$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: RSgFbv5Rr2oyOKUcaaPHj9xWJKGUR/zmeaU/t7ehiYY= Subject key identifier: 2C:12:7F:18:DD:9E:1B:1E:A5:0E:34:AB:55:30:71:69:D0:7E:AB:E3 Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 1547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 153E Signing time: Sat 18 May 2024 17:20:11 +0000 Manifest this update: Sat 18 May 2024 17:20:10 +0000 Manifest next update: Sat 25 May 2024 17:20:10 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: CBZ9vEaXUV8/X2lUbTxBCJ9/euhdNfclSIAyacNwsQg=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: /hIx3mzyw1pxmzQaCmAbiibJg316E47fCKoUq9VHgdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5447 (0x1547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: May 18 17:20:10 2024 GMT Not After : May 25 17:20:10 2024 GMT Subject: CN=6648e34a-e5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:a7:b1:c8:46:3e:24:c8:0e:78:88:17:45: 35:37:fd:0a:e3:37:76:2a:6f:bd:cb:90:8f:06:e9: 94:5b:74:f9:ad:47:fc:27:b2:62:93:96:17:23:89: 33:de:f3:97:4c:10:9d:ba:17:29:90:d4:9a:12:30: fb:3a:73:85:36:d5:9b:24:14:55:0e:4b:2c:9e:a0: b5:87:09:ff:b3:9a:6c:8c:13:9c:96:da:55:4f:92: a6:26:30:79:7a:01:c9:a2:1b:0b:de:9d:db:fd:12: 0a:ba:c1:de:b3:ce:5f:30:06:71:a4:e9:c9:22:7e: c5:d4:bc:16:1b:40:fb:4d:3a:43:09:0a:b0:b3:a0: 02:1d:70:f8:11:87:4e:92:35:b8:69:b8:a5:77:4c: df:b3:06:d8:44:21:de:86:fa:19:32:95:a0:ee:0f: bc:b4:f6:3a:8a:34:9e:7a:7a:12:1b:96:cb:71:4b: 02:52:2e:2f:82:28:64:a6:e7:73:43:c3:55:27:a6: 2a:dd:9d:ff:39:f4:29:83:d1:d6:8c:e0:f7:fe:c5: d0:f9:09:1e:36:63:af:91:20:54:df:f5:d3:06:c9: 37:08:c0:22:60:e2:ce:4c:5e:1c:03:02:ee:4d:d2: aa:29:b6:b3:74:7f:75:73:b8:c5:9f:58:69:32:8c: 38:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:12:7F:18:DD:9E:1B:1E:A5:0E:34:AB:55:30:71:69:D0:7E:AB:E3 X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2b:13:6a:de:68:7f:f4:fb:2d:41:22:e7:ea:db:38:8b:33: 76:e2:28:e3:e4:9a:a4:0e:ce:6d:8b:a5:59:0d:ae:da:e3:36: e8:cb:2d:77:8a:89:f9:b4:e6:0a:d9:7e:16:e2:d8:ce:aa:5a: 0b:7e:96:36:b6:22:e8:f5:0d:94:b8:2d:48:a4:7e:5b:4f:bc: 43:15:a3:cb:bf:3c:b0:6a:40:12:ba:3e:f7:c3:2f:66:fe:69: ea:24:c6:d8:ab:13:b2:85:4d:18:a2:68:02:ec:b9:69:b8:f6: 71:67:06:31:8a:6f:74:57:73:93:44:52:a5:0c:dd:05:9d:9e: 93:8d:de:e1:59:97:cf:2c:58:72:c8:d3:55:15:ab:2a:de:70: bd:5c:29:72:e7:a9:c5:7e:a6:5c:06:00:cb:56:10:c1:bb:aa: fb:c1:90:79:12:88:06:5b:63:10:b0:04:04:6f:9f:7f:5a:48: b1:bd:06:69:9a:db:e5:c9:9b:fe:13:ef:03:fe:8b:6d:f1:5a: 9c:1d:d3:9d:0c:70:5c:8b:46:f6:ca:81:2d:e7:3d:d6:a7:04: e5:a3:85:ea:46:4c:78:93:93:99:55:09:14:6e:1a:14:c8:e4: 55:a9:a3:0b:27:45:95:35:1d:12:89:eb:14:fc:39:93:ff:fb: c6:e4:cc:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjQwNTE4MTcyMDEwWhcNMjQwNTI1MTcyMDEwWjAYMRYwFAYD VQQDEw02NjQ4ZTM0YS1lNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDCnschGPiTIDniIF0U1N/0K4zd2Km+9y5CPBumUW3T5rUf8J7Jik5YXI4kz 3vOXTBCduhcpkNSaEjD7OnOFNtWbJBRVDkssnqC1hwn/s5psjBOcltpVT5KmJjB5 egHJohsL3p3b/RIKusHes85fMAZxpOnJIn7F1LwWG0D7TTpDCQqws6ACHXD4EYdO kjW4abild0zfswbYRCHehvoZMpWg7g+8tPY6ijSeenoSG5bLcUsCUi4vgihkpudz Q8NVJ6Yq3Z3/OfQpg9HWjOD3/sXQ+QkeNmOvkSBU3/XTBsk3CMAiYOLOTF4cAwLu TdKqKbazdH91c7jFn1hpMow4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwSfxjd nhsepQ40q1UwcWnQfqvjMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEKxNq3mh/9PstQSLn6ts4izN24ijj5JqkDs5ti6VZDa7a4zboyy13 ion5tOYK2X4W4tjOqloLfpY2tiLo9Q2UuC1IpH5bT7xDFaPLvzywakASuj73wy9m /mnqJMbYqxOyhU0YomgC7LlpuPZxZwYxim90V3OTRFKlDN0FnZ6Tjd7hWZfPLFhy yNNVFasq3nC9XCly56nFfqZcBgDLVhDBu6r7wZB5EogGW2MQsAQEb59/WkixvQZp mtvlyZv+E+8D/ott8VqcHdOdDHBci0b2yoEt5z3WpwTlo4XqRkx4k5OZVQkUbhoU yORVqaMLJ0WVNR0SiesU/DmT//vG5Mx4 -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org