$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: HFEyNeOwMXx/aJgLiME6AZzsPCyhvCNEZIyizOhHWqs= Subject key identifier: ED:24:96:CC:A2:6A:ED:B0:11:B1:60:F5:26:98:51:9D:EC:96:83:03 Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 01E2 Signing time: Sun 19 May 2024 04:17:23 +0000 Manifest this update: Sun 19 May 2024 04:17:22 +0000 Manifest next update: Sun 26 May 2024 04:17:22 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: NQXfBeyTrRMqLLwM/NxrMOu5jo0Yr5xICluczKZ+7l4=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: jgmJA/Q4HePnHB1tUDrrt29C9GKJ1/meaw2KgH9ecfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Validity Not Before: May 19 04:17:22 2024 GMT Not After : May 26 04:17:22 2024 GMT Subject: CN=66497d53-b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:21:28:59:ec:05:e9:17:4f:ed:4d:d8:6a: 04:21:67:51:3f:8c:b0:ea:85:92:15:16:3a:92:08: 2c:a6:1f:1a:32:78:0b:cf:91:30:20:74:ff:9e:9f: d7:8c:69:14:6b:5d:59:ab:61:6c:26:54:8a:8f:28: c8:39:29:ab:52:a5:77:24:d3:43:49:90:ef:46:04: 03:79:14:e1:65:2f:7c:9b:06:83:23:37:35:65:3d: 0b:5a:be:18:ef:2c:b9:47:34:d7:b4:6e:ba:4e:c8: ba:d2:8f:63:c1:75:ec:d2:d5:87:50:e6:d6:dd:16: 48:95:4b:29:8d:60:b7:15:5e:50:97:67:c2:a1:5e: da:c9:da:8b:19:fb:8d:02:67:c0:b9:c9:3a:44:9a: 2f:c2:07:4b:60:55:9d:bf:05:ca:d4:cd:8a:5b:aa: 5c:2e:fd:3c:bf:e2:3a:e9:ad:07:c0:3f:4e:22:72: 2a:33:87:da:1c:6b:cc:1b:4e:d7:c9:02:44:fa:6f: 33:aa:7a:0d:c8:71:85:7b:69:6e:a2:5a:57:8e:31: ce:e5:70:a0:4e:ae:96:f9:55:bc:5d:26:e5:8e:a4: 13:ce:63:13:d8:ee:f6:51:f3:90:94:c7:06:45:12: 13:de:3f:c0:34:07:59:fd:c4:86:d9:0e:99:9d:a6: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:96:CC:A2:6A:ED:B0:11:B1:60:F5:26:98:51:9D:EC:96:83:03 X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:c2:54:98:98:4b:85:29:73:d4:24:3f:1d:69:f1:71:d5: 1b:44:8e:04:b6:bd:d9:29:bc:85:9c:6b:67:a7:7f:2d:51:da: 13:38:05:a0:b8:3d:77:1f:95:d7:e7:c1:ee:c0:6a:87:92:02: 36:77:d5:a8:26:40:7d:12:9c:ab:79:3a:43:bb:3f:b8:74:78: 00:d1:f0:f6:f9:c7:ed:82:ef:f9:3b:74:4c:4b:7f:4a:55:db: 39:93:8b:27:ed:8e:40:e2:33:ad:ab:f3:2a:d2:ef:12:2a:f7: 2b:03:35:fe:b8:50:c1:55:20:02:8a:20:8a:95:83:bc:2d:14: 36:5c:26:b5:c8:bb:c7:7c:f0:d0:8c:62:ba:0f:ea:e3:cf:ae: 19:65:3f:c7:f5:35:d8:07:90:80:0b:69:2c:12:cc:c5:c7:1a: a2:f7:94:fc:2a:37:55:3e:1d:7f:1a:52:fa:eb:d0:28:71:7c: 5b:94:ad:62:af:b1:59:eb:9f:6c:f3:41:b2:68:0b:1d:e9:ad: 70:f6:ad:8a:e0:24:67:38:22:74:34:9b:57:b7:06:fc:88:56: 19:b4:a0:c7:92:dc:7e:f1:af:bc:81:59:b3:14:ee:2b:ed:cc: b7:81:b6:30:95:0e:35:ae:ef:ff:12:54:34:ae:64:91:b6:71: c1:36:99:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjQwNTE5MDQxNzIyWhcNMjQwNTI2MDQxNzIyWjAYMRYwFAYD VQQDEw02NjQ5N2Q1My1iNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3whKFnsBekXT+1N2GoEIWdRP4yw6oWSFRY6kggsph8aMngLz5EwIHT/np/X jGkUa11Zq2FsJlSKjyjIOSmrUqV3JNNDSZDvRgQDeRThZS98mwaDIzc1ZT0LWr4Y 7yy5RzTXtG66Tsi60o9jwXXs0tWHUObW3RZIlUspjWC3FV5Ql2fCoV7aydqLGfuN AmfAuck6RJovwgdLYFWdvwXK1M2KW6pcLv08v+I66a0HwD9OInIqM4faHGvMG07X yQJE+m8zqnoNyHGFe2luolpXjjHO5XCgTq6W+VW8XSbljqQTzmMT2O72UfOQlMcG RRIT3j/ANAdZ/cSG2Q6ZnaY5fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0klsyi au2wEbFg9SaYUZ3sloMDMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqKcJUmJhLhSlz1CQ/HWnxcdUbRI4Etr3ZKbyFnGtnp38tUdoTOAWg uD13H5XX58HuwGqHkgI2d9WoJkB9EpyreTpDuz+4dHgA0fD2+cftgu/5O3RMS39K Vds5k4sn7Y5A4jOtq/Mq0u8SKvcrAzX+uFDBVSACiiCKlYO8LRQ2XCa1yLvHfPDQ jGK6D+rjz64ZZT/H9TXYB5CAC2ksEszFxxqi95T8KjdVPh1/GlL669AocXxblK1i r7FZ659s80GyaAsd6a1w9q2K4CRnOCJ0NJtXtwb8iFYZtKDHktx+8a+8gVmzFO4r 7cy3gbYwlQ41ru//ElQ0rmSRtnHBNpmJ -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org