$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json) Hash identifier: 0xn3//LoF2bthn00aAUg7d4X2XWdyCPHfMVzVDM1zvU= Subject key identifier: 45:55:E0:D9:1E:C2:2C:DB:C9:03:D4:B6:EC:45:88:92:5D:3B:4A:82 Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft Manifest number: 026D Signing time: Sun 19 May 2024 03:46:32 +0000 Manifest this update: Sun 19 May 2024 03:46:32 +0000 Manifest next update: Sun 26 May 2024 03:46:32 +0000 Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: gsgcmGZcC543tYI0VXT3Sxb010pChU7r43+zjzWBI5U=) 2: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: 5X8g5tV4bYQifF8IkjHRjLjcJBh1/+GRN4/WYXiq2e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Validity Not Before: May 19 03:46:32 2024 GMT Not After : May 26 03:46:32 2024 GMT Subject: CN=66497618-fa63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:4a:17:c1:47:1b:7e:a2:41:ad:70:8b:f3: 17:80:81:8b:4a:b1:b8:93:e3:7e:32:48:e2:08:2d: f3:4c:1a:56:64:db:69:45:5f:a5:de:89:49:30:b7: 3e:ee:20:1d:8c:59:0a:9c:f7:e1:46:b3:22:c2:f4: df:76:7e:db:30:98:e2:3c:d2:65:19:71:21:6b:e1: 2a:fa:95:34:45:b5:0c:12:f6:b0:06:ea:16:0c:9e: ae:d7:5e:3b:e6:0d:39:97:37:8e:77:7f:d3:d3:92: 7d:a3:d7:20:ea:72:7e:b3:df:33:1d:b0:4f:c5:c2: da:b5:a6:1d:4a:ac:d8:f6:31:44:39:2d:16:32:df: c0:83:03:67:b5:e6:7e:1e:48:4e:f7:46:b8:d7:c0: 83:5e:22:4a:91:57:4a:f8:d9:4d:35:75:37:65:8c: 1d:87:7f:7e:bd:5b:cd:cc:3d:c1:3e:2e:59:1d:4a: 00:c2:79:02:36:d2:06:9a:92:05:6c:4e:2e:83:de: f4:e8:8b:08:7d:4f:27:00:88:7a:ab:8b:7d:62:5e: cf:d3:e4:11:95:02:ec:ed:fa:3c:5f:fe:7b:b1:ae: 7d:67:55:3a:de:18:2e:37:65:61:e4:ce:7a:bc:b5: 53:48:00:5d:03:49:f4:d3:1a:53:a1:da:18:ea:fa: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:E0:D9:1E:C2:2C:DB:C9:03:D4:B6:EC:45:88:92:5D:3B:4A:82 X509v3 Authority Key Identifier: keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:a0:1e:fe:50:a3:ad:86:de:0a:98:76:8f:38:ff:11:cb: fc:81:1d:b2:d6:af:32:54:6a:38:fb:05:db:82:d0:70:f1:c2: 00:2f:a9:fe:56:c9:1a:70:19:f7:a7:9d:17:e5:e7:47:aa:0a: d6:f6:5a:f8:ae:f7:39:60:d3:e3:b8:e1:85:cb:a9:10:38:32: 9a:30:e9:a3:7d:95:f1:01:f1:c6:81:7a:8f:99:14:70:9c:3e: f7:65:8b:b8:19:17:ab:82:3f:b4:86:08:44:ca:a3:4a:27:f8: 9a:da:3e:ca:9f:e6:6b:4c:a3:b1:93:0f:3a:90:0e:7c:aa:d4: ff:bc:2d:f4:e8:be:e4:a6:12:16:22:f4:81:ba:55:c1:66:bd: f2:94:8e:44:81:12:6a:57:21:8a:45:36:a7:05:2d:71:fc:57: 94:16:23:63:f5:38:c1:5b:b3:3f:83:ff:6e:7d:90:85:c0:1e: 21:87:3b:1b:a1:5f:7a:56:b3:b5:03:48:be:cb:48:ba:95:14: 1c:9d:9e:54:96:01:3d:1a:b4:fc:89:94:36:01:04:bd:f7:4d: d2:19:6c:7f:00:42:b7:e7:26:96:bc:7c:32:8a:f5:55:e0:af: f4:8e:3b:f1:7b:18:42:a3:de:9d:ec:6f:46:20:98:4d:11:2a: 73:75:1e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz RENBNjFCMUMwHhcNMjQwNTE5MDM0NjMyWhcNMjQwNTI2MDM0NjMyWjAYMRYwFAYD VQQDEw02NjQ5NzYxOC1mYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A5KF8FHG36iQa1wi/MXgIGLSrG4k+N+MkjiCC3zTBpWZNtpRV+l3olJMLc+ 7iAdjFkKnPfhRrMiwvTfdn7bMJjiPNJlGXEha+Eq+pU0RbUMEvawBuoWDJ6u1147 5g05lzeOd3/T05J9o9cg6nJ+s98zHbBPxcLataYdSqzY9jFEOS0WMt/AgwNnteZ+ HkhO90a418CDXiJKkVdK+NlNNXU3ZYwdh39+vVvNzD3BPi5ZHUoAwnkCNtIGmpIF bE4ug9706IsIfU8nAIh6q4t9Yl7P0+QRlQLs7fo8X/57sa59Z1U63hguN2Vh5M56 vLVTSABdA0n00xpTodoY6vom7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVV4Nke wizbyQPUtuxFiJJdO0qCMB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2 MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDBDQy9CNEE3Q0NFOEM2MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lX YlVOeE83Rzg2T0E5eW1HeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxZaAe/lCjrYbeCph2jzj/Ecv8gR2y1q8yVGo4+wXbgtBw8cIAL6n+ VskacBn3p50X5edHqgrW9lr4rvc5YNPjuOGFy6kQODKaMOmjfZXxAfHGgXqPmRRw nD73ZYu4GRergj+0hghEyqNKJ/ia2j7Kn+ZrTKOxkw86kA58qtT/vC306L7kphIW IvSBulXBZr3ylI5EgRJqVyGKRTanBS1x/FeUFiNj9TjBW7M/g/9ufZCFwB4hhzsb oV96VrO1A0i+y0i6lRQcnZ5UlgE9GrT8iZQ2AQS9903SGWx/AEK35yaWvHwyivVV 4K/0jjvxexhCo96d7G9GIJhNESpzdR4t -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org