$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json) Hash identifier: N856NX5TRH1zzIcW9ogZxIE1e9YSckq0FmkUYuq1frw= Subject key identifier: 0F:F6:0C:E2:F5:5A:DC:9E:A7:77:2C:8D:B1:09:A5:AE:20:58:F0:42 Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft Manifest number: 26 Signing time: Sun 19 May 2024 08:30:24 +0000 Manifest this update: Sun 19 May 2024 08:30:24 +0000 Manifest next update: Sun 26 May 2024 08:30:24 +0000 Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: ErhWcvH3hJiBrIBMVQcfB+VddNbPz9viNuf/BmTTXXs=) 2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: FPtj2ltI8kYpFvfOoBQqFwEMbsbIQSlUFtigm670/FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Validity Not Before: May 19 08:30:24 2024 GMT Not After : May 26 08:30:24 2024 GMT Subject: CN=6649b8a0-6d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:b2:6f:91:66:4a:1a:dc:64:63:f7:7e:66: 36:63:6e:f4:ce:fa:6b:ad:6f:85:2b:89:19:df:0d: 31:71:5f:c2:13:77:7e:96:43:49:c0:66:d5:81:19: ab:d8:c0:7f:9e:dd:d1:d1:00:1b:fc:0e:e0:9a:9c: 72:f3:40:a9:aa:0f:e8:8c:d6:24:62:2f:54:c2:5e: fd:86:46:b1:6f:99:62:bf:06:86:44:5b:29:74:b0: 61:3c:53:20:4d:f0:c8:f0:13:0d:30:0d:5f:2c:8f: 61:69:43:c4:5c:6f:6f:d8:e9:9d:4d:21:28:dc:93: ca:03:f5:4c:de:21:5d:16:6c:28:de:2e:ce:c6:72: 9d:d1:b9:7a:65:70:d1:dc:cd:63:22:0e:0a:86:10: 73:c4:05:89:ad:87:e3:32:24:2b:6a:85:0f:3a:e9: 57:c9:62:12:72:76:5a:dc:d8:e2:ea:f1:18:7c:6d: ba:5e:6d:c0:77:cd:8a:94:bb:2f:fc:25:4c:3d:93: 58:87:e1:f6:8e:59:44:aa:c3:af:00:d5:23:8d:7c: 0c:5c:1e:ee:ae:a4:ab:d4:37:32:d1:39:75:72:e1: 28:1e:21:55:32:e5:3f:fa:12:24:f4:49:aa:f0:c7: 24:7f:94:40:61:36:f6:af:25:db:c6:66:19:ca:d1: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F6:0C:E2:F5:5A:DC:9E:A7:77:2C:8D:B1:09:A5:AE:20:58:F0:42 X509v3 Authority Key Identifier: keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d6:63:cc:17:da:f1:f3:7c:f7:dd:ec:d6:b7:d5:5f:e6:88: 6a:bc:8a:3e:1a:84:bb:e2:27:a6:e0:70:b8:58:62:e3:30:53: 93:0b:16:cf:6f:42:f4:11:e3:3b:ac:46:3e:6f:17:6d:27:e8: 10:50:b5:2f:46:6f:ef:d3:4e:3a:8f:89:b6:ca:ec:86:92:a3: 6e:db:4f:b2:94:51:40:79:47:ca:65:4f:bd:cf:cf:ce:60:93: 4a:c5:20:34:cb:66:6d:2c:e0:ff:48:17:1d:c8:f1:f5:3f:e5: 9d:47:01:5c:d8:69:79:4c:2f:21:73:17:5d:25:de:cc:ca:cf: d2:aa:6a:18:84:5e:45:1f:bc:76:f9:00:4b:3c:5d:84:20:15: eb:76:38:75:2f:0c:39:6d:35:57:db:28:d2:ba:01:18:a1:ce: 4c:9d:3b:0a:c5:e7:08:f3:15:09:e4:69:26:65:7b:e8:2e:03: c9:6b:2b:88:64:af:b2:d1:12:a6:7f:73:7a:e7:7e:98:bd:77: f9:b7:9e:43:2b:ce:28:aa:fc:b7:d3:1d:72:ee:3e:92:6f:7a: 01:ff:fa:7e:45:d9:76:4d:6c:38:74:ad:1c:e6:ad:b2:60:ad: cd:ed:9b:61:6b:cb:33:60:f7:d9:2b:c9:70:57:7e:41:8e:ee: 08:2d:76:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RUNBNDExMC8GA1UEBRMoOEMxQzE0REMxNjc0REJCNjhCNDk0MzAxNTg3QjNEMkY5 OEVENzAxQjAeFw0yNDA1MTkwODMwMjRaFw0yNDA1MjYwODMwMjRaMBgxFjAUBgNV BAMTDTY2NDliOGEwLTZkMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1BLJvkWZKGtxkY/d+ZjZjbvTO+mutb4UriRnfDTFxX8ITd36WQ0nAZtWBGavY wH+e3dHRABv8DuCanHLzQKmqD+iM1iRiL1TCXv2GRrFvmWK/BoZEWyl0sGE8UyBN 8MjwEw0wDV8sj2FpQ8Rcb2/Y6Z1NISjck8oD9UzeIV0WbCjeLs7Gcp3RuXplcNHc zWMiDgqGEHPEBYmth+MyJCtqhQ866VfJYhJydlrc2OLq8Rh8bbpebcB3zYqUuy/8 JUw9k1iH4faOWUSqw68A1SONfAxcHu6upKvUNzLROXVy4SgeIVUy5T/6EiT0Sarw xyR/lEBhNvavJdvGZhnK0WldAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD/YM4vVa 3J6ndyyNsQmlriBY8EIwHwYDVR0jBBgwFoAUjBwU3BZ027aLSUMBWHs9L5jtcBsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFQ0E0LzQ4NUYzMzZBRENF RDExRUVCQkJGNDAyRkM0RjlBRTAyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNC cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvakJ3VTNCWjAyN2FMU1VNQldIczlMNWp0Y0JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF Q0E0LzQ4NUYzMzZBRENFRDExRUVCQkJGNDAyRkM0RjlBRTAyL2pCd1UzQlowMjdh TFNVTUJXSHM5TDVqdGNCcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABDWY8wX2vHzfPfd7Na31V/miGq8ij4ahLviJ6bgcLhYYuMwU5MLFs9v QvQR4zusRj5vF20n6BBQtS9Gb+/TTjqPibbK7IaSo27bT7KUUUB5R8plT73Pz85g k0rFIDTLZm0s4P9IFx3I8fU/5Z1HAVzYaXlMLyFzF10l3szKz9KqahiEXkUfvHb5 AEs8XYQgFet2OHUvDDltNVfbKNK6ARihzkydOwrF5wjzFQnkaSZle+guA8lrK4hk r7LREqZ/c3rnfpi9d/m3nkMrziiq/LfTHXLuPpJvegH/+n5F2XZNbDh0rRzmrbJg rc3tm2FryzNg99kryXBXfkGO7ggtdqY= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org