$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: gt3BnjjZCgNdJQODhzmiyHVhRd5b+TKDst2r/zPy3ug= Subject key identifier: 51:DE:5C:C4:27:F3:2E:F5:60:E0:C4:76:4D:37:DF:F4:80:82:F7:F1 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 46 Signing time: Fri 31 May 2024 09:03:29 +0000 Manifest this update: Fri 31 May 2024 09:03:28 +0000 Manifest next update: Fri 07 Jun 2024 09:03:28 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: UmiJszO7MaV5jXj0LXiO4l3u2rDD64V8L1IZK6Sn6iI=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: May 31 09:03:28 2024 GMT Not After : Jun 7 09:03:28 2024 GMT Subject: CN=66599260-e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:cd:5d:e7:35:77:fc:41:c3:6d:a6:bb:c7: fd:d3:59:b5:a9:50:13:71:e1:37:5b:80:3d:60:ae: cd:d4:aa:45:05:2f:fe:95:d4:88:d9:d5:d9:5e:79: 60:ca:52:bf:02:8d:3c:c6:f3:61:1b:72:e5:19:1f: 87:c4:ba:6e:1b:74:5a:5c:0b:3a:fd:63:34:ed:05: b2:06:94:48:15:d8:a9:d6:78:a5:9f:87:b1:7e:b0: d2:e3:cd:ff:be:17:e4:99:d6:f2:20:91:f0:a3:d0: 73:ce:4a:3a:76:f1:77:f8:1e:b6:7c:de:6c:10:6b: 65:95:4d:0b:b2:68:78:93:d1:4f:76:eb:de:90:28: 03:34:76:b4:e9:38:fa:ff:92:22:d8:8b:70:41:64: fe:fb:4b:47:e3:db:80:6f:5e:e6:83:db:fe:9a:ee: a4:98:ff:c2:98:03:9f:1b:9b:7b:d6:3a:b4:37:93: 3c:7e:33:ad:5c:b1:b0:0a:b9:25:03:b9:de:af:3d: 5f:74:54:5a:cd:09:91:9b:16:b2:68:f0:ee:f8:ef: 07:65:d2:7b:12:e8:1a:58:5c:9c:f3:44:f2:df:91: 33:9c:00:60:b3:4c:16:25:57:a6:98:fa:db:9e:41: 84:cd:0b:8c:60:57:71:6d:a0:a0:fa:cc:b2:22:6c: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DE:5C:C4:27:F3:2E:F5:60:E0:C4:76:4D:37:DF:F4:80:82:F7:F1 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:57:cf:0c:bf:5c:40:7c:33:6f:4f:e4:ac:08:5a:70:11:1f: 5a:33:b0:16:ac:0e:48:9e:1f:f2:c8:ac:9b:fa:4a:c2:11:a9: fa:ea:03:f6:1c:03:e5:10:a6:41:ec:ee:4c:ef:69:b3:6a:5d: a0:8c:b4:e7:23:52:4c:bd:3f:cc:7f:4e:9e:31:0f:b7:5f:3e: 21:e7:51:8b:d7:c9:67:82:4e:31:f3:21:65:56:71:ba:4a:cc: 89:0f:3c:e1:d0:58:66:93:88:1d:c7:9c:2a:d3:1d:ec:ef:0d: 01:1f:51:1e:36:8f:be:07:4a:b7:c0:0a:dd:53:50:00:2b:59: ef:a1:7a:b1:fd:fe:86:e0:62:f7:50:11:92:12:bf:58:76:65: 37:30:57:38:44:8f:03:3d:82:9a:9b:96:b8:4f:5c:95:73:bf: 91:4a:e8:a3:7c:42:25:6c:9f:8f:1f:05:94:8f:82:ba:4e:49: 18:ca:66:5d:c0:10:dc:ad:3f:80:ce:bc:81:8a:c6:58:4b:b3: 50:f1:ce:e2:ae:ff:c2:79:9f:5b:4a:7e:05:b5:08:22:ce:3a: a4:24:8a:06:33:99:81:04:42:e0:96:b0:1b:f4:e9:dc:4c:ef: c5:5b:7c:79:ca:93:0c:25:25:53:16:50:31:a6:12:86:42:dd: 9f:9f:3b:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzNCODExMC8GA1UEBRMoOENCOTZGMERDQTg0QjIwQjQ5QTA3MTI4RTc3NzM3MjA1 OEE2OTA1MzAeFw0yNDA1MzEwOTAzMjhaFw0yNDA2MDcwOTAzMjhaMBgxFjAUBgNV BAMTDTY2NTk5MjYwLWU5NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCix81d5zV3/EHDbaa7x/3TWbWpUBNx4TdbgD1grs3UqkUFL/6V1IjZ1dleeWDK Ur8CjTzG82EbcuUZH4fEum4bdFpcCzr9YzTtBbIGlEgV2KnWeKWfh7F+sNLjzf++ F+SZ1vIgkfCj0HPOSjp28Xf4HrZ83mwQa2WVTQuyaHiT0U92696QKAM0drTpOPr/ kiLYi3BBZP77S0fj24BvXuaD2/6a7qSY/8KYA58bm3vWOrQ3kzx+M61csbAKuSUD ud6vPV90VFrNCZGbFrJo8O747wdl0nsS6BpYXJzzRPLfkTOcAGCzTBYlV6aY+tue QYTNC4xgV3FtoKD6zLIibLY1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUd5cxCfz LvVg4MR2TTff9ICC9/EwHwYDVR0jBBgwFoAUjLlvDcqEsgtJoHEo53c3IFimkFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3M0I4Lzg0QTRBMTBDQjhD NjExRUVBM0FGRDYxMEM0RjlBRTAyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvakxsdkRjcUVzZ3RKb0hFbzUzYzNJRmlta0ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 M0I4Lzg0QTRBMTBDQjhDNjExRUVBM0FGRDYxMEM0RjlBRTAyL2pMbHZEY3FFc2d0 Sm9IRW81M2MzSUZpbWtGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRXzwy/XEB8M29P5KwIWnARH1ozsBasDkieH/LIrJv6SsIRqfrqA/Yc A+UQpkHs7kzvabNqXaCMtOcjUky9P8x/Tp4xD7dfPiHnUYvXyWeCTjHzIWVWcbpK zIkPPOHQWGaTiB3HnCrTHezvDQEfUR42j74HSrfACt1TUAArWe+herH9/obgYvdQ EZISv1h2ZTcwVzhEjwM9gpqblrhPXJVzv5FK6KN8QiVsn48fBZSPgrpOSRjKZl3A ENytP4DOvIGKxlhLs1DxzuKu/8J5n1tKfgW1CCLOOqQkigYzmYEEQuCWsBv06dxM 78VbfHnKkwwlJVMWUDGmEoZC3Z+fOys= -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org