$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: 02VF3qQKAjDkcwfnaKSszgvJQDhGtYADnxknxzNkI1I= Subject key identifier: 15:CC:99:A0:E7:7F:CC:07:B8:91:44:4A:DD:66:1E:0D:86:B0:B4:75 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 5E Signing time: Sun 19 May 2024 07:48:45 +0000 Manifest this update: Sun 19 May 2024 07:48:45 +0000 Manifest next update: Sun 26 May 2024 07:48:45 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: Nzb3KmgmHfvthaNE1nwHU2IwCUoDQ50hxWAjqcbaEPg=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: t9AWerdFoSlx8BlZhPHhMpsds8XRNwYqNkMr3i+O4XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: May 19 07:48:45 2024 GMT Not After : May 26 07:48:45 2024 GMT Subject: CN=6649aedd-8d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:84:d4:21:c2:cb:00:d1:ce:96:6d:d1:b8: c8:2b:cb:ec:95:da:c9:38:54:74:e1:4a:b4:29:a4: 10:20:8f:75:a9:dd:4f:30:b3:5b:0b:ca:d3:22:51: a8:92:ee:12:0e:44:ae:4a:fa:18:e1:68:1c:e7:69: e9:5c:ac:12:9f:1a:54:79:65:59:92:0e:a1:63:53: 59:a4:07:5b:99:78:ce:16:f1:2e:0a:74:96:55:e0: c7:01:9a:03:5d:df:32:4c:71:50:15:4b:c9:ff:e8: 4c:4b:84:de:bc:11:fe:a8:e3:08:3a:a5:98:31:7a: 0b:87:83:fa:ff:0b:ae:28:40:00:ae:d7:1e:6f:de: f1:cf:d6:12:29:57:d0:d5:37:b4:fb:60:cf:c7:ee: 50:7a:b0:ac:fa:38:5c:a1:24:a7:fd:71:20:26:da: 4c:33:d4:a0:cf:5e:b7:0b:b4:64:d8:82:33:21:49: ea:c4:b3:d6:41:f4:ca:16:fa:30:b1:fd:bf:c5:75: 0e:05:d7:ab:2e:fa:df:cb:61:c9:01:5c:91:2c:5d: e6:d6:31:5e:0d:c8:09:45:39:6e:d4:97:2b:51:17: d5:1f:6f:5d:3e:aa:70:2c:bd:6b:12:df:a4:4f:4d: 85:9e:4a:04:60:db:5d:d4:6b:19:6b:a8:ea:39:18: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CC:99:A0:E7:7F:CC:07:B8:91:44:4A:DD:66:1E:0D:86:B0:B4:75 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e6:92:30:fb:42:bf:93:69:69:e8:22:5a:52:c4:2a:3c:60: d9:59:8d:c1:78:1d:19:4f:72:06:fb:7d:dc:6e:cb:f2:1d:58: ea:49:84:85:be:1b:12:a9:c6:b8:92:9e:68:be:9e:1f:4e:cc: 66:e9:3e:9a:15:bd:7d:78:97:0a:40:f1:de:fc:72:c5:a8:f6: f3:97:79:a3:5c:10:3c:7e:36:2e:a0:17:01:cd:aa:23:7d:6f: b2:65:8d:61:bd:81:3b:b1:06:56:f1:47:c9:17:d3:74:83:85: da:32:54:c1:11:68:b1:13:1b:10:f1:f5:47:89:1e:44:be:ea: 92:93:1f:21:0f:3b:4f:71:83:20:8d:0f:03:59:f2:e0:74:e0: f6:27:e9:a0:3a:fc:bd:aa:5b:69:6e:da:bf:f6:08:37:45:ce: 57:1f:2f:8f:5e:e9:66:66:95:40:1b:3b:45:bd:ae:7c:ab:bd: 14:bb:67:e1:5e:3f:b0:1d:0e:30:61:0f:2a:1d:60:b2:04:a6: ea:f9:b1:96:41:a2:ec:8e:74:1f:39:14:5e:ff:5e:f1:60:65: 2f:6b:a9:5f:6c:3d:bf:a9:0e:d4:c7:9f:3e:53:99:53:3a:71: eb:8a:1e:4f:c8:3e:bf:17:05:d5:7f:51:66:de:3c:6d:50:4b: e7:a3:62:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjRGNjExMC8GA1UEBRMoOENDMzA0M0Q0QjQ2QzQ4RjEyNkMwNkU4Mjk3MEVCQjQ4 QjY0NjNDODAeFw0yNDA1MTkwNzQ4NDVaFw0yNDA1MjYwNzQ4NDVaMBgxFjAUBgNV BAMTDTY2NDlhZWRkLThkMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLL4TUIcLLANHOlm3RuMgry+yV2sk4VHThSrQppBAgj3Wp3U8ws1sLytMiUaiS 7hIORK5K+hjhaBznaelcrBKfGlR5ZVmSDqFjU1mkB1uZeM4W8S4KdJZV4McBmgNd 3zJMcVAVS8n/6ExLhN68Ef6o4wg6pZgxeguHg/r/C64oQACu1x5v3vHP1hIpV9DV N7T7YM/H7lB6sKz6OFyhJKf9cSAm2kwz1KDPXrcLtGTYgjMhSerEs9ZB9MoW+jCx /b/FdQ4F16su+t/LYckBXJEsXebWMV4NyAlFOW7UlytRF9Ufb10+qnAsvWsS36RP TYWeSgRg213UaxlrqOo5GKp1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFcyZoOd/ zAe4kURK3WYeDYawtHUwHwYDVR0jBBgwFoAUjMMEPUtGxI8SbAboKXDrtItkY8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2NEY2L0UxQ0YzQzU2OTBE QjExRUVCOUNEMkE3NkM0RjlBRTAyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak1NRVBVdEd4SThTYkFib0tYRHJ0SXRrWThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 NEY2L0UxQ0YzQzU2OTBEQjExRUVCOUNEMkE3NkM0RjlBRTAyL2pNTUVQVXRHeEk4 U2JBYm9LWERydEl0a1k4Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI7mkjD7Qr+TaWnoIlpSxCo8YNlZjcF4HRlPcgb7fdxuy/IdWOpJhIW+ GxKpxriSnmi+nh9OzGbpPpoVvX14lwpA8d78csWo9vOXeaNcEDx+Ni6gFwHNqiN9 b7JljWG9gTuxBlbxR8kX03SDhdoyVMERaLETGxDx9UeJHkS+6pKTHyEPO09xgyCN DwNZ8uB04PYn6aA6/L2qW2lu2r/2CDdFzlcfL49e6WZmlUAbO0W9rnyrvRS7Z+Fe P7AdDjBhDyodYLIEpur5sZZBouyOdB85FF7/XvFgZS9rqV9sPb+pDtTHnz5TmVM6 ceuKHk/IPr8XBdV/UWbePG1QS+ejYkQ= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org