:61:2e:db:5c:24:31:85:24:69:73: 1a:d0:bc:c3:c2:f6:0b:1a:15:6c:dc:28:41:e7:88:86:87:33: 88:91:ec:83:30:68:03:b6:90:ef:77:23:9a:a5:46:36:9c:ef: 2a:7c:d7:ef:9b:e5:be:68:f7:2a:65:f8:3b:a5:92:16:13:12: da:75:30:be:e1:3f:88:d2:b6:ac:a2:28:3c:15:1b:5c:76:45: ff:bd:78:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjQwNTE4MTcwNDQ1WhcNMjQwNTI1MTcwNDQ1WjAYMRYwFAYD VQQDEw02NjQ4ZGZhZC1lYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/wpWlE/YyJQUeyhlXQJ4YUnFXz2CXhlj3YdCuRPrW8TONATFgn/PAJRBwLb eDmBMoRlpVIeaBolGkYR3eRpgRgX8nf4+9GCV0zKWme5P0qj8Jsh4hUfOMDz2ITZ tI6CZs4ZAI6y9btzBS4LarAEmVar8+yjoSPpghHlzVWXFCC4RrhvUgAIRYnfk6FW SgK63AnWQ3I6f7853RYzcnunLbe9FWX2aHxeNgYZzZsE28kHQHE5M9Zt8/LkJOWp NCN2H7s4DB+o9yJ5Q9SwXuVbxQw/2XKJlCby0Ou3EgpHfOR5kNlX9BPFjsMCQ09e flPpGVh5E8Z4s7TL9+e2r8xJrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTR4MlU oDn901oNYWSOxr+TvKqpMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmN1Oye/1u5xuwH8WvnRgOF7DcnVQa7FzVAFKClo7GIRazjJjoIP8o B/BMVS4i26lHfMcKm+pt8iohPWgq0yhGgFywZYboFTiBnT0fe4erhE1iBbi+ZLgh k1oEHY28zPk1Wn+WvLAW+FDxUyJyk6ZhGw8OPTQ/KH20j2bd+y3vwgESqsI5GKbf IKfdkIcvvVFB6ZKyUsC4ebrHI5GWjI5rbKvwqfWbAPdmqGEu21wkMYUkaXMa0LzD wvYLGhVs3ChB54iGhzOIkeyDMGgDtpDvdyOapUY2nO8qfNfvm+W+aPcqZfg7pZIW ExLadTC+4T+I0rasoig8FRtcdkX/vXjw -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org