$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: v7v8MUuD92FzVeeX2OQI81lbq1+rt0+ECnT5ZfYkD4w= Subject key identifier: BB:1D:09:20:19:0D:84:B4:FA:17:88:29:C4:E4:D4:B8:1E:BF:9E:8B Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 146A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1462 Signing time: Sat 18 May 2024 17:22:55 +0000 Manifest this update: Sat 18 May 2024 17:22:55 +0000 Manifest next update: Sat 25 May 2024 17:22:55 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: hReVXT6Gnr/WzUqR1w1w5FifIy5C2cjS+oZHudPkFf0=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: Yhfg4YvQQZjhY3KRsDWyz6hCLcA/Ph/uJc8vvKK428M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5226 (0x146a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: May 18 17:22:55 2024 GMT Not After : May 25 17:22:55 2024 GMT Subject: CN=6648e3ef-7b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:85:36:4a:df:b5:c2:fa:ea:97:d0:f2:88: 07:7d:b6:14:73:06:92:81:2f:4c:56:8d:65:44:db: 9c:72:fe:24:48:35:6a:db:ba:af:5d:17:ea:76:6a: 7f:a6:b9:51:b3:31:ca:ff:63:2a:a1:d2:4e:53:76: 22:a5:ef:8d:28:36:60:ba:a5:5f:e9:a8:58:8e:14: 6a:7b:b0:09:96:80:c5:9a:37:35:90:bb:b7:43:bc: 34:f5:8d:b9:31:3d:9e:88:b9:c2:ed:49:13:bf:5b: 9a:b6:c7:64:62:6c:b1:e5:1c:58:d4:7c:69:bf:7f: ea:90:93:65:34:02:ed:37:ff:d1:52:1a:cc:1f:5a: 5c:c0:d2:a2:ee:a3:25:33:af:92:ed:51:4e:c8:a1: 6a:00:10:21:05:d4:11:f4:bf:46:04:7d:e5:4a:ab: 55:27:20:53:2c:8d:36:88:0c:25:85:7c:32:ff:6f: 3d:2e:b9:c5:a7:e5:e5:b5:31:6d:3d:11:38:42:93: ea:ef:ce:55:1d:d0:b2:be:5d:37:2c:87:0f:32:0f: 41:55:11:b3:6d:ea:1c:33:df:06:d1:16:5b:6f:96: c9:42:b3:49:35:a8:f4:2b:b2:7f:bd:ca:41:07:56: d6:e8:5e:a3:ea:b4:70:69:86:66:bf:f5:6a:83:fc: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:09:20:19:0D:84:B4:FA:17:88:29:C4:E4:D4:B8:1E:BF:9E:8B X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:14:17:19:a3:d7:b2:d7:b3:36:49:33:55:2b:5f:b7:56:6d: ee:59:85:cb:0e:0c:e2:77:b3:35:7b:41:22:1d:27:df:23:12: 48:e0:20:47:4b:ce:b6:5f:42:bc:ae:3e:e8:e8:20:0d:6e:c5: 16:aa:86:fe:ec:76:2b:c9:83:0a:53:b4:d6:b8:80:50:3c:f7: 77:a4:9b:4b:b3:f4:40:c1:0b:9b:77:da:4f:87:52:3b:e4:02: a6:0f:9c:8f:b2:67:0f:5d:b2:13:99:af:d6:da:f2:4f:4b:4b: 1f:59:52:89:87:a0:eb:dc:95:9f:74:fa:62:b6:44:e6:d4:96: ff:33:b3:46:e5:72:61:58:25:be:ec:cd:97:ae:91:4e:18:ad: 67:d8:bd:bc:8a:6d:1d:1f:68:c4:33:2a:1e:fb:0a:bf:d7:4c: 7a:62:75:8c:44:3e:0b:d7:b6:14:e8:df:61:f6:e8:07:6e:06: 97:b4:4a:77:1e:24:4d:5b:aa:55:f8:b8:9b:1e:ae:80:c0:97: 75:bb:d4:08:f4:19:1b:3f:e9:5c:58:80:f2:60:7f:07:28:a3: 49:38:ac:e9:12:ef:ed:e8:d5:da:fb:78:fb:6f:5b:5c:90:6f: c0:f1:44:fc:b1:dc:39:14:1d:9e:71:5b:6b:5e:8a:3c:b7:ef: 04:88:e1:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjQwNTE4MTcyMjU1WhcNMjQwNTI1MTcyMjU1WjAYMRYwFAYD VQQDEw02NjQ4ZTNlZi03YjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzeFNkrftcL66pfQ8ogHfbYUcwaSgS9MVo1lRNuccv4kSDVq27qvXRfqdmp/ prlRszHK/2MqodJOU3Yipe+NKDZguqVf6ahYjhRqe7AJloDFmjc1kLu3Q7w09Y25 MT2eiLnC7UkTv1uatsdkYmyx5RxY1Hxpv3/qkJNlNALtN//RUhrMH1pcwNKi7qMl M6+S7VFOyKFqABAhBdQR9L9GBH3lSqtVJyBTLI02iAwlhXwy/289LrnFp+XltTFt PRE4QpPq785VHdCyvl03LIcPMg9BVRGzbeocM98G0RZbb5bJQrNJNaj0K7J/vcpB B1bW6F6j6rRwaYZmv/Vqg/zsIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsdCSAZ DYS0+heIKcTk1Lgev56LMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIFBcZo9ey17M2STNVK1+3Vm3uWYXLDgzid7M1e0EiHSffIxJI4CBH S862X0K8rj7o6CANbsUWqob+7HYryYMKU7TWuIBQPPd3pJtLs/RAwQubd9pPh1I7 5AKmD5yPsmcPXbITma/W2vJPS0sfWVKJh6Dr3JWfdPpitkTm1Jb/M7NG5XJhWCW+ 7M2XrpFOGK1n2L28im0dH2jEMyoe+wq/10x6YnWMRD4L17YU6N9h9ugHbgaXtEp3 HiRNW6pV+LibHq6AwJd1u9QI9BkbP+lcWIDyYH8HKKNJOKzpEu/t6NXa+3j7b1tc kG/A8UT8sdw5FB2ecVtrXoo8t+8EiOF5 -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org