$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: uwfSyQV4aTMsloBdCVdQI4dM5u+rDVzmfWaoBFJUFks= Subject key identifier: 4C:51:19:8A:58:C3:06:ED:1D:F4:22:A4:15:7F:C8:1C:7A:93:B1:E2 Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 68 Signing time: Sun 19 May 2024 07:34:40 +0000 Manifest this update: Sun 19 May 2024 07:34:40 +0000 Manifest next update: Sun 26 May 2024 07:34:40 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: fSdfEM0/UqtwR1DEnXqF1PaB2Gx9vd8sO5R7aclB00k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: May 19 07:34:40 2024 GMT Not After : May 26 07:34:40 2024 GMT Subject: CN=6649ab90-7f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:3b:4f:41:99:ea:7f:54:a1:c5:f7:ac:d9: 36:66:51:66:b4:07:1f:28:05:c6:cf:7f:ea:99:bc: d9:0f:58:72:81:dc:2d:f1:e5:e7:75:52:80:35:99: ec:98:4f:c7:87:50:43:37:a8:de:10:75:68:74:c7: 5e:23:4e:2f:13:d9:07:79:a4:0d:0a:9a:cb:31:84: 41:7d:8d:30:09:47:4f:63:a1:0c:8f:73:9e:e8:6d: 8b:ae:16:f6:1f:ae:b8:8b:ec:ad:97:4d:d4:5f:9a: 2a:c9:e9:44:e5:c0:74:58:4d:30:0c:cf:51:d5:35: 8a:2e:aa:a6:1b:89:1c:95:eb:9d:ba:e2:fb:80:58: bb:a4:8f:32:53:a7:a2:72:ac:65:c7:3c:24:7a:cd: 6d:af:6b:82:48:19:30:df:8c:66:58:83:48:31:e0: 4b:18:2e:96:21:ea:76:29:74:fd:24:44:fb:17:0e: 35:2c:bf:5e:80:7f:60:51:05:97:56:0a:76:cc:d2: 53:03:d7:43:74:fd:a2:1c:2b:50:cc:6d:22:58:fc: fd:40:00:58:1f:cb:c1:e7:9a:c6:b1:0a:d3:e7:06: ef:b9:71:7a:0b:13:0f:bc:20:29:1c:8c:ea:64:e4: 74:35:64:58:45:3f:65:5f:2b:c3:9b:9b:96:c4:cd: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:51:19:8A:58:C3:06:ED:1D:F4:22:A4:15:7F:C8:1C:7A:93:B1:E2 X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f1:3c:6a:92:a0:fb:e8:a8:15:a9:aa:e3:fc:70:ff:10:b9: 4e:24:42:89:5e:05:51:65:14:1e:38:36:e1:2c:b8:ce:f9:d1: 65:8c:a7:d3:ce:f1:7b:ca:b1:9b:2c:62:29:51:99:40:b8:0f: b7:7e:44:22:3a:5e:c2:e2:91:ec:55:eb:b3:58:be:8b:96:a4: 80:d3:05:4a:3c:6c:42:f9:54:fc:a6:e4:a9:59:d9:91:cd:51: 72:e3:84:26:78:35:ab:af:3f:6d:8d:42:05:b0:64:86:6d:4b: a2:80:3f:53:32:2e:21:ee:81:87:04:6a:7a:69:77:4c:c4:7a: a3:4e:34:8d:5e:b0:77:ca:cf:42:f1:af:64:6b:6c:a5:36:6e: 0f:4c:d2:40:1b:f1:47:e4:3f:e2:d1:ca:bd:57:8a:06:db:33: c2:3e:32:fb:b0:6d:6e:84:e1:52:b7:b2:8f:e4:ca:d8:96:8d: e0:a6:48:f6:46:29:18:12:ca:cd:58:b6:c0:4d:24:52:8f:aa: c3:5d:1c:56:1f:e5:ab:1c:7b:ac:2e:5c:7c:83:35:20:05:7c: 58:1e:df:4c:c8:5a:ba:28:9d:9d:50:32:0b:01:fb:46:cf:95: 15:83:2c:87:9e:a8:fe:4f:72:99:68:33:5f:ee:f8:1b:a7:a8: 40:84:32:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTJBNTExMC8GA1UEBRMoOENEQ0U1NzhBMjM5RTU4Q0U3RkU3NjgzQkI0NzY5RjlE QzU1MjJCQTAeFw0yNDA1MTkwNzM0NDBaFw0yNDA1MjYwNzM0NDBaMBgxFjAUBgNV BAMTDTY2NDlhYjkwLTdmMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6IDtPQZnqf1Shxfes2TZmUWa0Bx8oBcbPf+qZvNkPWHKB3C3x5ed1UoA1meyY T8eHUEM3qN4QdWh0x14jTi8T2Qd5pA0KmssxhEF9jTAJR09joQyPc57obYuuFvYf rriL7K2XTdRfmirJ6UTlwHRYTTAMz1HVNYouqqYbiRyV65264vuAWLukjzJTp6Jy rGXHPCR6zW2va4JIGTDfjGZYg0gx4EsYLpYh6nYpdP0kRPsXDjUsv16Af2BRBZdW CnbM0lMD10N0/aIcK1DMbSJY/P1AAFgfy8HnmsaxCtPnBu+5cXoLEw+8ICkcjOpk 5HQ1ZFhFP2VfK8Obm5bEzRWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTFEZiljD Bu0d9CKkFX/IHHqTseIwHwYDVR0jBBgwFoAUjNzleKI55Yzn/naDu0dp+dxVIrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMkE1L0ExQzA0RDBBNzZD QjExRUU5M0Y1ODc0N0M0RjlBRTAyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vkly by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak56bGVLSTU1WXpuX25hRHUwZHAtZHhWSXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MkE1L0ExQzA0RDBBNzZDQjExRUU5M0Y1ODc0N0M0RjlBRTAyL2pOemxlS0k1NVl6 bl9uYUR1MGRwLWR4Vklyby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPxPGqSoPvoqBWpquP8cP8QuU4kQoleBVFlFB44NuEsuM750WWMp9PO 8XvKsZssYilRmUC4D7d+RCI6XsLikexV67NYvouWpIDTBUo8bEL5VPym5KlZ2ZHN UXLjhCZ4NauvP22NQgWwZIZtS6KAP1MyLiHugYcEanppd0zEeqNONI1esHfKz0Lx r2RrbKU2bg9M0kAb8UfkP+LRyr1XigbbM8I+MvuwbW6E4VK3so/kytiWjeCmSPZG KRgSys1YtsBNJFKPqsNdHFYf5asce6wuXHyDNSAFfFge30zIWroonZ1QMgsB+0bP lRWDLIeeqP5PcploM1/u+BunqECEMqc= -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org