$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: 5TBLG51vBYIwSOYYZUrF7OxV5bsRvEFZew2YxfVg0qY= Subject key identifier: CD:AE:A5:8E:D7:8A:84:62:60:19:D8:31:01:BC:EA:F5:7E:4F:D2:95 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 032A Signing time: Sun 19 May 2024 03:01:41 +0000 Manifest this update: Sun 19 May 2024 03:01:40 +0000 Manifest next update: Sun 26 May 2024 03:01:40 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: tsczemRW3MqpZ7K+vqRJrl50+8lae9TqnHHXKlucmVA=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: XBZp03p3CBLFAovdVwUeRZcGzU+Bm8gzcdv/m/ApSBQ=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: /8Nf4uZDSnN/p9IwW8sx2sknWcMkeU0uy8pmXCNQQ4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: May 19 03:01:40 2024 GMT Not After : May 26 03:01:40 2024 GMT Subject: CN=66496b94-e447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:fd:05:bb:05:47:ed:c4:f8:74:ba:b4:a1: ca:86:b8:fb:e8:7f:30:65:cc:a8:f0:c0:f8:52:d3: ba:34:dc:87:b7:f8:13:c3:34:db:fe:fc:3c:6c:a3: c4:01:95:bc:db:5d:9b:0f:a8:40:15:a8:70:79:9f: f4:96:fc:6d:8a:d7:59:91:cd:ac:58:d9:2f:f5:ad: af:cd:ff:04:d8:6d:2d:9c:e3:a1:9c:20:7e:04:93: 7f:22:8a:45:e0:db:f8:74:df:57:7d:aa:1f:03:10: 44:de:21:42:e6:be:3b:d4:a4:a2:be:34:c5:fe:65: 58:25:58:52:3a:af:f2:92:a0:14:22:19:88:bf:de: d5:ec:62:b8:4c:59:05:1e:a0:86:e9:06:57:8e:e1: 54:37:8b:29:2d:95:43:c0:29:07:d6:1f:c5:95:b6: 1b:96:4a:d7:6d:d3:cf:e3:e3:6f:08:c9:68:58:5a: 27:9e:3a:c2:35:a6:c1:92:76:e5:80:b4:31:0d:6b: 85:47:3c:e0:a9:cc:56:04:6d:70:b5:f8:a3:d0:0c: 4c:b8:90:d0:cf:58:5f:c0:44:0a:fa:a1:1f:a5:c8: 10:5a:e8:0d:d0:0b:22:9e:b3:c1:2e:8c:79:1c:ab: 3b:74:ac:fa:39:e7:41:2d:3c:b6:2c:aa:c8:04:a5: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:A5:8E:D7:8A:84:62:60:19:D8:31:01:BC:EA:F5:7E:4F:D2:95 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:47:9a:56:9d:87:ac:7c:29:f0:89:eb:b3:43:f4:6d:16:bc: f2:59:88:78:b6:df:14:4c:53:1b:36:25:18:e0:45:74:18:60: 8a:c7:a4:48:d9:49:85:ee:6a:25:70:2c:00:83:89:2c:8d:af: f3:70:e9:bb:e7:e9:8d:de:fa:eb:32:ea:66:e2:db:25:9d:9f: 4e:92:c3:a9:17:cc:5f:28:93:29:54:28:17:5e:8f:ba:fd:7e: 56:e5:d1:5d:2f:a7:f9:e2:86:c0:63:38:95:93:0e:35:f0:19: 27:eb:78:07:ec:43:80:ba:20:9e:99:0d:02:12:06:53:8c:a2: 1e:ad:ec:3b:b3:56:ef:a0:41:fa:59:61:ab:19:a5:29:3c:6a: 67:d2:6a:50:73:5d:d6:ab:89:51:c1:1c:90:89:a1:39:72:54: 98:02:9f:a8:ce:15:2d:f2:77:09:31:39:02:13:56:de:51:f8: 76:ee:8e:5e:a7:25:db:a1:7c:97:1f:35:c2:f9:a2:83:64:2d: 31:34:b0:d6:d9:15:bb:bb:41:8c:35:f4:e9:4f:16:0a:34:6f: 24:d9:8d:fd:bf:74:bc:0f:50:c1:1d:66:62:60:63:56:e8:e8: 5a:6e:4e:c2:d8:5e:84:10:e6:13:a1:15:6d:17:8d:d5:a6:5d: ed:17:e9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjQwNTE5MDMwMTQwWhcNMjQwNTI2MDMwMTQwWjAYMRYwFAYD VQQDEw02NjQ5NmI5NC1lNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmf9BbsFR+3E+HS6tKHKhrj76H8wZcyo8MD4UtO6NNyHt/gTwzTb/vw8bKPE AZW8212bD6hAFahweZ/0lvxtitdZkc2sWNkv9a2vzf8E2G0tnOOhnCB+BJN/IopF 4Nv4dN9XfaofAxBE3iFC5r471KSivjTF/mVYJVhSOq/ykqAUIhmIv97V7GK4TFkF HqCG6QZXjuFUN4spLZVDwCkH1h/FlbYblkrXbdPP4+NvCMloWFonnjrCNabBknbl gLQxDWuFRzzgqcxWBG1wtfij0AxMuJDQz1hfwEQK+qEfpcgQWugN0AsinrPBLox5 HKs7dKz6OedBLTy2LKrIBKXiYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2upY7X ioRiYBnYMQG86vV+T9KVMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaR5pWnYesfCnwieuzQ/RtFrzyWYh4tt8UTFMbNiUY4EV0GGCKx6RI 2UmF7molcCwAg4ksja/zcOm75+mN3vrrMupm4tslnZ9OksOpF8xfKJMpVCgXXo+6 /X5W5dFdL6f54obAYziVkw418Bkn63gH7EOAuiCemQ0CEgZTjKIerew7s1bvoEH6 WWGrGaUpPGpn0mpQc13Wq4lRwRyQiaE5clSYAp+ozhUt8ncJMTkCE1beUfh27o5e pyXboXyXHzXC+aKDZC0xNLDW2RW7u0GMNfTpTxYKNG8k2Y39v3S8D1DBHWZiYGNW 6Ohabk7C2F6EEOYToRVtF43Vpl3tF+l/ -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org