$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: 0sMjcGNWMQRVoYJfOMLrerpKj8c1t9fkZ/cxrODHbw8= Subject key identifier: C5:5C:BD:FE:13:7E:05:85:3D:E1:5D:FA:0A:3F:C6:25:59:22:F5:C2 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 013A Signing time: Sun 19 May 2024 05:00:55 +0000 Manifest this update: Sun 19 May 2024 05:00:54 +0000 Manifest next update: Sun 26 May 2024 05:00:54 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: cE1DV+66PZtf9p4xlQ6/92bZ6Jt0+dqEQGDuP3i4D2Q=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mQyboEeKF6QIHVKg2jTKXrJTpGQjqbX5/841KTylhfs=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: CIpEqK6rOD7WjV26lmPk8kBRx6+J+BRU4n7nuS7+Fyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: May 19 05:00:54 2024 GMT Not After : May 26 05:00:54 2024 GMT Subject: CN=66498786-5963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:f5:b8:d6:35:af:8c:9b:35:13:a2:ef:dd: 63:75:22:e2:f2:f5:b4:35:71:e9:8e:8f:2a:e2:a5: 3c:20:aa:5d:4b:3f:10:b1:ad:68:39:da:22:b0:94: 8b:f9:0d:96:9a:78:e4:2b:29:47:c6:60:73:f8:ea: d3:47:c7:a2:1a:d8:fa:f2:e6:84:a8:0c:d1:5b:14: 84:08:d5:f5:f8:ae:a1:e9:38:22:62:da:1e:e2:2d: 5a:7b:e1:75:37:aa:3b:da:de:8a:2b:83:27:99:a1: 33:1c:eb:d5:7c:6a:fe:ef:31:1e:45:e8:86:94:c4: a6:ec:7d:64:60:58:3f:9d:c9:79:db:32:6b:f7:01: 61:9c:a8:a9:91:a2:aa:91:5d:d8:09:2e:da:0f:56: 66:e0:38:88:06:6c:60:1a:fe:59:38:19:68:15:53: 89:60:7c:3c:63:3f:02:b4:d0:31:7d:6f:3c:9b:f4: e1:cf:81:a4:38:8c:9e:df:e6:ff:0e:10:7b:0a:b0: 28:cd:53:ef:75:53:c5:b9:be:54:0f:2a:10:c5:76: 8e:bf:24:16:8d:19:4b:08:49:fd:d8:89:bc:22:dc: d0:2a:f3:99:94:a9:28:de:82:fa:79:c4:23:f5:df: cd:73:6e:58:7e:d9:3a:6e:c3:e1:01:e6:f3:94:3a: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:BD:FE:13:7E:05:85:3D:E1:5D:FA:0A:3F:C6:25:59:22:F5:C2 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9f:3f:33:f3:db:97:54:37:46:4b:7b:27:06:a8:f0:68:e9: e3:be:c1:68:cd:2b:87:1e:c3:fe:6b:a3:cd:c0:88:08:84:16: e0:53:4c:2b:62:71:8d:a1:4e:80:e1:c7:90:0d:cc:ed:25:e2: 0e:cf:35:04:a2:58:33:2a:01:17:bb:fe:12:9f:be:f8:f7:68: 10:f8:d3:bc:5a:50:15:71:53:c9:cf:0a:4b:d9:c6:cd:c3:ee: 9a:e1:1f:c5:88:a1:97:7b:38:48:62:96:17:d0:33:af:c7:a2: 80:2e:02:62:c8:2b:17:a5:69:86:04:70:8d:14:24:78:1e:e3: c7:f5:10:ed:b4:2c:9c:34:70:03:0a:c7:01:03:b5:17:d9:e2: e5:e0:7a:b9:ef:c8:15:0c:b1:27:93:39:f2:3d:62:a4:6f:cd: 6b:dd:b5:51:bc:e9:75:80:27:a2:de:13:8b:a0:70:bb:18:62: 31:05:e4:cd:ae:ec:2f:00:5e:99:d6:c1:6c:02:c5:85:b8:85: 87:35:49:1e:ca:66:c6:4d:f0:28:8d:99:46:1d:05:ad:54:f7: c9:55:44:7b:c2:0f:53:08:db:67:8d:b4:8e:cb:6a:61:81:41: 46:f1:af:91:d1:10:aa:8d:57:a3:28:06:54:cc:65:6c:77:cf: 72:5c:81:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjQwNTE5MDUwMDU0WhcNMjQwNTI2MDUwMDU0WjAYMRYwFAYD VQQDEw02NjQ5ODc4Ni01OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqj1uNY1r4ybNROi791jdSLi8vW0NXHpjo8q4qU8IKpdSz8Qsa1oOdoisJSL +Q2WmnjkKylHxmBz+OrTR8eiGtj68uaEqAzRWxSECNX1+K6h6TgiYtoe4i1ae+F1 N6o72t6KK4MnmaEzHOvVfGr+7zEeReiGlMSm7H1kYFg/ncl52zJr9wFhnKipkaKq kV3YCS7aD1Zm4DiIBmxgGv5ZOBloFVOJYHw8Yz8CtNAxfW88m/Thz4GkOIye3+b/ DhB7CrAozVPvdVPFub5UDyoQxXaOvyQWjRlLCEn92Im8ItzQKvOZlKko3oL6ecQj 9d/Nc25Yftk6bsPhAebzlDqbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVcvf4T fgWFPeFd+go/xiVZIvXCMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGnz8z89uXVDdGS3snBqjwaOnjvsFozSuHHsP+a6PNwIgIhBbgU0wr YnGNoU6A4ceQDcztJeIOzzUEolgzKgEXu/4Sn77492gQ+NO8WlAVcVPJzwpL2cbN w+6a4R/FiKGXezhIYpYX0DOvx6KALgJiyCsXpWmGBHCNFCR4HuPH9RDttCycNHAD CscBA7UX2eLl4Hq578gVDLEnkznyPWKkb81r3bVRvOl1gCei3hOLoHC7GGIxBeTN ruwvAF6Z1sFsAsWFuIWHNUkeymbGTfAojZlGHQWtVPfJVUR7wg9TCNtnjbSOy2ph gUFG8a+R0RCqjVejKAZUzGVsd89yXIHE -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org