$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json) Hash identifier: Jv4oDApnJOfGdZE0gOdPNeXfYZvP762LLYadXeisRKg= Subject key identifier: 4A:20:E3:E6:AA:B4:FD:D9:91:10:78:36:E5:C1:40:B9:AD:EF:BD:9F Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft Manifest number: 0529 Signing time: Sun 19 May 2024 01:00:48 +0000 Manifest this update: Sun 19 May 2024 01:00:47 +0000 Manifest next update: Sun 26 May 2024 01:00:47 +0000 Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: sxykjPDFxJivYrp3WN8ua+ZB+3VNA7sNkwTxxpK8VK4=) 2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: UEtjJ89kzBo6zKqimUbcEU98SNn7TiyG61TgGa4Lf/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: May 19 01:00:47 2024 GMT Not After : May 26 01:00:47 2024 GMT Subject: CN=66494f3f-c45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:a5:09:0c:83:e3:8e:b4:4a:82:e6:f6:fc: af:44:d2:d6:df:56:51:c4:45:aa:6f:35:68:40:93: be:e0:7d:45:1f:ab:e4:2e:4d:b3:79:f7:86:43:5d: 0b:38:ea:5b:34:0a:83:36:74:bf:66:b6:46:99:bd: 28:7f:7c:5b:2b:4c:58:0c:a9:e7:df:ca:26:c1:49: c8:27:97:cf:b1:63:ac:02:cb:ef:a9:61:1b:51:03: 9e:cf:3d:5e:02:3c:4e:fd:a1:84:07:2a:73:19:12: 0e:3f:36:7a:42:c5:f6:06:2c:ff:94:e2:32:30:79: 53:01:ad:2b:e5:0a:8f:4a:9e:aa:82:f5:77:a7:f2: 19:dd:10:bb:fe:0f:34:e6:60:c1:b5:c1:47:bf:ce: c5:b6:57:6a:a8:1f:e6:e3:d7:2e:ab:d6:a0:66:3a: 79:33:d1:f3:d7:58:8b:18:a6:66:b6:64:d0:82:69: 43:c9:89:e0:9c:2b:a2:01:d9:fd:15:0f:10:c4:57: 10:ef:26:f4:0e:b7:68:33:94:2f:e3:29:aa:c8:9b: f3:54:11:e0:5e:18:f0:94:b1:b4:44:f0:4b:b4:63: 93:bd:82:57:7a:ed:a6:4d:0c:5e:a5:bc:2c:75:cc: 6f:89:1b:d8:7f:21:6e:7e:e1:11:6b:c2:33:8c:83: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:E3:E6:AA:B4:FD:D9:91:10:78:36:E5:C1:40:B9:AD:EF:BD:9F X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f6:70:b5:79:2e:55:ac:c9:04:76:0c:b3:18:06:22:ee:1e: 4d:84:41:91:07:db:b3:31:8f:32:f6:92:9e:c8:26:df:b0:39: ce:5f:9a:70:f2:12:ae:4d:83:74:bb:cc:a8:87:a7:94:ad:dc: 54:66:af:79:9e:b6:c3:ed:34:1d:7d:92:ab:41:86:a5:14:72: 53:c6:58:8b:f8:fc:ca:26:07:fa:e8:95:0b:3f:30:14:da:5a: 38:b9:63:83:3e:93:90:53:b1:a4:ac:be:3f:bf:4d:a7:83:91: 13:e6:c9:dc:31:f6:0e:17:d7:83:51:b3:4a:b7:a0:ef:88:c0: b4:b0:83:24:ab:5a:9d:f2:ba:f1:d2:a9:3c:48:00:85:86:f2: 0d:77:5c:19:65:41:60:65:36:01:d1:e5:d7:c6:58:f9:f8:32: 2b:93:09:67:db:53:b2:77:51:50:96:5e:6a:59:09:d9:bd:c4: 48:4a:78:e7:8c:12:02:02:f9:34:f5:f0:c1:17:a7:67:84:d5: e3:bf:fd:5a:f1:e8:01:75:da:4d:68:54:29:0c:2d:a0:54:1f: 75:ef:f6:c6:60:67:f8:25:41:67:79:b7:49:66:20:d2:78:86: cd:56:2a:c7:39:5e:78:14:26:87:06:56:ce:43:ff:fe:2a:92: a2:a0:d6:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjQwNTE5MDEwMDQ3WhcNMjQwNTI2MDEwMDQ3WjAYMRYwFAYD VQQDEw02NjQ5NGYzZi1jNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9GlCQyD4460SoLm9vyvRNLW31ZRxEWqbzVoQJO+4H1FH6vkLk2zefeGQ10L OOpbNAqDNnS/ZrZGmb0of3xbK0xYDKnn38omwUnIJ5fPsWOsAsvvqWEbUQOezz1e AjxO/aGEBypzGRIOPzZ6QsX2Biz/lOIyMHlTAa0r5QqPSp6qgvV3p/IZ3RC7/g80 5mDBtcFHv87FtldqqB/m49cuq9agZjp5M9Hz11iLGKZmtmTQgmlDyYngnCuiAdn9 FQ8QxFcQ7yb0DrdoM5Qv4ymqyJvzVBHgXhjwlLG0RPBLtGOTvYJXeu2mTQxepbws dcxviRvYfyFufuERa8IzjIOPuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEog4+aq tP3ZkRB4NuXBQLmt772fMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO9nC1eS5VrMkEdgyzGAYi7h5NhEGRB9uzMY8y9pKeyCbfsDnOX5pw 8hKuTYN0u8yoh6eUrdxUZq95nrbD7TQdfZKrQYalFHJTxliL+PzKJgf66JULPzAU 2lo4uWODPpOQU7GkrL4/v02ng5ET5sncMfYOF9eDUbNKt6DviMC0sIMkq1qd8rrx 0qk8SACFhvINd1wZZUFgZTYB0eXXxlj5+DIrkwln21Oyd1FQll5qWQnZvcRISnjn jBICAvk09fDBF6dnhNXjv/1a8egBddpNaFQpDC2gVB917/bGYGf4JUFnebdJZiDS eIbNVirHOV54FCaHBlbOQ//+KpKioNag -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org