$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: 6kYf9/KLvwMdFHyelQaWIuP1/BJ98WyOW+Ff+o9VFEE= Subject key identifier: A1:07:2A:BD:CF:34:15:CA:29:A0:9E:20:14:A0:C1:0D:C3:34:C6:C9 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 03D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 03D2 Signing time: Sun 19 May 2024 02:22:24 +0000 Manifest this update: Sun 19 May 2024 02:22:23 +0000 Manifest next update: Sun 26 May 2024 02:22:23 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: nqkdOz8oQQaARX3X8ahJh4mQbP7fpjOprZWoy9seock=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: XAafIwpwnRJtcl7yWvt5zKszR8hXThk9kIqKTAzXYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 981 (0x3d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: May 19 02:22:23 2024 GMT Not After : May 26 02:22:23 2024 GMT Subject: CN=66496260-b6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:2f:33:99:19:aa:7b:bf:47:d4:7d:75:36: ce:62:21:8b:f7:5f:07:c8:59:0f:7c:92:f1:d4:53: 5d:55:ef:de:78:2f:b4:f8:0b:27:4a:5a:66:d9:4c: a3:b1:d2:95:9b:7a:19:2b:0d:e0:62:48:8a:a6:50: 59:c4:70:72:e2:4b:b7:6d:d3:98:b3:cb:df:cd:76: f3:de:33:9c:a0:52:50:da:5f:6e:f9:25:fa:1f:f0: 0d:92:f3:ee:54:89:d0:3d:37:72:d9:3b:01:9a:df: ec:3e:d3:18:df:a9:56:f8:4c:e0:69:38:ae:11:13: bf:19:a5:73:d4:2f:2c:98:5a:d7:40:c7:3f:20:87: fb:68:87:c5:0b:e3:f1:09:55:ce:81:46:04:09:45: 4e:84:82:33:32:ac:db:0d:6a:a7:b3:d6:f1:4e:21: c4:52:f3:13:aa:41:86:6b:44:e0:2d:63:df:e9:9d: 58:63:e4:02:09:7b:9e:98:dc:0c:85:10:46:78:59: 7b:ca:36:01:21:71:c8:6c:99:5d:e4:04:f8:e0:1e: dc:2d:d2:46:30:d0:8b:55:b7:db:87:95:8d:48:45: 9f:64:43:96:79:fc:75:6e:8b:d3:12:9a:d6:87:b2: 5e:a0:1b:94:4b:9e:7d:8d:1c:22:f0:ae:19:67:be: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:2A:BD:CF:34:15:CA:29:A0:9E:20:14:A0:C1:0D:C3:34:C6:C9 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:26:d1:5b:85:5e:d1:6a:de:e7:6d:d3:d6:a5:e5:9e:30:39: 91:a4:15:c1:72:5c:f1:ad:4b:71:5c:92:78:b0:bb:0f:30:11: 96:8c:6b:d3:8b:d2:4c:c7:cc:4e:1b:2b:fa:25:2d:bf:98:ef: ac:96:8d:66:86:3c:6a:a6:da:d1:b0:33:f8:9f:81:36:b1:f9: 54:40:ef:0c:7e:1d:f9:d0:73:69:8b:b4:75:ef:0c:c2:bf:7f: cf:2f:c1:b6:a9:22:31:a2:7c:46:30:0e:47:74:b2:24:38:86: 2b:f1:9a:b6:26:25:1d:7e:9e:3f:90:ca:b7:35:92:6f:01:84: 15:b3:8e:17:54:77:16:53:ed:ae:24:56:9d:83:af:73:34:11: d3:fe:77:c3:98:60:cc:25:74:e6:3d:39:cd:57:09:ca:44:53: c4:e1:07:6c:9e:66:0a:41:04:f7:8b:03:69:9b:4f:87:05:0b: a4:47:3a:1b:96:b7:c6:71:8a:45:fc:f7:c1:aa:57:68:a3:f2: b5:23:b1:03:6a:c2:17:a6:5c:68:75:56:fd:74:8f:37:36:85: ed:2e:96:26:96:1c:68:fb:b1:c5:63:0a:0c:0d:3b:16:66:06: 02:c4:8b:5f:c1:54:68:2d:d5:9a:fe:1a:18:6d:c4:3a:34:ec: f2:6d:51:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjQwNTE5MDIyMjIzWhcNMjQwNTI2MDIyMjIzWjAYMRYwFAYD VQQDEw02NjQ5NjI2MC1iNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2YvM5kZqnu/R9R9dTbOYiGL918HyFkPfJLx1FNdVe/eeC+0+AsnSlpm2Uyj sdKVm3oZKw3gYkiKplBZxHBy4ku3bdOYs8vfzXbz3jOcoFJQ2l9u+SX6H/ANkvPu VInQPTdy2TsBmt/sPtMY36lW+EzgaTiuERO/GaVz1C8smFrXQMc/IIf7aIfFC+Px CVXOgUYECUVOhIIzMqzbDWqns9bxTiHEUvMTqkGGa0TgLWPf6Z1YY+QCCXuemNwM hRBGeFl7yjYBIXHIbJld5AT44B7cLdJGMNCLVbfbh5WNSEWfZEOWefx1bovTEprW h7JeoBuUS559jRwi8K4ZZ74uiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEHKr3P NBXKKaCeIBSgwQ3DNMbJMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlJtFbhV7Rat7nbdPWpeWeMDmRpBXBclzxrUtxXJJ4sLsPMBGWjGvT i9JMx8xOGyv6JS2/mO+slo1mhjxqptrRsDP4n4E2sflUQO8Mfh350HNpi7R17wzC v3/PL8G2qSIxonxGMA5HdLIkOIYr8Zq2JiUdfp4/kMq3NZJvAYQVs44XVHcWU+2u JFadg69zNBHT/nfDmGDMJXTmPTnNVwnKRFPE4QdsnmYKQQT3iwNpm0+HBQukRzob lrfGcYpF/PfBqldoo/K1I7EDasIXplxodVb9dI83NoXtLpYmlhxo+7HFYwoMDTsW ZgYCxItfwVRoLdWa/hoYbcQ6NOzybVHy -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org