$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: EwLy53q+9eXzssairOfULfOxCGJu5JPBB8/RbkaQJ4U= Subject key identifier: 32:68:40:98:37:D7:78:63:3A:B6:BB:98:C0:86:82:C5:C2:10:BF:38 Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 0556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 0550 Signing time: Sun 19 May 2024 00:52:34 +0000 Manifest this update: Sun 19 May 2024 00:52:34 +0000 Manifest next update: Sun 26 May 2024 00:52:34 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: kykGJsj942uGWIeUlr6Tav5mt7tSOkYejMuWWxCwkVI=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: G+cvOyuBaI0mJceOtyargePM5Osl1OnTP7qop5mo/cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1366 (0x556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Validity Not Before: May 19 00:52:34 2024 GMT Not After : May 26 00:52:34 2024 GMT Subject: CN=66494d52-543b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:9a:72:12:75:cd:26:7e:6b:ff:96:56:ea: 38:de:8a:25:53:de:39:ae:66:02:6a:9d:22:cb:cc: bc:3c:4f:c5:56:54:a7:a6:f8:22:1a:0c:73:0b:46: 97:d1:5d:07:8c:54:83:ac:e4:a1:fa:6e:01:de:5f: 6c:33:26:e6:dc:5b:d7:86:d3:76:d7:c6:b5:bc:17: fc:1f:e1:66:2c:3d:d2:46:51:10:af:c5:75:71:18: 61:30:8f:38:04:6f:11:7f:4c:f5:26:42:8b:9d:73: 72:40:ef:21:de:92:c8:19:ca:59:04:c8:9d:2a:ef: 4b:c5:41:43:2b:d4:69:f8:e9:e0:7f:f4:9d:30:4f: c9:21:4b:5e:28:60:09:f4:26:fe:b0:61:b3:a6:ba: 89:71:ab:41:11:8d:52:ea:d5:81:37:05:47:1b:c0: 3f:89:01:35:b4:80:74:6c:8f:9f:0e:c0:13:ca:8f: 4a:1b:5b:26:a0:0c:ca:90:22:06:26:38:c8:6c:e3: ba:23:bb:8a:e9:a1:97:cf:05:2f:8d:f1:4a:3c:01: 7f:d8:79:2b:3c:36:7b:fa:5e:b9:16:cc:7b:1c:18: 7c:16:c9:c7:1a:2a:b8:17:f7:2d:c5:9c:60:e9:1a: a8:07:8a:28:59:77:dc:2b:35:a6:c8:ce:5d:3b:9b: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:40:98:37:D7:78:63:3A:B6:BB:98:C0:86:82:C5:C2:10:BF:38 X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:0b:b7:7d:c5:a1:83:87:7e:86:5b:78:e9:72:3f:34:0b: 6d:ba:96:dc:d9:1a:46:3a:9b:fd:c4:a2:eb:2d:f4:02:05:f3: 86:c1:4c:b9:8a:01:34:61:e5:c3:c3:13:97:df:1a:fe:29:87: 4d:5e:ee:cd:9d:5c:e1:fe:ec:00:1e:c4:4a:03:bb:23:fd:f1: e2:64:a4:16:f9:e4:39:4b:cc:36:af:28:db:d0:86:af:71:49: 2a:31:32:b0:61:7d:df:de:34:d0:7c:c0:fb:05:7d:8a:1e:ca: 24:11:19:fc:69:e0:3f:2f:ea:d5:30:a0:1d:fa:f8:6c:5f:49: af:7a:a7:4f:18:6d:7b:4f:43:40:c2:19:77:5e:78:4f:7f:eb: c2:cf:e2:24:b2:36:d6:d9:dc:cd:0f:30:ee:dc:38:30:1a:42: 20:33:19:4f:b3:80:b2:54:26:76:95:3a:c0:76:b3:3c:4a:1b: 21:d7:81:d0:0c:a4:eb:1b:ca:04:dd:0e:04:bf:8f:53:d1:53: 3b:56:3f:7e:33:fa:3f:e9:ff:1f:e8:6f:ee:68:dd:bd:d8:0c: 3b:1e:36:1e:eb:7e:ed:22:de:58:f7:7b:e9:a3:60:83:12:34: f2:88:49:ab:37:75:48:f7:1d:9a:b4:89:16:16:77:7d:1f:b6: 5b:c7:25:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjQwNTE5MDA1MjM0WhcNMjQwNTI2MDA1MjM0WjAYMRYwFAYD VQQDEw02NjQ5NGQ1Mi01NDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQGachJ1zSZ+a/+WVuo43oolU945rmYCap0iy8y8PE/FVlSnpvgiGgxzC0aX 0V0HjFSDrOSh+m4B3l9sMybm3FvXhtN218a1vBf8H+FmLD3SRlEQr8V1cRhhMI84 BG8Rf0z1JkKLnXNyQO8h3pLIGcpZBMidKu9LxUFDK9Rp+Ongf/SdME/JIUteKGAJ 9Cb+sGGzprqJcatBEY1S6tWBNwVHG8A/iQE1tIB0bI+fDsATyo9KG1smoAzKkCIG JjjIbOO6I7uK6aGXzwUvjfFKPAF/2HkrPDZ7+l65Fsx7HBh8FsnHGiq4F/ctxZxg 6RqoB4ooWXfcKzWmyM5dO5tFmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJoQJg3 13hjOra7mMCGgsXCEL84MB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLmQu3fcWhg4d+hlt46XI/NAttupbc2RpGOpv9xKLrLfQCBfOGwUy5 igE0YeXDwxOX3xr+KYdNXu7NnVzh/uwAHsRKA7sj/fHiZKQW+eQ5S8w2ryjb0Iav cUkqMTKwYX3f3jTQfMD7BX2KHsokERn8aeA/L+rVMKAd+vhsX0mveqdPGG17T0NA whl3XnhPf+vCz+IksjbW2dzNDzDu3DgwGkIgMxlPs4CyVCZ2lTrAdrM8Shsh14HQ DKTrG8oE3Q4Ev49T0VM7Vj9+M/o/6f8f6G/uaN292Aw7HjYe637tIt5Y93vpo2CD EjTyiEmrN3VI9x2atIkWFnd9H7ZbxyXt -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org