$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: HSZR1yPpbzfSzafXgzPpi5wL/U6ih7kXhGJRRvn3a+w= Subject key identifier: 64:09:C1:5A:E7:2D:EA:B5:51:CF:B6:76:06:ED:62:7F:F7:1F:9C:0C Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0C34 Signing time: Sat 18 May 2024 18:58:01 +0000 Manifest this update: Sat 18 May 2024 18:58:01 +0000 Manifest next update: Sat 25 May 2024 18:58:01 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: wSraDTJDRAo5DSjF9YtOQtHAHABdKNi1wiG+ZF2kfU0=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: 9L3gWw9Hsx9/SrakiEqghCLk1KXBZM6BGq74H64Gv+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: May 18 18:58:01 2024 GMT Not After : May 25 18:58:01 2024 GMT Subject: CN=6648fa39-f0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:6c:06:54:c2:f6:75:29:67:33:fd:fc:17: 50:a4:46:b8:85:2b:da:71:a9:0b:1b:04:d9:6a:89: a7:d8:13:a1:4e:22:cf:5a:52:1a:55:37:19:71:92: 84:1b:5a:5d:a4:ce:9c:d8:89:1d:d9:ae:ef:3c:11: c0:47:66:35:5b:c8:f0:bb:74:2b:99:39:3b:e4:f2: c2:23:8a:bf:ce:8e:96:8a:88:0a:18:3a:94:32:22: d9:95:f3:ae:41:af:43:e1:08:c4:ef:9f:fa:c6:40: d5:43:64:fd:ef:fc:ac:db:f4:65:16:e6:64:24:35: 2f:e9:6f:3e:08:87:9e:67:be:63:64:ab:be:7c:87: 7c:bd:51:ee:56:fb:53:6b:0e:6f:11:93:8d:d7:c3: 5e:c1:da:28:55:e2:20:59:fa:01:1a:28:69:fc:53: d6:d8:c9:f7:61:5c:5d:c2:47:a5:a3:22:ae:b4:27: d9:00:32:61:d8:23:f4:b1:8c:05:7b:d8:fe:01:4a: db:fc:72:86:5c:cb:e2:eb:dd:52:5b:2c:95:8c:70: e7:ea:95:cc:19:52:06:92:20:59:b4:69:48:b5:d7: 71:67:c3:c9:dc:77:9c:03:da:32:45:f0:5c:f7:42: 3d:e2:07:55:e5:7d:02:cd:47:b7:80:2c:de:90:2d: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:09:C1:5A:E7:2D:EA:B5:51:CF:B6:76:06:ED:62:7F:F7:1F:9C:0C X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e6:6f:e3:e3:55:6b:6a:83:9b:e1:73:4b:42:63:8a:1c:5a: 3a:f1:1b:b1:b9:90:4e:97:7d:2e:3b:eb:60:09:0a:83:24:1f: 51:9d:85:cf:e0:43:58:57:b2:68:3e:ed:fe:fb:02:ae:9e:91: 2e:34:fa:c6:d2:0b:1f:0f:81:b0:ec:66:be:36:ce:e9:64:b5: 3f:28:9d:2f:1c:2f:ee:79:7e:0d:c6:1f:e9:ef:06:63:16:55: 67:4c:ae:64:b7:ed:d3:2d:a2:cc:e2:ea:89:31:36:85:47:11: 7c:41:eb:3e:bd:d3:a4:aa:8b:9b:87:4c:ba:ac:64:a6:5a:93: c6:f9:57:fb:ae:58:cc:c7:01:a8:c5:66:93:f4:ca:36:3a:26: 04:95:b9:20:c9:49:f0:ab:6b:64:e4:37:68:f5:7d:be:9a:89: 69:56:6f:36:07:6b:ee:bd:82:2d:93:25:0f:b8:b9:05:62:0f: 87:f0:43:a6:7d:24:20:b2:55:9e:2a:a3:1b:b9:23:f5:1b:2b: 39:22:13:3e:8b:2b:c7:72:e0:d7:88:2b:b4:a6:34:45:17:7f: 15:48:95:88:dd:ff:e9:01:31:15:f1:71:b4:38:18:7d:51:0e: e1:43:dd:e2:60:9f:4d:46:59:d8:99:f4:06:5a:7b:c4:91:4d: 82:23:51:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjQwNTE4MTg1ODAxWhcNMjQwNTI1MTg1ODAxWjAYMRYwFAYD VQQDEw02NjQ4ZmEzOS1mMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4b9sBlTC9nUpZzP9/BdQpEa4hSvacakLGwTZaomn2BOhTiLPWlIaVTcZcZKE G1pdpM6c2Ikd2a7vPBHAR2Y1W8jwu3QrmTk75PLCI4q/zo6WiogKGDqUMiLZlfOu Qa9D4QjE75/6xkDVQ2T97/ys2/RlFuZkJDUv6W8+CIeeZ75jZKu+fId8vVHuVvtT aw5vEZON18NewdooVeIgWfoBGihp/FPW2Mn3YVxdwkeloyKutCfZADJh2CP0sYwF e9j+AUrb/HKGXMvi691SWyyVjHDn6pXMGVIGkiBZtGlItddxZ8PJ3HecA9oyRfBc 90I94gdV5X0CzUe3gCzekC2OOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQJwVrn Leq1Uc+2dgbtYn/3H5wMMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu5m/j41VraoOb4XNLQmOKHFo68RuxuZBOl30uO+tgCQqDJB9RnYXP 4ENYV7JoPu3++wKunpEuNPrG0gsfD4Gw7Ga+Ns7pZLU/KJ0vHC/ueX4Nxh/p7wZj FlVnTK5kt+3TLaLM4uqJMTaFRxF8Qes+vdOkqoubh0y6rGSmWpPG+Vf7rljMxwGo xWaT9Mo2OiYElbkgyUnwq2tk5Ddo9X2+molpVm82B2vuvYItkyUPuLkFYg+H8EOm fSQgslWeKqMbuSP1Gys5IhM+iyvHcuDXiCu0pjRFF38VSJWI3f/pATEV8XG0OBh9 UQ7hQ93iYJ9NRlnYmfQGWnvEkU2CI1G5 -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org