$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: 13I7mfPK3MUbhBEiP3aiX4vZXdgD87WK2RAcT/2woIc= Subject key identifier: 72:8A:2A:49:B5:14:4D:58:01:D4:46:84:F3:95:8B:59:EF:AC:7D:F0 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 011C Signing time: Sun 19 May 2024 05:10:43 +0000 Manifest this update: Sun 19 May 2024 05:10:43 +0000 Manifest next update: Sun 26 May 2024 05:10:43 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: /QjoYVVsmjN8mXqAYjSw3FGmwyFYHrZT0nGii6rPD7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: May 19 05:10:43 2024 GMT Not After : May 26 05:10:43 2024 GMT Subject: CN=664989d3-a13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:f5:4b:67:21:93:c7:d2:36:55:cc:9a:cf: c8:7a:62:d0:57:de:19:db:af:d5:ff:bd:15:31:bf: de:23:ba:73:45:cb:d4:37:b3:07:7b:72:50:da:c9: 38:48:94:f5:1c:56:44:e9:65:7f:9a:4e:5a:fe:74: 48:8e:ef:fd:26:73:15:fb:be:76:cc:87:d1:58:73: 28:ce:a9:0a:9e:af:fd:f6:33:9a:bd:6a:cd:de:9a: 30:44:a3:13:62:c2:4c:4b:1a:26:8d:e0:d0:e9:60: 51:45:68:97:62:37:3e:50:f5:11:3e:9c:15:c8:47: b9:84:d5:16:e3:7d:a1:79:8d:c4:d6:5e:8d:13:4a: 03:a3:51:a3:4d:cb:9d:2e:1e:e4:af:05:92:93:4c: 29:70:63:c9:c7:81:a5:e5:e4:54:de:cf:c6:01:e3: 9c:e8:f9:11:7c:0a:18:b8:aa:6e:8a:21:88:b2:65: f2:51:a5:60:41:1a:44:75:fe:3c:60:c3:1b:4c:d0: d1:f3:12:78:b4:dd:be:5d:79:22:7b:c2:1b:24:e2: e1:88:cc:10:ee:f1:6c:04:96:df:f6:7a:3a:d1:2b: e1:aa:69:8e:23:17:ef:41:45:1c:5f:ba:90:c4:d2: e3:0a:14:a5:ba:c5:65:be:29:14:46:c5:db:37:8a: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8A:2A:49:B5:14:4D:58:01:D4:46:84:F3:95:8B:59:EF:AC:7D:F0 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:05:a5:1f:58:71:52:98:38:5d:69:d7:be:f7:88:18:65: 46:b0:ae:58:f1:26:e3:ac:35:c0:6e:8b:74:d2:d6:db:c5:5d: 93:8d:9f:9c:9d:41:d4:3e:f4:b6:60:e8:eb:fd:aa:8d:2e:1c: f0:39:e2:d3:27:f9:63:07:ce:c0:9c:7e:50:18:57:13:d2:64: 93:f0:51:fb:0d:6b:eb:52:83:26:fd:75:ee:e3:9e:20:4f:14: eb:17:17:c5:2e:ec:15:b4:83:c2:b5:57:cb:85:4a:ce:72:da: 02:da:32:25:57:b3:7e:b0:a7:44:a7:28:30:45:53:fb:bf:23: 8a:50:ff:13:ab:4f:14:1e:9a:eb:fd:3e:a2:ec:1a:f7:3f:e0: a4:79:38:c4:6a:52:7a:2b:0d:db:ba:da:e6:92:c3:81:e6:dc: 48:f7:a8:ec:16:e3:5e:7a:24:35:63:49:b0:2d:fb:71:08:45: af:eb:96:fd:ec:a7:30:bb:d2:87:c2:af:72:61:44:93:12:76: ef:85:7e:10:f9:73:ea:e8:36:a6:48:6a:55:cb:e8:ff:3b:41: 1b:41:9b:a1:6f:30:c9:ed:b4:62:54:1b:02:d0:ac:59:74:6c: cc:6e:9d:39:bd:72:03:00:35:58:0b:7c:8a:48:67:8f:4f:48: 18:9b:33:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjQwNTE5MDUxMDQzWhcNMjQwNTI2MDUxMDQzWjAYMRYwFAYD VQQDEw02NjQ5ODlkMy1hMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14L1S2chk8fSNlXMms/IemLQV94Z26/V/70VMb/eI7pzRcvUN7MHe3JQ2sk4 SJT1HFZE6WV/mk5a/nRIju/9JnMV+752zIfRWHMozqkKnq/99jOavWrN3powRKMT YsJMSxomjeDQ6WBRRWiXYjc+UPURPpwVyEe5hNUW432heY3E1l6NE0oDo1GjTcud Lh7krwWSk0wpcGPJx4Gl5eRU3s/GAeOc6PkRfAoYuKpuiiGIsmXyUaVgQRpEdf48 YMMbTNDR8xJ4tN2+XXkie8IbJOLhiMwQ7vFsBJbf9no60SvhqmmOIxfvQUUcX7qQ xNLjChSlusVlvikURsXbN4rAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKKKkm1 FE1YAdRGhPOVi1nvrH3wMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGAWlH1hxUpg4XWnXvveIGGVGsK5Y8SbjrDXAbot00tbbxV2TjZ+c nUHUPvS2YOjr/aqNLhzwOeLTJ/ljB87AnH5QGFcT0mST8FH7DWvrUoMm/XXu454g TxTrFxfFLuwVtIPCtVfLhUrOctoC2jIlV7N+sKdEpygwRVP7vyOKUP8Tq08UHprr /T6i7Br3P+CkeTjEalJ6Kw3butrmksOB5txI96jsFuNeeiQ1Y0mwLftxCEWv65b9 7Kcwu9KHwq9yYUSTEnbvhX4Q+XPq6DamSGpVy+j/O0EbQZuhbzDJ7bRiVBsC0KxZ dGzMbp05vXIDADVYC3yKSGePT0gYmzNh -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org