$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: psfWkVs9aLkBlW/uTj1tL4KZbE0NFpNmI1aCJ6MZRvk= Subject key identifier: 73:81:81:1D:8B:6C:A5:83:2E:D5:54:C4:74:E5:99:BE:E0:29:7F:60 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 0859 Signing time: Sat 18 May 2024 21:41:10 +0000 Manifest this update: Sat 18 May 2024 21:41:09 +0000 Manifest next update: Sat 25 May 2024 21:41:09 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: 1dcD89tNr7qhXjkCADEC555CPrK6Mm+hKh2SBJSHBVc=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: UigApkOojUwOo8nb0us8ljezcY34l9CMcN9uCrvOT6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: May 18 21:41:09 2024 GMT Not After : May 25 21:41:09 2024 GMT Subject: CN=66492075-5d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:c5:b1:f7:9f:75:9a:50:bb:f8:07:63:d5: cb:f3:8d:31:a8:52:67:4f:76:8b:4f:b5:35:01:5f: c0:80:e4:23:6b:d4:c1:7f:f8:d9:26:b0:2f:fe:6f: 75:0b:06:6b:b7:a1:d6:16:c3:df:6c:91:0f:8a:d1: 06:d8:99:e8:4a:ca:a9:42:2b:a2:cc:86:82:3d:e4: 2b:52:c6:fb:d2:77:a8:39:1a:0e:ff:63:27:87:8f: c3:e8:80:7b:6a:ff:96:a5:83:4f:8a:43:27:4f:45: 5a:15:ab:1c:1b:d7:28:c2:b4:56:08:40:c9:b8:21: e0:82:cf:7e:90:0e:0e:27:f0:81:26:fa:75:8d:54: a3:59:b9:a5:2b:e6:7d:c3:79:e6:77:69:60:d3:1a: 31:f4:3f:c9:19:3e:e7:f6:38:2d:cb:ad:f1:12:32: 36:8c:3f:49:6f:ac:e0:61:67:76:95:f9:04:0b:de: bc:63:9f:db:da:42:3b:b6:c9:90:c7:b4:42:58:83: ba:7e:85:a8:ca:5c:37:0f:39:92:bf:9b:04:6f:8e: a6:61:ca:c1:87:5a:f0:d7:f7:7d:78:f5:cd:43:63: 3b:c1:8c:43:5a:6f:da:86:a1:25:7a:1d:b1:7c:64: cf:d2:a3:3f:2a:85:da:e4:15:18:67:d8:fd:c3:bf: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:81:81:1D:8B:6C:A5:83:2E:D5:54:C4:74:E5:99:BE:E0:29:7F:60 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fc:15:bc:ae:de:43:54:56:b3:19:73:a6:0b:09:f2:15:41: b2:62:1e:f5:f1:5c:2f:b3:a4:1d:4c:e6:21:92:56:f1:ac:71: 91:7b:32:07:3c:d3:60:31:d4:ce:16:ef:9b:04:5d:99:14:fa: 11:eb:7e:d9:d5:8c:b9:c6:19:30:ab:68:0a:c9:be:39:c5:46: 9e:14:9e:fa:8f:6a:5d:16:91:26:89:c1:28:98:56:96:18:d7: 10:a6:ce:dd:cd:b0:76:3f:4a:cb:22:d3:8a:ba:7d:ee:c8:b2: 36:7d:e9:d8:69:ee:c7:2f:19:25:b4:8c:23:c8:f8:3f:3a:94: c4:05:37:b0:49:a9:48:d9:08:bc:12:e1:9f:c1:02:10:0e:1f: da:22:98:48:41:d4:f6:94:31:b1:cf:17:2a:f4:ea:74:2b:4a: 27:0c:dd:6a:41:29:e5:f5:30:7c:01:c6:fd:a3:f0:25:a3:da: fd:a4:83:24:d8:5b:14:58:73:d1:90:7a:fa:b0:fd:e4:88:77: ca:76:68:4a:be:70:54:2c:46:7d:ad:8f:07:23:b9:30:6f:47: fb:d8:ac:6f:0e:6c:0d:1b:3a:8d:fc:ae:03:38:7d:10:29:b2: c8:e8:7b:86:2f:f7:10:82:82:89:78:bd:fc:e2:e5:ff:01:63: 49:26:54:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjQwNTE4MjE0MTA5WhcNMjQwNTI1MjE0MTA5WjAYMRYwFAYD VQQDEw02NjQ5MjA3NS01ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodHFsfefdZpQu/gHY9XL840xqFJnT3aLT7U1AV/AgOQja9TBf/jZJrAv/m91 CwZrt6HWFsPfbJEPitEG2JnoSsqpQiuizIaCPeQrUsb70neoORoO/2Mnh4/D6IB7 av+WpYNPikMnT0VaFascG9cowrRWCEDJuCHggs9+kA4OJ/CBJvp1jVSjWbmlK+Z9 w3nmd2lg0xox9D/JGT7n9jgty63xEjI2jD9Jb6zgYWd2lfkEC968Y5/b2kI7tsmQ x7RCWIO6foWoylw3DzmSv5sEb46mYcrBh1rw1/d9ePXNQ2M7wYxDWm/ahqEleh2x fGTP0qM/KoXa5BUYZ9j9w7+dywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOBgR2L bKWDLtVUxHTlmb7gKX9gMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw/BW8rt5DVFazGXOmCwnyFUGyYh718Vwvs6QdTOYhklbxrHGRezIH PNNgMdTOFu+bBF2ZFPoR637Z1Yy5xhkwq2gKyb45xUaeFJ76j2pdFpEmicEomFaW GNcQps7dzbB2P0rLItOKun3uyLI2fenYae7HLxkltIwjyPg/OpTEBTewSalI2Qi8 EuGfwQIQDh/aIphIQdT2lDGxzxcq9Op0K0onDN1qQSnl9TB8Acb9o/Alo9r9pIMk 2FsUWHPRkHr6sP3kiHfKdmhKvnBULEZ9rY8HI7kwb0f72KxvDmwNGzqN/K4DOH0Q KbLI6HuGL/cQgoKJeL384uX/AWNJJlQk -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org