$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft File: JLnt5SwDqG4PIShpO2weCock7RU.mft (raw, json) Hash identifier: 8Gi4JrLnGxlLXlpIQcyThWpsiM4yHmP9BmaH4eG+UqI= Subject key identifier: 48:56:00:14:18:59:A1:EA:24:DA:4C:01:A2:8A:3D:7E:D0:79:5B:43 Authority key identifier: 24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 Certificate issuer: /CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft Manifest number: EC Signing time: Sun 19 May 2024 05:56:26 +0000 Manifest this update: Sun 19 May 2024 05:56:25 +0000 Manifest next update: Sun 26 May 2024 05:56:25 +0000 Files and hashes: 1: JLnt5SwDqG4PIShpO2weCock7RU.crl (hash: f28LjUkyLopAbsdbnZ5gCaJcLXcKnl5rNTfee5D1+VU=) 2: 761318C4BCC011EDA67EF02DC4F9AE02.roa (hash: Vhi51G0kthQz1NserbBWgrRj7YKB/vMErCfRdd33dCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF/serialNumber=24B9EDE52C03A86E0F2128693B6C1E0A8724ED15 Validity Not Before: May 19 05:56:25 2024 GMT Not After : May 26 05:56:25 2024 GMT Subject: CN=66499489-0ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:d7:ca:b7:45:21:64:10:b3:b0:b7:0f:91: aa:a8:b1:bc:4b:54:ce:65:6a:7c:4f:c6:57:21:ac: c8:2c:84:fe:4b:b6:c8:f2:d3:8d:81:97:ce:df:f0: 56:ce:9b:55:3f:90:2b:7c:c4:6f:ef:e7:1f:e8:69: e8:50:d3:2e:3f:3c:36:a0:b7:48:96:ff:d0:ca:74: f7:29:aa:eb:6e:da:b7:4c:ff:2b:fb:23:34:0d:9d: 61:9d:cd:ea:c8:08:53:93:eb:7d:61:b9:d0:f7:f5: d4:1c:99:63:6a:73:39:88:8b:dd:3d:c9:66:b8:92: 4b:c5:41:e1:9c:14:1a:cd:02:64:02:96:6f:62:12: 30:22:12:b6:be:a8:77:49:8b:30:49:18:d7:03:5d: 5a:7f:63:41:d7:26:d9:6e:64:d7:05:d6:eb:59:54: 75:68:0a:6d:2a:7e:fb:24:b7:05:4a:fe:f1:31:e7: f3:4e:64:62:ac:1b:26:6f:e4:b1:12:8d:a3:0f:48: e9:0a:70:3c:0a:e2:b0:86:af:4b:2d:73:ed:bc:2f: 57:22:43:37:2d:7b:17:be:86:1c:ec:4d:a9:e0:e1: 0f:0c:ed:fc:29:6a:19:d9:f9:f3:d3:8b:2e:f7:c3: 0c:fd:26:f0:54:de:a9:24:a5:8f:63:d4:94:0f:43: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:56:00:14:18:59:A1:EA:24:DA:4C:01:A2:8A:3D:7E:D0:79:5B:43 X509v3 Authority Key Identifier: keyid:24:B9:ED:E5:2C:03:A8:6E:0F:21:28:69:3B:6C:1E:0A:87:24:ED:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLnt5SwDqG4PIShpO2weCock7RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/JLnt5SwDqG4PIShpO2weCock7RU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:87:99:68:70:dd:99:ca:f3:32:0f:83:aa:d4:a4:c8:e1:a5: 5d:d4:88:d1:e2:cc:fa:b2:fb:a0:74:f4:87:e8:d0:23:0b:a9: 80:92:fe:91:10:3e:6b:8d:ad:ff:7d:c7:02:f9:34:63:61:18: 72:ea:f5:4c:70:a1:e4:89:c2:80:74:fd:c6:97:d7:59:88:a4: d6:87:8d:a3:b5:3c:06:42:21:ee:c0:db:d9:d8:35:89:c3:ef: 5a:57:fb:41:76:ec:1d:84:58:32:20:72:eb:8d:38:81:59:8c: 99:5a:94:44:8f:b7:66:2b:7a:fa:e4:7c:31:ea:15:3f:74:2d: a2:cd:be:38:a6:34:58:1b:de:fd:06:23:08:e6:04:26:f2:4e: 1f:aa:ff:55:88:e0:42:80:1b:a5:39:4b:a7:40:92:ca:00:3c: 4a:75:05:dd:c0:b7:20:42:c5:76:c8:7a:67:f1:b4:ae:d9:6f: f2:03:9f:0a:d2:1b:0f:30:b1:d8:e8:12:af:a2:0d:d2:49:ea: e3:71:44:48:da:f1:59:6b:43:fd:18:41:ec:7d:fb:f6:f0:90: 9a:b6:61:46:6d:db:53:be:77:85:70:77:ee:1b:76:66:e7:1c: e3:6e:bd:b2:dd:59:ae:46:ed:e0:91:d7:09:b5:60:1a:f7:89: e9:58:70:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyQUYxMTAvBgNVBAUTKDI0QjlFREU1MkMwM0E4NkUwRjIxMjg2OTNCNkMxRTBB ODcyNEVEMTUwHhcNMjQwNTE5MDU1NjI1WhcNMjQwNTI2MDU1NjI1WjAYMRYwFAYD VQQDEw02NjQ5OTQ4OS0wZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqjXyrdFIWQQs7C3D5GqqLG8S1TOZWp8T8ZXIazILIT+S7bI8tONgZfO3/BW zptVP5ArfMRv7+cf6GnoUNMuPzw2oLdIlv/QynT3Karrbtq3TP8r+yM0DZ1hnc3q yAhTk+t9YbnQ9/XUHJljanM5iIvdPclmuJJLxUHhnBQazQJkApZvYhIwIhK2vqh3 SYswSRjXA11af2NB1ybZbmTXBdbrWVR1aAptKn77JLcFSv7xMefzTmRirBsmb+Sx Eo2jD0jpCnA8CuKwhq9LLXPtvC9XIkM3LXsXvoYc7E2p4OEPDO38KWoZ2fnz04su 98MM/SbwVN6pJKWPY9SUD0NXSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhWABQY WaHqJNpMAaKKPX7QeVtDMB8GA1UdIwQYMBaAFCS57eUsA6huDyEoaTtsHgqHJO0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJBRi9GM0VGQjg5OEJD QkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFHNFBJU2hwTzJ3ZUNvY2s3 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMbnQ1U3dEcUc0UElTaHBPMndlQ29jazdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9KTG50NVN3RHFH NFBJU2hwTzJ3ZUNvY2s3UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFh5locN2ZyvMyD4Oq1KTI4aVd1IjR4sz6svugdPSH6NAjC6mAkv6R ED5rja3/fccC+TRjYRhy6vVMcKHkicKAdP3Gl9dZiKTWh42jtTwGQiHuwNvZ2DWJ w+9aV/tBduwdhFgyIHLrjTiBWYyZWpREj7dmK3r65Hwx6hU/dC2izb44pjRYG979 BiMI5gQm8k4fqv9ViOBCgBulOUunQJLKADxKdQXdwLcgQsV2yHpn8bSu2W/yA58K 0hsPMLHY6BKvog3SSerjcURI2vFZa0P9GEHsffv28JCatmFGbdtTvneFcHfuG3Zm 5xzjbr2y3VmuRu3gkdcJtWAa94npWHDK -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org