$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json) Hash identifier: QqDXFNRFpQ0xvICYoPVPO1v56QTUc/t/exlh4C7c5Nc= Subject key identifier: 88:8E:F6:BA:EA:B4:20:1C:AB:B6:71:FD:97:04:60:F4:E6:10:F1:3A Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft Manifest number: 6B Signing time: Sun 19 May 2024 07:34:02 +0000 Manifest this update: Sun 19 May 2024 07:34:01 +0000 Manifest next update: Sun 26 May 2024 07:34:01 +0000 Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: Ph4ti7Uf1z9ojAR3OhmR7Li5dRUwbHVNMtm0OAxcdh4=) 2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: jtfewHQn+GLjMF6rfukGeqp+UjFiScemVsHfBgWq3gk=) 3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: VZ9M6Lf3V80yWhrUiCpKRYmPs43Mm+Kez5xOL3B6nWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Validity Not Before: May 19 07:34:01 2024 GMT Not After : May 26 07:34:01 2024 GMT Subject: CN=6649ab69-2938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:18:54:c5:9e:3b:68:06:7a:22:da:52:ce: e7:7b:b4:f0:43:5a:71:7e:50:b2:21:34:a1:c0:4d: 9c:13:72:e3:1d:e1:6e:ef:b4:67:6c:ae:b3:12:ed: 1e:00:33:ef:c1:aa:2c:29:91:60:34:2a:9f:f6:88: 1e:6c:fa:e2:35:7d:15:94:b5:00:48:06:6b:b4:eb: 12:91:98:35:50:a4:85:b1:55:21:d8:bb:f2:2d:1c: f1:74:2f:ad:86:83:03:57:38:f2:e0:7f:32:9c:9e: f9:99:12:93:72:c5:a0:c3:4e:a6:78:9c:8e:ad:ea: 0a:d9:45:79:fc:a4:81:97:1e:13:c8:ba:8b:97:28: a2:cd:59:3e:20:48:a1:37:92:ec:10:e1:5f:82:42: 5a:1b:c8:44:70:0f:8d:cf:a6:cd:0e:90:2a:5b:ca: 70:ce:4b:91:71:8a:28:d9:26:5b:37:1d:7e:e3:ee: 75:59:f7:95:d0:cc:82:6a:77:7d:f8:ee:c3:9c:10: b2:50:3e:76:14:ad:a9:7b:a4:bb:fe:a9:c1:f2:1d: fe:26:9b:72:c3:81:da:d0:c4:b2:73:d0:29:80:68: e2:cd:49:4d:ff:10:6a:29:30:b5:33:b8:cb:2f:61: ae:b6:16:c6:7d:74:0d:8e:95:c9:2a:72:f1:94:2c: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8E:F6:BA:EA:B4:20:1C:AB:B6:71:FD:97:04:60:F4:E6:10:F1:3A X509v3 Authority Key Identifier: keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:85:15:33:f5:4a:f1:d9:8f:dc:0a:69:ff:3e:c7:e0:7f:bb: 60:43:59:e8:ac:13:95:9a:00:7a:3e:b7:1b:f3:22:84:21:b8: 14:71:d4:e6:a1:57:e8:99:9a:3a:5b:42:48:41:e5:a0:11:e8: 66:de:f0:84:ac:68:d3:42:89:e9:f2:85:f5:47:1e:87:84:e4: 90:f6:86:d5:f8:e8:2b:07:bb:74:7f:1b:69:c8:28:22:24:97: 8a:ae:9b:c0:e5:59:c7:22:50:dc:92:80:d3:5a:07:7d:e4:27: 53:a3:5e:e8:94:74:05:b9:6f:26:c3:d0:fe:31:8e:fc:b9:9a: b8:a9:54:24:0c:d9:f5:ae:91:4e:24:c2:53:ce:70:20:4f:37: 16:c6:60:c8:37:ab:38:0a:90:f0:ca:b7:f9:18:13:1d:bc:58: 08:ce:32:f5:0b:e0:d9:f8:ab:e4:ba:01:37:5a:09:b0:94:e5: e5:ab:76:f4:d5:26:f1:e0:bf:e0:bb:12:b4:6c:a2:55:41:6f: ec:c6:12:bf:5a:f1:37:e0:ea:1d:fa:bb:80:fd:2b:f3:8c:1b: 57:71:65:7c:6f:36:b8:29:a9:d3:49:bc:ca:00:4d:e4:d3:eb: eb:f8:74:75:18:e3:d8:23:48:19:74:ff:d0:18:d0:55:b7:eb: 87:18:49:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODRCNzExMC8GA1UEBRMoMjZCRDUzQTMxOTk0MEJENTY4N0E2MzQ1QkI1RkUxOTg4 NzM4RTc3ODAeFw0yNDA1MTkwNzM0MDFaFw0yNDA1MjYwNzM0MDFaMBgxFjAUBgNV BAMTDTY2NDlhYjY5LTI5MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgHBhUxZ47aAZ6ItpSzud7tPBDWnF+ULIhNKHATZwTcuMd4W7vtGdsrrMS7R4A M+/BqiwpkWA0Kp/2iB5s+uI1fRWUtQBIBmu06xKRmDVQpIWxVSHYu/ItHPF0L62G gwNXOPLgfzKcnvmZEpNyxaDDTqZ4nI6t6grZRXn8pIGXHhPIuouXKKLNWT4gSKE3 kuwQ4V+CQlobyERwD43Pps0OkCpbynDOS5FxiijZJls3HX7j7nVZ95XQzIJqd334 7sOcELJQPnYUral7pLv+qcHyHf4mm3LDgdrQxLJz0CmAaOLNSU3/EGopMLUzuMsv Ya62FsZ9dA2OlckqcvGULLSpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiI72uuq0 IByrtnH9lwRg9OYQ8TowHwYDVR0jBBgwFoAUJr1ToxmUC9VoemNFu1/hmIc453gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NEI3L0VDQkFFQkEwNzQ3 QjExRUU5QTkwMDk1M0M0RjlBRTAyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnIxVG94bVVDOVZvZW1ORnUxX2htSWM0NTNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NEI3L0VDQkFFQkEwNzQ3QjExRUU5QTkwMDk1M0M0RjlBRTAyL0pyMVRveG1VQzlW b2VtTkZ1MV9obUljNDUzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOFFTP1SvHZj9wKaf8+x+B/u2BDWeisE5WaAHo+txvzIoQhuBRx1Oah V+iZmjpbQkhB5aAR6Gbe8ISsaNNCienyhfVHHoeE5JD2htX46CsHu3R/G2nIKCIk l4qum8DlWcciUNySgNNaB33kJ1OjXuiUdAW5bybD0P4xjvy5mripVCQM2fWukU4k wlPOcCBPNxbGYMg3qzgKkPDKt/kYEx28WAjOMvUL4Nn4q+S6ATdaCbCU5eWrdvTV JvHgv+C7ErRsolVBb+zGEr9a8Tfg6h36u4D9K/OMG1dxZXxvNrgpqdNJvMoATeTT 6+v4dHUY49gjSBl0/9AY0FW364cYSf0= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org