$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json) Hash identifier: 0eup7oExPTRfPt/FfYlFmtqBdODtQM2rwj3HPd9Mnlk= Subject key identifier: C6:59:97:89:58:52:C7:72:13:CD:38:F1:C4:3B:37:5C:E4:02:EE:9C Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft Manifest number: 5C Signing time: Sun 19 May 2024 07:53:22 +0000 Manifest this update: Sun 19 May 2024 07:53:21 +0000 Manifest next update: Sun 26 May 2024 07:53:21 +0000 Files and hashes: 1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: 5jmVMd40lohEO9KnLx1oxz90RPU3dxmNaFQUvdvSlh4=) 2: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: 8uBa3uCEtYLu25VsPJfC16vSyl8giD0DPRdNOXz5CGc=) 3: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: qE1ecyBL6VLFwCCgaxW+oXeM3h21Ds03LXgReLJqSeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: May 19 07:53:21 2024 GMT Not After : May 26 07:53:21 2024 GMT Subject: CN=6649aff1-b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8a:e9:d9:91:8f:63:b9:0d:02:18:e0:2d:5c: b6:20:ee:53:e9:52:8a:78:eb:b1:d0:9e:a4:43:23: bb:7c:1c:ed:ac:03:4c:07:4e:dc:1a:a9:c2:03:1c: 67:18:bc:ea:b9:c4:8d:a8:0a:60:ce:01:65:ff:fd: 90:ad:76:fa:05:b2:88:bf:8e:eb:01:c3:ee:31:66: fb:ea:43:cd:02:f2:44:a7:3f:68:b0:bb:bd:7b:f9: 2f:11:0e:59:69:98:dd:67:1c:79:41:c8:37:56:4a: 75:2d:4c:92:76:ae:27:7a:b2:22:c1:a1:06:d8:61: d1:c2:45:5b:57:10:8e:e6:37:88:a7:9a:cb:85:18: a6:05:01:38:61:e4:3f:d2:14:be:50:58:93:39:58: 76:e6:74:81:ac:d3:c3:50:35:5b:26:93:61:b2:bb: 86:3a:88:26:2b:16:2c:c4:74:7e:42:05:42:76:c7: 3f:08:69:7b:37:94:a9:77:a2:13:c6:3f:e6:ba:e6: 6e:3f:dd:f3:40:7c:4c:89:2e:9f:47:dc:ee:f7:a9: 4b:fe:05:b1:39:23:86:15:47:77:75:17:c7:35:03: 45:c1:65:d7:68:a7:16:2b:cb:93:2c:d8:fe:17:0f: f2:c6:82:1a:de:23:0f:93:1a:b0:5d:a1:8d:cf:3d: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:97:89:58:52:C7:72:13:CD:38:F1:C4:3B:37:5C:E4:02:EE:9C X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:93:56:a5:28:e9:6d:bd:da:2a:f8:ad:d0:6b:fa:0d:63: 43:26:8b:2a:f2:87:f5:7f:ab:a8:a4:39:d1:a9:3e:fc:3a:72: c5:42:ee:e0:de:70:4f:9b:94:6c:bf:58:92:fd:1a:f3:87:e1: 19:9d:e1:c7:dd:a9:38:c2:11:de:36:9d:94:f4:c3:65:69:f0: ff:90:ef:90:12:dc:0b:cf:f2:50:12:0b:ed:bf:06:06:96:e7: cf:bd:56:25:6b:66:0e:26:77:1e:74:37:ec:c5:bd:b5:fa:44: f6:9c:b7:ba:c5:c9:5c:7f:68:42:3e:3c:8c:60:c5:5b:fe:d7: b2:3e:5c:38:27:b4:c6:a6:96:18:c7:ce:c8:68:2c:1d:f8:d6: 6f:7e:bd:d6:84:1d:73:d4:d9:01:a8:78:cc:32:94:f8:6e:82: df:d0:73:6e:48:77:04:54:c5:31:02:e4:96:c7:b4:85:a6:35: d6:fe:c1:d9:90:63:84:c3:67:11:de:eb:11:a4:23:c7:02:2d: d0:ba:bf:1d:9d:28:63:0e:c6:8c:1e:54:d1:dd:e3:9d:05:51: a3:43:1f:13:ea:7a:78:fe:54:04:71:4a:e1:f8:69:91:2e:a5: a5:36:68:6f:a8:68:fc:79:84:ec:7b:16:73:7d:e9:0f:cd:e4: 5d:73:39:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Rjc4MTExMC8GA1UEBRMoMjc2OUE0RkE5MjI5N0RDQjFERjg5NkRBRTYzNzM5OTZG RDMxODA2RTAeFw0yNDA1MTkwNzUzMjFaFw0yNDA1MjYwNzUzMjFaMBgxFjAUBgNV BAMTDTY2NDlhZmYxLWIwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSiunZkY9juQ0CGOAtXLYg7lPpUop467HQnqRDI7t8HO2sA0wHTtwaqcIDHGcY vOq5xI2oCmDOAWX//ZCtdvoFsoi/jusBw+4xZvvqQ80C8kSnP2iwu717+S8RDllp mN1nHHlByDdWSnUtTJJ2rid6siLBoQbYYdHCRVtXEI7mN4inmsuFGKYFAThh5D/S FL5QWJM5WHbmdIGs08NQNVsmk2Gyu4Y6iCYrFizEdH5CBUJ2xz8IaXs3lKl3ohPG P+a65m4/3fNAfEyJLp9H3O73qUv+BbE5I4YVR3d1F8c1A0XBZddopxYry5Ms2P4X D/LGghreIw+TGrBdoY3PPcgrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxlmXiVhS x3ITzTjxxDs3XOQC7pwwHwYDVR0jBBgwFoAUJ2mk+pIpfcsd+Jba5jc5lv0xgG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGNzgxLzc1MDcwQTRBOTZB RDExRUU5RjVGODQ1REM0RjlBRTAyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjJtay1wSXBmY3NkLUpiYTVqYzVsdjB4Z0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG NzgxLzc1MDcwQTRBOTZBRDExRUU5RjVGODQ1REM0RjlBRTAyL0oybWstcElwZmNz ZC1KYmE1amM1bHYweGdHNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMVk1alKOltvdoq+K3Qa/oNY0Mmiyryh/V/q6ikOdGpPvw6csVC7uDe cE+blGy/WJL9GvOH4Rmd4cfdqTjCEd42nZT0w2Vp8P+Q75AS3AvP8lASC+2/BgaW 58+9ViVrZg4mdx50N+zFvbX6RPact7rFyVx/aEI+PIxgxVv+17I+XDgntMamlhjH zshoLB341m9+vdaEHXPU2QGoeMwylPhugt/Qc25IdwRUxTEC5JbHtIWmNdb+wdmQ Y4TDZxHe6xGkI8cCLdC6vx2dKGMOxoweVNHd450FUaNDHxPqenj+VARxSuH4aZEu paU2aG+oaPx5hOx7FnN96Q/N5F1zOQ4= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org