$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft File: jIBwVSUDCAuWcjTt7IDAHT25bPY.mft (raw, json) Hash identifier: +TjEFxyw6AyqARU6zh0+b+h7et9CMuXDOCQw0F7gvFg= Subject key identifier: F8:B3:42:41:30:33:BE:B0:9B:34:BD:91:37:C0:DA:80:B3:8B:9F:DA Authority key identifier: 8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 Certificate issuer: /CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft Manifest number: 0460 Signing time: Sun 19 May 2024 01:49:23 +0000 Manifest this update: Sun 19 May 2024 01:49:22 +0000 Manifest next update: Sun 26 May 2024 01:49:22 +0000 Files and hashes: 1: jIBwVSUDCAuWcjTt7IDAHT25bPY.crl (hash: iMulXDLEKYQWfp2OGVpSG9OtL4fU7hbUK2gL6jv6GRY=) 2: DB5B36C600B511EC9A436071C4F9AE02.roa (hash: cKTNYx51Z3gLmWzIe/5RGmnrk/eCYtcRCpfvC99JSSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B59C1/serialNumber=8C8070552503080B967234EDEC80C01D3DB96CF6 Validity Not Before: May 19 01:49:22 2024 GMT Not After : May 26 01:49:22 2024 GMT Subject: CN=66495aa3-b2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:cf:8d:73:99:53:43:94:8c:57:e7:78:9a: 9c:2d:f5:05:78:33:0b:d5:bb:4d:57:4f:68:0e:d7: a9:25:a0:98:4a:01:80:24:5b:e8:2f:9f:e4:23:c6: 4d:bb:4d:c8:59:79:b3:a5:d7:9f:29:d9:f1:26:b9: 1e:79:bd:48:36:91:04:4a:f0:51:ed:16:d9:f8:76: 40:92:05:6d:3a:ee:09:18:4d:4f:d8:48:f9:7e:63: 57:c9:67:36:48:61:cf:ae:46:0b:57:44:b1:7b:ba: 85:7a:5b:15:2b:71:49:b8:6b:64:77:22:e3:c9:40: d4:90:3a:95:e3:8e:4d:31:76:90:7b:02:84:51:23: 66:ce:ee:da:6c:32:77:3b:48:1e:63:29:1f:a7:3b: 3c:80:7c:fe:63:7e:3f:9b:42:70:1b:4d:22:71:ca: 4f:a4:bb:a4:45:8e:92:61:68:72:7d:f3:62:77:ed: 8d:0b:fd:2b:a3:90:94:ac:d0:70:50:4a:d6:f4:ad: e2:37:ba:0f:5e:f8:50:e5:97:22:13:bc:f0:a4:d8: b5:a2:d8:eb:f1:d1:9f:24:2e:aa:7a:e7:07:7b:f3: 6c:14:80:a8:d6:16:bf:76:1e:30:1a:b5:91:e1:76: b2:b0:90:ac:e5:f5:64:46:22:76:6b:4a:9b:a4:7c: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:42:41:30:33:BE:B0:9B:34:BD:91:37:C0:DA:80:B3:8B:9F:DA X509v3 Authority Key Identifier: keyid:8C:80:70:55:25:03:08:0B:96:72:34:ED:EC:80:C0:1D:3D:B9:6C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIBwVSUDCAuWcjTt7IDAHT25bPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59C1/C5E8797800B211EC8968832CC4F9AE02/jIBwVSUDCAuWcjTt7IDAHT25bPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:58:22:89:39:49:4d:aa:d0:57:3d:d4:f3:37:9c:e2:b5:d5: 94:48:a5:e3:dd:43:90:96:96:7c:d9:3f:f5:48:17:fa:2d:01: 3a:45:0b:62:75:07:88:67:87:47:e3:2e:0a:46:4f:04:4b:ae: 38:99:c6:8f:98:8e:8e:54:69:2f:d0:19:4b:10:36:b2:c9:e3: 4f:e8:9e:09:db:d4:95:ce:f5:00:a3:8e:6f:a9:52:90:8d:0f: e7:8b:28:9b:33:98:ab:2c:25:48:fb:c1:2f:64:14:0f:6e:5c: 0f:f8:77:0f:e3:5d:f7:bd:63:7f:84:ac:7b:1e:2c:34:fd:51: ce:d0:59:31:42:4c:58:48:46:0b:75:a0:92:90:41:5c:c7:00: 32:d0:78:73:cb:15:17:f6:45:5d:10:fd:78:44:99:0e:d6:77: bf:d1:64:a8:14:58:9d:15:b8:6b:c3:78:e8:d1:21:5f:6b:9b: 05:36:4a:dd:df:07:b5:86:9b:7e:59:f4:20:e7:fc:5d:fd:b0: 40:aa:df:8f:b5:21:5d:4b:a6:42:f9:84:c6:f4:fa:19:58:1e: fb:fd:f0:57:71:b4:4a:9f:af:d7:81:22:d0:25:b9:cd:bc:ab: d2:0c:ec:dc:bc:67:e3:8e:a8:81:23:38:25:3f:5d:82:e8:ba: ac:ab:41:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU5QzExMTAvBgNVBAUTKDhDODA3MDU1MjUwMzA4MEI5NjcyMzRFREVDODBDMDFE M0RCOTZDRjYwHhcNMjQwNTE5MDE0OTIyWhcNMjQwNTI2MDE0OTIyWjAYMRYwFAYD VQQDEw02NjQ5NWFhMy1iMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcbPjXOZU0OUjFfneJqcLfUFeDML1btNV09oDtepJaCYSgGAJFvoL5/kI8ZN u03IWXmzpdefKdnxJrkeeb1INpEESvBR7RbZ+HZAkgVtOu4JGE1P2Ej5fmNXyWc2 SGHPrkYLV0Sxe7qFelsVK3FJuGtkdyLjyUDUkDqV445NMXaQewKEUSNmzu7abDJ3 O0geYykfpzs8gHz+Y34/m0JwG00iccpPpLukRY6SYWhyffNid+2NC/0ro5CUrNBw UErW9K3iN7oPXvhQ5ZciE7zwpNi1otjr8dGfJC6qeucHe/NsFICo1ha/dh4wGrWR 4XaysJCs5fVkRiJ2a0qbpHymjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPizQkEw M76wmzS9kTfA2oCzi5/aMB8GA1UdIwQYMBaAFIyAcFUlAwgLlnI07eyAwB09uWz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTlDMS9DNUU4Nzk3ODAw QjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENBdVdjalR0N0lEQUhUMjVi UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pJQndWU1VEQ0F1V2NqVHQ3SURBSFQyNWJQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTlDMS9DNUU4Nzk3ODAwQjIxMUVDODk2ODgzMkNDNEY5QUUwMi9qSUJ3VlNVRENB dVdjalR0N0lEQUhUMjViUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpWCKJOUlNqtBXPdTzN5zitdWUSKXj3UOQlpZ82T/1SBf6LQE6RQti dQeIZ4dH4y4KRk8ES644mcaPmI6OVGkv0BlLEDayyeNP6J4J29SVzvUAo45vqVKQ jQ/niyibM5irLCVI+8EvZBQPblwP+HcP4133vWN/hKx7Hiw0/VHO0FkxQkxYSEYL daCSkEFcxwAy0HhzyxUX9kVdEP14RJkO1ne/0WSoFFidFbhrw3jo0SFfa5sFNkrd 3we1hpt+WfQg5/xd/bBAqt+PtSFdS6ZC+YTG9PoZWB77/fBXcbRKn6/XgSLQJbnN vKvSDOzcvGfjjqiBIzglP12C6Lqsq0Hh -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org