$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json) Hash identifier: y5JaYFffABuY1gBMs23dX9IcVMMpL3H6qpZ4TFRFjj8= Subject key identifier: 51:DE:D8:21:2E:64:A6:71:F9:55:46:B4:A0:A0:5F:21:7C:9C:94:10 Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft Manifest number: 0327 Signing time: Sun 19 May 2024 03:03:35 +0000 Manifest this update: Sun 19 May 2024 03:03:34 +0000 Manifest next update: Sun 26 May 2024 03:03:34 +0000 Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: VaHFR5ayeyqGHAgeEXGMjyYGWml7TeWQNvXxf5W4K7U=) 2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: rZC8SWsdSZa+0Z4sByJs9WyDe0koVPrw0IvazT8IwQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4 Validity Not Before: May 19 03:03:34 2024 GMT Not After : May 26 03:03:34 2024 GMT Subject: CN=66496c06-de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:2e:36:6c:96:5a:e8:1d:e2:ab:21:2d:e6: d3:3d:87:68:15:96:42:d3:f3:14:4c:87:f4:79:4e: cd:97:5a:52:fd:a1:0e:33:e9:7a:ac:9d:78:e6:33: bb:5e:81:a5:24:4a:81:67:1c:d8:c5:e8:88:4f:44: 46:9e:75:6e:ba:c6:c6:85:6e:4c:21:19:62:7a:2d: 76:bd:3f:13:9f:72:58:b3:d7:9f:ef:eb:7e:5e:45: e4:db:72:73:39:f9:52:9e:ce:8b:a3:ee:35:db:9b: 29:40:02:ee:a8:21:6d:6e:25:c2:3b:2e:10:df:77: cf:a8:45:e5:ba:3a:29:bb:5b:8a:46:e5:8f:ce:09: db:d2:95:cc:9d:f5:b9:c0:b3:f9:b2:6c:e1:59:f2: fd:47:b2:7e:cb:fd:ad:e7:0a:9a:25:02:b8:75:73: d2:5c:3b:eb:b0:d3:14:aa:5a:18:d5:5b:3b:32:5b: 90:9c:e1:29:39:b2:52:3e:a6:80:0c:5f:e3:02:90: 9f:fd:d5:c4:7c:46:67:22:59:62:12:79:cd:b6:0a: 82:b9:23:42:a6:24:3e:6d:a8:2c:3a:49:bb:bf:9b: db:61:d0:29:6f:9b:bb:8c:95:d5:4a:26:a1:98:01: ff:d8:7e:0a:57:17:db:b1:ac:9c:b4:65:6b:a5:99: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DE:D8:21:2E:64:A6:71:F9:55:46:B4:A0:A0:5F:21:7C:9C:94:10 X509v3 Authority Key Identifier: keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:e8:3e:0c:eb:10:72:04:94:ea:db:8e:dd:79:f2:29:18: 4f:5e:7d:2c:eb:29:03:3a:d4:f4:33:58:88:f1:df:66:59:b6: 6c:c4:09:5a:40:ab:d3:11:7a:e1:2f:64:35:57:76:80:9a:28: 71:19:f1:c5:e4:65:39:ff:6c:98:bd:26:b7:14:6e:fd:33:cf: ba:f7:a9:7e:b4:42:d6:81:21:81:30:85:e0:02:bf:52:07:94: 77:bf:b7:75:b7:64:e2:88:28:99:4d:c6:b1:15:a9:aa:aa:bb: 98:85:07:74:41:0b:1c:b6:fc:ff:19:a2:0e:3e:89:31:38:9f: 8d:fe:13:12:4d:45:03:31:00:d4:8a:cd:0d:fe:3d:d1:21:13: 7d:03:9e:b4:6f:3d:5e:e5:2a:9a:c7:33:7b:35:2c:fe:4e:b7: 9d:f7:af:f6:0e:f8:93:ba:09:75:22:71:71:21:f8:1d:ad:86: 3c:09:12:43:4d:93:04:05:ed:c6:f8:0f:49:bb:24:a1:c6:d6: 1c:97:76:71:3b:c9:a9:18:95:4c:a7:63:94:54:cd:14:85:81: 16:43:a5:e3:36:00:b1:61:98:a5:5a:f7:44:cd:55:5c:66:c6: 00:69:30:bf:d2:c3:6b:e1:e4:e1:44:e2:af:2e:23:f1:0f:22: ae:79:42:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx QTQ4QUUxQTQwHhcNMjQwNTE5MDMwMzM0WhcNMjQwNTI2MDMwMzM0WjAYMRYwFAYD VQQDEw02NjQ5NmMwNi1kZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1K4uNmyWWugd4qshLebTPYdoFZZC0/MUTIf0eU7Nl1pS/aEOM+l6rJ145jO7 XoGlJEqBZxzYxeiIT0RGnnVuusbGhW5MIRliei12vT8Tn3JYs9ef7+t+XkXk23Jz OflSns6Lo+4125spQALuqCFtbiXCOy4Q33fPqEXlujopu1uKRuWPzgnb0pXMnfW5 wLP5smzhWfL9R7J+y/2t5wqaJQK4dXPSXDvrsNMUqloY1Vs7MluQnOEpObJSPqaA DF/jApCf/dXEfEZnIlliEnnNtgqCuSNCpiQ+bagsOkm7v5vbYdApb5u7jJXVSiah mAH/2H4KVxfbsayctGVrpZkXJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHe2CEu ZKZx+VVGtKCgXyF8nJQQMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcYOg+DOsQcgSU6tuO3XnyKRhPXn0s6ykDOtT0M1iI8d9mWbZsxAla QKvTEXrhL2Q1V3aAmihxGfHF5GU5/2yYvSa3FG79M8+696l+tELWgSGBMIXgAr9S B5R3v7d1t2TiiCiZTcaxFamqqruYhQd0QQsctvz/GaIOPokxOJ+N/hMSTUUDMQDU is0N/j3RIRN9A560bz1e5SqaxzN7NSz+Tred96/2DviTugl1InFxIfgdrYY8CRJD TZMEBe3G+A9JuyShxtYcl3ZxO8mpGJVMp2OUVM0UhYEWQ6XjNgCxYZilWvdEzVVc ZsYAaTC/0sNr4eThROKvLiPxDyKueUKK -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org