$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: xqCBcGKvHUoN9WyIiSVjIC1mrkL1YtUA1KI873r8Ylo= Subject key identifier: 9C:56:B4:6E:83:55:B6:89:2F:15:8F:06:5F:37:4C:99:42:58:48:29 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 0695 Signing time: Sat 18 May 2024 23:18:45 +0000 Manifest this update: Sat 18 May 2024 23:18:45 +0000 Manifest next update: Sat 25 May 2024 23:18:45 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: oko2F+8LA/hRNoBBYoR1eDJvEsv6EaHLIY9XEECmio4=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: May 18 23:18:45 2024 GMT Not After : May 25 23:18:45 2024 GMT Subject: CN=66493755-48b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:f6:af:19:78:8c:29:4c:51:ac:62:28:39: 35:7b:b7:36:05:50:09:1d:74:a7:01:f3:85:4a:01: e9:89:ec:d8:e7:28:55:81:c4:ac:a8:25:39:7a:65: e9:c3:6f:ee:29:1d:9f:f2:8c:fe:42:ac:ed:c1:b4: 6e:fb:eb:92:4e:77:38:c7:18:a8:76:16:0b:be:63: 35:74:50:b7:60:2a:7e:14:26:66:8c:bc:b8:e8:ab: 54:b1:4d:58:bb:be:16:08:d5:1d:76:67:8d:ff:a5: 87:04:30:52:61:4c:b6:25:20:d5:49:c9:97:22:ce: ec:03:d1:9e:a1:36:25:89:42:c0:b5:cd:33:5a:89: 83:28:67:79:fb:6d:7c:a4:dc:ac:82:d8:e0:f3:4b: 12:af:7d:68:1b:69:d3:5e:0c:e0:2c:d7:bc:95:38: 8b:36:ff:b2:e5:04:fa:a8:04:f4:82:97:61:00:bb: 34:58:1d:46:4f:cc:8e:ce:16:88:1d:19:a7:d0:57: b8:a1:6d:c6:4a:38:34:ad:b1:6e:2f:e8:0f:0f:f0: 16:de:15:4d:e3:20:ff:ce:25:ab:f5:d1:d7:84:62: 04:f9:11:05:19:0d:a9:b4:0f:8e:b4:23:b2:10:2f: 95:5e:f1:20:f9:35:94:7c:5d:48:b3:07:97:34:0e: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:B4:6E:83:55:B6:89:2F:15:8F:06:5F:37:4C:99:42:58:48:29 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ec:33:80:b1:6c:22:44:da:1d:a3:00:d3:f2:81:4a:c9:44: 3d:db:16:42:19:da:2c:8d:66:d7:be:a5:22:c2:5c:7f:f4:01: fb:a8:a0:9b:b6:71:a7:49:c6:77:74:8a:14:b6:69:22:bb:85: 59:ee:a1:77:9a:d9:5d:db:bb:f7:ed:67:85:ff:78:d6:47:d3: dc:b3:46:42:17:e8:41:ae:85:b2:36:2d:4b:a4:8a:7a:86:17: b7:5f:aa:78:ca:62:0e:14:4d:02:c4:8b:b8:4e:4d:de:93:e2: c1:0e:36:95:9a:8e:7d:b9:0f:e9:ff:c2:5a:79:cd:ea:ee:5b: c2:2f:59:5e:7e:79:92:d8:91:29:36:f9:a1:cf:1d:aa:83:ab: 2b:b7:72:45:14:1f:8a:89:b9:87:c4:46:e6:37:29:bc:b0:74: 95:66:ab:8f:39:46:3d:af:0b:35:c0:b9:3f:25:31:44:e1:28: 49:54:f3:d6:51:4b:2d:d6:f6:42:54:6c:eb:06:b4:bf:8b:ef: 7a:46:3c:2a:c8:e5:2e:a6:c9:27:29:51:d2:41:ce:f1:ea:1c: 0f:cf:d7:83:e2:8b:a4:8e:dd:d1:e6:eb:f6:76:d2:87:51:b6: 45:13:8e:89:90:3f:87:da:83:e8:c3:b3:06:01:c4:29:a6:58: ae:f2:86:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjQwNTE4MjMxODQ1WhcNMjQwNTI1MjMxODQ1WjAYMRYwFAYD VQQDEw02NjQ5Mzc1NS00OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW72rxl4jClMUaxiKDk1e7c2BVAJHXSnAfOFSgHpiezY5yhVgcSsqCU5emXp w2/uKR2f8oz+QqztwbRu++uSTnc4xxiodhYLvmM1dFC3YCp+FCZmjLy46KtUsU1Y u74WCNUddmeN/6WHBDBSYUy2JSDVScmXIs7sA9GeoTYliULAtc0zWomDKGd5+218 pNysgtjg80sSr31oG2nTXgzgLNe8lTiLNv+y5QT6qAT0gpdhALs0WB1GT8yOzhaI HRmn0Fe4oW3GSjg0rbFuL+gPD/AW3hVN4yD/ziWr9dHXhGIE+REFGQ2ptA+OtCOy EC+VXvEg+TWUfF1IsweXNA7qSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxWtG6D VbaJLxWPBl83TJlCWEgpMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy7DOAsWwiRNodowDT8oFKyUQ92xZCGdosjWbXvqUiwlx/9AH7qKCb tnGnScZ3dIoUtmkiu4VZ7qF3mtld27v37WeF/3jWR9Pcs0ZCF+hBroWyNi1LpIp6 hhe3X6p4ymIOFE0CxIu4Tk3ek+LBDjaVmo59uQ/p/8Jaec3q7lvCL1lefnmS2JEp Nvmhzx2qg6srt3JFFB+KibmHxEbmNym8sHSVZquPOUY9rws1wLk/JTFE4ShJVPPW UUst1vZCVGzrBrS/i+96RjwqyOUupsknKVHSQc7x6hwPz9eD4oukjt3R5uv2dtKH UbZFE46JkD+H2oPow7MGAcQppliu8oZd -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org