$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: ES1GQAdYe6wjRmVDMFu+IG4lm2WsB1iJk+nuBIdGPX4= Subject key identifier: F8:7E:F4:62:9D:4C:8E:69:1E:FB:01:23:21:DD:DC:BD:BD:0A:55:53 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 130B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 1304 Signing time: Sat 18 May 2024 17:33:46 +0000 Manifest this update: Sat 18 May 2024 17:33:46 +0000 Manifest next update: Sat 25 May 2024 17:33:46 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: 3ykH4ucoUyAvPBw0Q9g+GEg4zmJYqPK4NA9IujbpUk8=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: sYIfv7xuQktipLHZFxJRkRYN5DLPe25l0nv0xkrCfO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4875 (0x130b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: May 18 17:33:46 2024 GMT Not After : May 25 17:33:46 2024 GMT Subject: CN=6648e67a-a379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:ff:a1:c1:a9:af:de:9b:f5:c5:37:38:26: 69:dc:7b:0e:6f:4f:f7:c1:cb:70:8e:0f:e3:6a:e5: 7e:df:42:d0:95:c1:92:96:f9:7f:a3:f2:e5:6d:7b: fb:b9:a4:c4:09:be:7f:d3:08:aa:66:a6:20:ec:7d: 60:e1:44:19:8f:9f:5a:47:16:96:c1:eb:de:63:da: 3c:5c:19:a5:c5:70:52:b3:61:ec:87:5c:69:c0:c3: 1c:d0:42:82:90:81:9a:f4:90:b3:b6:c4:08:7d:c9: ee:1a:ce:c0:67:71:e9:9e:55:7e:94:6a:d1:04:5a: 1f:20:a5:0b:64:62:59:10:11:2e:71:6c:19:55:76: 17:22:00:3c:c1:ed:66:53:6e:46:c9:35:e7:f3:ff: 8b:2e:28:53:a2:33:4a:f0:90:e7:c8:69:34:f9:07: 84:db:4b:6f:3e:20:9d:c4:24:e3:64:0b:7b:54:f8: e2:da:d8:4c:34:06:4a:a5:d1:09:70:f7:c7:fe:30: 0b:83:7d:1d:08:0e:99:2e:9f:e7:c4:e7:30:dd:79: 94:54:34:19:9e:a4:9f:fe:27:a0:ba:7c:3e:14:eb: 1e:04:b4:b7:8f:00:da:ab:df:09:dd:c5:a9:b1:43: 60:6e:3d:76:2b:a6:81:e6:ea:ea:f5:25:64:ee:a1: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:F4:62:9D:4C:8E:69:1E:FB:01:23:21:DD:DC:BD:BD:0A:55:53 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:9c:9a:b5:95:9b:b3:ca:9f:ea:90:ff:ad:0b:ab:d5:b0: 55:b1:51:11:8f:37:b1:b3:f5:6d:3e:a8:bf:71:c1:83:d2:f1: bf:50:d0:5b:35:18:90:5e:75:97:1e:1a:c0:16:47:41:79:60: 89:2e:3c:ea:e8:a7:e1:d1:bd:2e:56:b2:e2:ea:e8:e1:31:64: 00:3e:d9:9c:4d:55:be:28:33:f7:d3:66:d6:1e:d8:fc:27:3f: 1f:8a:c4:c8:e1:ff:75:54:77:de:6c:96:ce:d3:36:29:61:91: 3c:91:fd:f0:18:e4:c8:0b:01:f9:4a:23:24:33:42:ca:05:92: 91:cd:18:9b:c3:c8:f6:5b:de:74:ac:5b:d0:fd:18:11:97:88: 96:b9:47:c3:13:00:13:44:01:72:c7:ab:41:ba:ce:12:a0:bd: fa:90:d7:6f:92:d8:e3:71:6a:f2:30:70:7f:f5:06:a7:5e:ee: 73:f3:a6:05:d8:82:1a:1d:35:81:76:94:31:db:fa:a9:71:5c: 00:36:0b:84:3b:5d:a3:12:18:81:4c:78:d3:8e:55:ec:8b:b7: a0:12:73:c2:e6:89:0e:d9:46:30:a1:97:2d:82:9a:e8:95:29: c0:6f:39:7e:a6:6c:82:5f:05:8a:19:c7:e4:1a:d9:a4:93:4b: 3d:67:b0:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjQwNTE4MTczMzQ2WhcNMjQwNTI1MTczMzQ2WjAYMRYwFAYD VQQDEw02NjQ4ZTY3YS1hMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2//ocGpr96b9cU3OCZp3HsOb0/3wctwjg/jauV+30LQlcGSlvl/o/LlbXv7 uaTECb5/0wiqZqYg7H1g4UQZj59aRxaWweveY9o8XBmlxXBSs2Hsh1xpwMMc0EKC kIGa9JCztsQIfcnuGs7AZ3HpnlV+lGrRBFofIKULZGJZEBEucWwZVXYXIgA8we1m U25GyTXn8/+LLihTojNK8JDnyGk0+QeE20tvPiCdxCTjZAt7VPji2thMNAZKpdEJ cPfH/jALg30dCA6ZLp/nxOcw3XmUVDQZnqSf/iegunw+FOseBLS3jwDaq98J3cWp sUNgbj12K6aB5urq9SVk7qFq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPh+9GKd TI5pHvsBIyHd3L29ClVTMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADAJyatZWbs8qf6pD/rQur1bBVsVERjzexs/VtPqi/ccGD0vG/UNBb NRiQXnWXHhrAFkdBeWCJLjzq6Kfh0b0uVrLi6ujhMWQAPtmcTVW+KDP302bWHtj8 Jz8fisTI4f91VHfebJbO0zYpYZE8kf3wGOTICwH5SiMkM0LKBZKRzRibw8j2W950 rFvQ/RgRl4iWuUfDEwATRAFyx6tBus4SoL36kNdvktjjcWryMHB/9QanXu5z86YF 2IIaHTWBdpQx2/qpcVwANguEO12jEhiBTHjTjlXsi7egEnPC5okO2UYwoZctgpro lSnAbzl+pmyCXwWKGcfkGtmkk0s9Z7C4 -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org