$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: d0TdG1yQnNPyvtTqsI9xe08boYWdzuw4ynqzAM9poVk= Subject key identifier: B5:FF:11:CE:93:EF:23:15:C9:FF:17:44:C5:6D:23:22:14:10:99:8F Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 33C6 Signing time: Sat 18 May 2024 16:21:38 +0000 Manifest this update: Sat 18 May 2024 16:21:37 +0000 Manifest next update: Sat 25 May 2024 16:21:37 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: lO70ebb35xobGW1uuNg+OJPSfwKiovbk6sQ1hYfurXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Validity Not Before: May 18 16:21:37 2024 GMT Not After : May 25 16:21:37 2024 GMT Subject: CN=6648d591-5285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:23:a5:fe:1d:57:79:a7:d1:39:1e:a6:08: a3:57:da:45:2d:f7:7f:2d:4c:4e:73:49:7a:78:28: 1d:23:2f:e6:38:31:37:d7:56:d4:30:b2:47:17:93: 0f:65:b4:67:76:80:d6:59:d2:88:fb:3f:d1:5a:15: e9:ba:89:ac:1a:77:1f:f6:f4:13:bb:4b:88:b9:1f: 1f:67:3a:1e:63:a6:f4:a4:2d:96:3b:04:b6:41:2e: 57:a7:96:65:8e:12:a5:81:93:18:08:84:93:17:ab: 72:26:04:7b:11:02:9a:83:25:07:7d:8b:b4:d5:45: f1:d8:d4:cd:cb:f4:0d:06:52:db:c0:ba:68:4f:3b: d0:74:9d:99:c9:11:14:f4:01:eb:53:ad:ae:d0:2e: e8:3b:6b:5d:eb:63:3f:e4:e7:9b:16:dc:dd:9a:a8: 71:6b:2d:3c:06:1d:3b:e4:38:35:f1:e8:20:95:89: 11:98:94:49:81:76:b3:0b:ee:ec:79:3c:b3:84:16: f9:a3:1e:75:40:d1:c6:c8:55:63:3b:03:8d:85:97: 00:63:a9:a4:c8:3f:ff:d8:66:5a:59:94:d4:cd:d9: 30:5b:f7:83:83:0f:6a:f5:cb:d2:1d:d2:6d:d5:3e: 33:dd:7c:da:98:88:69:26:ec:ad:98:c7:1b:42:f9: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FF:11:CE:93:EF:23:15:C9:FF:17:44:C5:6D:23:22:14:10:99:8F X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f5:9a:7b:df:c2:be:15:85:14:c2:82:42:35:a2:ab:c0:36: 9f:c8:14:94:93:8d:92:86:88:39:1e:95:6c:f7:8e:f9:29:74: 0a:9f:f2:91:ff:fb:0a:58:b2:36:a0:bb:eb:d2:38:9f:e1:4b: 95:bf:28:0c:7a:5d:db:da:ea:de:03:39:dd:3b:e3:2a:72:02: f0:ef:59:ec:f7:10:ca:fc:f6:6e:61:5e:38:bd:a2:6a:34:70: 9b:ff:66:c0:23:b7:aa:5d:97:af:eb:3a:9c:84:62:ee:35:a0: a4:3a:7d:cc:cb:12:6e:74:be:b5:5d:e5:8d:bb:43:25:a7:d7: 9c:66:90:15:fd:ac:a3:c5:56:bc:b6:a4:76:04:16:81:05:c1: 89:5e:25:92:cd:2f:b0:65:27:c1:97:ee:41:f3:bb:ae:99:f4: 44:aa:fa:c6:ee:14:7d:2b:ff:fa:e6:eb:5e:3b:ad:e9:20:0f: 13:96:b5:6d:22:ac:13:01:b3:c4:c0:b8:b0:ed:f4:b9:51:38: a7:14:2c:15:e4:db:00:5a:8e:35:a5:f6:eb:19:e8:35:c5:5c: a8:22:38:22:9c:ca:d2:83:ad:6a:57:9a:e3:15:76:78:82:80: 4e:16:64:8d:ca:ac:31:0e:3d:eb:2b:de:70:21:ce:b3:d4:9c: 09:8c:71:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjQwNTE4MTYyMTM3WhcNMjQwNTI1MTYyMTM3WjAYMRYwFAYD VQQDEw02NjQ4ZDU5MS01Mjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVkjpf4dV3mn0TkepgijV9pFLfd/LUxOc0l6eCgdIy/mODE311bUMLJHF5MP ZbRndoDWWdKI+z/RWhXpuomsGncf9vQTu0uIuR8fZzoeY6b0pC2WOwS2QS5Xp5Zl jhKlgZMYCISTF6tyJgR7EQKagyUHfYu01UXx2NTNy/QNBlLbwLpoTzvQdJ2ZyREU 9AHrU62u0C7oO2td62M/5OebFtzdmqhxay08Bh075Dg18egglYkRmJRJgXazC+7s eTyzhBb5ox51QNHGyFVjOwONhZcAY6mkyD//2GZaWZTUzdkwW/eDgw9q9cvSHdJt 1T4z3XzamIhpJuytmMcbQvmp5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX/Ec6T 7yMVyf8XRMVtIyIUEJmPMB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG9Zp738K+FYUUwoJCNaKrwDafyBSUk42Shog5HpVs9475KXQKn/KR //sKWLI2oLvr0jif4UuVvygMel3b2ureAzndO+MqcgLw71ns9xDK/PZuYV44vaJq NHCb/2bAI7eqXZev6zqchGLuNaCkOn3MyxJudL61XeWNu0Mlp9ecZpAV/ayjxVa8 tqR2BBaBBcGJXiWSzS+wZSfBl+5B87uumfREqvrG7hR9K//65uteO63pIA8TlrVt IqwTAbPEwLiw7fS5UTinFCwV5NsAWo41pfbrGeg1xVyoIjginMrSg61qV5rjFXZ4 goBOFmSNyqwxDj3rK95wIc6z1JwJjHGI -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org