$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft File: jC90p60r0PXvsQZOS5CYbXbMF4U.mft (raw, json) Hash identifier: cfmktxmZfOhEqSJXjZVRe1poX99+xUjHCDtHt6z2Etw= Subject key identifier: 1F:6A:A0:CE:0F:6B:2F:B4:FA:A3:BD:CE:80:CF:36:65:2C:FD:33:99 Authority key identifier: 8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85 Certificate issuer: /CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft Manifest number: 04C1 Signing time: Sun 19 May 2024 01:50:12 +0000 Manifest this update: Sun 19 May 2024 01:50:11 +0000 Manifest next update: Sun 26 May 2024 01:50:11 +0000 Files and hashes: 1: jC90p60r0PXvsQZOS5CYbXbMF4U.crl (hash: HpSmwLSrHMlL3ofyB4bpmbaFtJqL2dtU0LZpWSPoRoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785 Validity Not Before: May 19 01:50:11 2024 GMT Not After : May 26 01:50:11 2024 GMT Subject: CN=66495ad3-0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:74:03:1c:0e:37:77:4a:40:fa:7d:43:a6:74: a2:11:fc:8c:03:55:c6:26:f2:1a:62:3b:5b:f4:03: 72:32:1a:80:8d:c4:76:65:c1:67:10:74:68:3e:fa: d2:85:5a:1c:bb:e6:e9:5c:22:63:84:bd:d6:cb:bd: 0c:26:20:8c:3d:38:ce:a6:83:3a:2c:f0:d5:3d:86: fa:9e:47:50:11:1e:9f:a6:9f:78:4d:bd:76:1a:cb: b9:59:bc:5f:c8:91:1b:51:b9:6d:eb:24:c0:8f:da: 5a:29:4b:d4:ca:58:02:86:03:c7:56:0c:15:1f:e3: 25:e0:79:b2:2d:25:e1:e7:27:6f:26:86:e5:59:85: 7e:01:6c:f3:13:dc:53:d2:21:41:cb:c0:ac:77:07: f4:dd:00:72:a7:b4:a8:14:04:82:f2:ce:9f:de:b8: 2a:48:9c:b8:22:a1:b1:df:68:bc:89:bc:88:0d:1b: 00:b1:c2:4e:6e:d8:c5:c2:ed:26:5a:b0:6c:7b:dd: 49:b9:4e:9d:ea:c7:5c:30:36:29:5f:a9:3c:eb:61: 31:e0:13:d9:fa:94:82:87:e1:8d:32:d6:a4:4a:84: 86:de:03:47:5e:4e:9c:5f:6e:9c:43:70:3a:02:1c: e6:3f:98:23:cd:2c:2a:56:60:f5:f2:c9:94:17:37: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6A:A0:CE:0F:6B:2F:B4:FA:A3:BD:CE:80:CF:36:65:2C:FD:33:99 X509v3 Authority Key Identifier: keyid:8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:90:1f:b3:f6:65:5f:3d:0a:41:73:fa:0d:13:88:24:d5:c4: e5:d7:1e:b5:83:d0:b5:7c:81:cd:d0:1c:ea:c8:da:2b:1d:4c: 2d:80:33:f4:9e:7b:62:f9:0b:b3:25:15:d6:99:8b:85:ae:aa: b8:db:5d:d7:3e:8a:2f:a6:22:88:b9:32:a7:8f:8c:ce:c1:e0: 31:8a:77:f5:2b:9c:70:a9:76:08:93:d2:2b:e0:f8:1a:41:b1: 20:83:41:93:94:bb:38:d8:f9:9f:19:44:cc:0f:52:6e:ad:27: 81:8d:bd:f6:38:34:da:6c:fc:a5:31:a2:d4:f8:3e:34:74:74: cc:24:7b:e6:77:52:cf:93:6e:df:4d:e9:7f:49:db:22:d9:dd: 5a:f7:9c:da:a4:d2:28:7f:5c:11:c6:88:7e:15:c6:f1:2b:81: 54:ea:a7:b9:74:c0:53:2f:cb:18:c9:95:99:96:db:40:fa:95: 7e:88:c6:50:cd:c1:3a:99:6f:71:bf:01:c6:a8:40:69:4e:e2: df:dd:e1:d6:85:42:f6:ad:09:f9:78:1b:d3:2f:52:df:1e:12: db:eb:42:83:d8:16:c5:e3:1d:5c:db:fb:9e:d6:64:2e:6d:25: 2a:b9:91:fa:3b:7d:35:4c:89:78:49:09:95:f2:c1:db:b3:7e: b6:fd:71:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKDhDMkY3NEE3QUQyQkQwRjVFRkIxMDY0RTRCOTA5ODZE NzZDQzE3ODUwHhcNMjQwNTE5MDE1MDExWhcNMjQwNTI2MDE1MDExWjAYMRYwFAYD VQQDEw02NjQ5NWFkMy0wOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HQDHA43d0pA+n1DpnSiEfyMA1XGJvIaYjtb9ANyMhqAjcR2ZcFnEHRoPvrS hVocu+bpXCJjhL3Wy70MJiCMPTjOpoM6LPDVPYb6nkdQER6fpp94Tb12Gsu5Wbxf yJEbUblt6yTAj9paKUvUylgChgPHVgwVH+Ml4HmyLSXh5ydvJoblWYV+AWzzE9xT 0iFBy8Csdwf03QByp7SoFASC8s6f3rgqSJy4IqGx32i8ibyIDRsAscJObtjFwu0m WrBse91JuU6d6sdcMDYpX6k862Ex4BPZ+pSCh+GNMtakSoSG3gNHXk6cX26cQ3A6 AhzmP5gjzSwqVmD18smUFzeoHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9qoM4P ay+0+qO9zoDPNmUs/TOZMB8GA1UdIwQYMBaAFIwvdKetK9D177EGTkuQmG12zBeF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi9qQzkwcDYwcjBQWHZzUVpPUzVDWWJYYk1G NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pDOTBwNjByMFBYdnNRWk9TNUNZYlhiTUY0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi9qQzkwcDYwcjBQ WHZzUVpPUzVDWWJYYk1GNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKkB+z9mVfPQpBc/oNE4gk1cTl1x61g9C1fIHN0BzqyNorHUwtgDP0 nnti+QuzJRXWmYuFrqq4213XPoovpiKIuTKnj4zOweAxinf1K5xwqXYIk9Ir4Pga QbEgg0GTlLs42PmfGUTMD1JurSeBjb32ODTabPylMaLU+D40dHTMJHvmd1LPk27f Tel/Sdsi2d1a95zapNIof1wRxoh+FcbxK4FU6qe5dMBTL8sYyZWZlttA+pV+iMZQ zcE6mW9xvwHGqEBpTuLf3eHWhUL2rQn5eBvTL1LfHhLb60KD2BbF4x1c2/ue1mQu bSUquZH6O301TIl4SQmV8sHbs362/XFl -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org