$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: R4scDh8PR/BzjXFIhNr5v8ZITURelOvXhKnPMFyE9i0= Subject key identifier: 4A:2E:BD:25:45:7C:C0:F2:88:3C:FC:4D:C5:82:DB:2F:55:6D:2D:FA Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 88 Signing time: Sat 18 May 2024 23:22:34 +0000 Manifest this update: Sat 18 May 2024 23:22:34 +0000 Manifest next update: Sat 25 May 2024 23:22:34 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: 0KvOfvJ+mX6C1mQYln4RuLsULzLMvXQ1F1Uop08ZXks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: May 18 23:22:34 2024 GMT Not After : May 25 23:22:34 2024 GMT Subject: CN=6649383a-66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:8d:8c:2b:9c:ab:b5:e9:7e:89:0c:ce:87: 3a:51:de:08:a6:8a:f4:03:a3:ae:10:39:2c:ee:26: a2:3a:0e:14:1b:fa:5d:d7:40:ea:96:8a:a9:20:5a: fd:78:8d:84:8c:0a:cb:1b:68:26:8b:22:77:cf:71: d4:8a:c5:2b:f2:96:9d:cf:3d:20:56:20:23:5b:07: 8a:94:3a:23:a2:71:4c:d0:0c:28:46:f5:32:0f:2f: 16:8e:19:36:11:14:2d:5f:c3:28:67:d6:20:7e:7d: ac:07:6d:35:d8:8f:60:58:cc:dc:4a:34:17:6c:63: 2c:52:65:80:21:13:ac:f4:88:71:a5:a4:c5:0c:ee: 2c:1c:07:d1:be:ee:ca:d5:e9:71:2c:74:96:bb:82: c7:4b:c3:61:f0:68:74:fe:d1:01:c3:1b:4f:2b:be: 43:34:72:19:89:f5:84:4f:ef:85:52:9b:ca:63:50: 1c:d2:e1:e1:22:0c:50:1c:cd:a0:93:9a:1a:f0:dc: 8f:b9:18:b3:6d:0f:a2:6d:93:a7:e2:bd:ee:f2:9e: 9e:0d:98:1d:e3:48:28:93:c4:78:12:e9:97:7d:d9: ea:39:74:9c:05:e4:2c:a6:3d:f2:5e:02:60:fd:d4: 3a:c7:25:6c:83:d1:cf:77:47:9d:92:d9:a7:2c:74: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:BD:25:45:7C:C0:F2:88:3C:FC:4D:C5:82:DB:2F:55:6D:2D:FA X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:fe:f5:15:7f:f2:be:94:5c:4e:79:f0:61:e0:5c:d5:42:c4: 3c:ed:41:6e:9a:1e:19:0b:61:40:49:fd:5f:cc:a4:b6:fd:50: 60:c3:ba:a7:38:c7:eb:56:78:1d:52:fd:74:8a:2d:7d:5b:90: 8c:82:e2:57:e7:25:39:ce:aa:61:25:a9:c9:e9:21:4c:f8:fa: 80:5d:61:52:91:11:9b:69:59:78:c5:58:12:ba:3e:ea:8b:7e: 6d:0d:d3:6b:24:6b:2e:0b:a9:20:c8:47:66:4a:8a:f2:f3:c1: d6:52:f0:70:d4:e2:90:d3:4f:d8:b1:bc:27:7f:53:84:60:3c: 3e:c9:9d:61:88:50:77:ef:b1:86:4c:f9:65:14:3d:6c:a6:59: d0:50:34:12:2e:9c:50:3d:a0:5a:09:ff:9a:80:a9:6c:da:d1: be:4c:76:5f:98:9c:96:ba:ae:ec:f4:19:97:5e:31:f5:63:9d: 56:50:2b:85:59:98:4e:b8:a5:85:71:e8:07:71:d4:eb:52:64: 6c:cf:25:3c:7b:7b:7c:82:5b:28:2c:84:98:b1:6c:b1:22:65: 92:27:db:f7:d0:ca:77:d3:6b:45:28:ed:64:83:39:02:ab:8b: 9d:09:2f:90:92:27:14:90:6c:74:f1:d3:d7:fd:89:af:e4:fd: 0e:28:6e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjQwNTE4MjMyMjM0WhcNMjQwNTI1MjMyMjM0WjAYMRYwFAYD VQQDEw02NjQ5MzgzYS02NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI6NjCucq7XpfokMzoc6Ud4Ipor0A6OuEDks7iaiOg4UG/pd10DqloqpIFr9 eI2EjArLG2gmiyJ3z3HUisUr8padzz0gViAjWweKlDojonFM0AwoRvUyDy8Wjhk2 ERQtX8MoZ9Ygfn2sB2012I9gWMzcSjQXbGMsUmWAIROs9IhxpaTFDO4sHAfRvu7K 1elxLHSWu4LHS8Nh8Gh0/tEBwxtPK75DNHIZifWET++FUpvKY1Ac0uHhIgxQHM2g k5oa8NyPuRizbQ+ibZOn4r3u8p6eDZgd40gok8R4EumXfdnqOXScBeQspj3yXgJg /dQ6xyVsg9HPd0edktmnLHTmIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEouvSVF fMDyiDz8TcWC2y9VbS36MB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ/vUVf/K+lFxOefBh4FzVQsQ87UFumh4ZC2FASf1fzKS2/VBgw7qn OMfrVngdUv10ii19W5CMguJX5yU5zqphJanJ6SFM+PqAXWFSkRGbaVl4xVgSuj7q i35tDdNrJGsuC6kgyEdmSory88HWUvBw1OKQ00/Ysbwnf1OEYDw+yZ1hiFB377GG TPllFD1splnQUDQSLpxQPaBaCf+agKls2tG+THZfmJyWuq7s9BmXXjH1Y51WUCuF WZhOuKWFcegHcdTrUmRszyU8e3t8glsoLISYsWyxImWSJ9v30Mp302tFKO1kgzkC q4udCS+QkicUkGx08dPX/Ymv5P0OKG7T -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org