$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft File: sjZrmQQ2twaLXyVculqgXp29v30.mft (raw, json) Hash identifier: Ai0BvjuFTtNOmpn5g+g15osjnRvdSYX7Qq3+WUSsjCk= Subject key identifier: 91:0C:42:DD:C1:F3:20:B5:59:77:BA:86:C1:49:8C:E2:73:18:B9:B6 Authority key identifier: B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D Certificate issuer: /CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft Manifest number: 01A1 Signing time: Sun 19 May 2024 04:38:51 +0000 Manifest this update: Sun 19 May 2024 04:38:51 +0000 Manifest next update: Sun 26 May 2024 04:38:51 +0000 Files and hashes: 1: sjZrmQQ2twaLXyVculqgXp29v30.crl (hash: PDEwnQvV+PLR5mPnyjt7DmHrlGrifXSvXfqrBqCKQuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9327/serialNumber=B2366B990436B7068B5F255CBA5AA05E9DBDBF7D Validity Not Before: May 19 04:38:51 2024 GMT Not After : May 26 04:38:51 2024 GMT Subject: CN=6649825b-a239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:bf:5d:58:20:d7:30:f4:b6:3d:71:a5:cd: 21:fa:48:d4:b0:a9:97:08:c9:81:dd:64:22:3e:c5: e2:d4:06:21:bd:65:5a:2a:c1:f8:ba:9f:fa:d3:23: 21:45:cc:a4:43:4b:57:b1:b2:3c:32:26:83:df:e1: bc:0a:e5:ab:65:68:fe:d4:4c:56:2a:71:94:be:74: ba:86:61:15:c3:9b:ce:44:9c:29:2b:6d:b3:f2:72: 45:cb:f4:bb:5a:7e:4b:2e:ea:fa:17:bd:a1:62:ae: 8d:40:f6:ff:f8:8d:c0:c9:4f:a6:8e:45:c0:74:2e: 01:9d:53:b7:85:22:08:4c:d8:7e:3f:6f:d6:38:7c: ce:a5:80:a9:65:d0:0a:c7:a5:5f:35:a0:1a:3d:4f: 45:f9:81:db:1c:4f:18:c5:db:90:6f:10:27:32:d6: d2:06:20:93:55:47:e6:cc:44:59:64:b0:7d:9c:fc: 97:bf:74:bf:b4:a1:85:de:70:63:fa:78:b7:0c:a4: f5:83:53:1e:34:e3:a9:3b:01:f5:17:a7:c0:1a:93: 33:7a:f6:76:73:31:85:e8:7a:dd:2e:97:ee:23:95: ff:94:81:72:7d:41:7e:8a:08:94:4c:27:21:fe:98: fc:a2:97:18:d9:91:95:9e:a7:b2:af:9f:ff:6d:b6: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:42:DD:C1:F3:20:B5:59:77:BA:86:C1:49:8C:E2:73:18:B9:B6 X509v3 Authority Key Identifier: keyid:B2:36:6B:99:04:36:B7:06:8B:5F:25:5C:BA:5A:A0:5E:9D:BD:BF:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjZrmQQ2twaLXyVculqgXp29v30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9327/1366319A170011ED93A20647C4F9AE02/sjZrmQQ2twaLXyVculqgXp29v30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:80:ff:b7:81:40:78:23:19:e2:03:bc:f1:4e:2e:5b:3e:d3: 73:8b:bc:6c:16:58:9a:8f:19:e6:96:68:5c:43:70:aa:bf:62: 17:80:47:17:09:e2:25:da:74:94:a2:ec:09:28:09:23:30:ae: a4:0b:78:0f:f2:fa:74:a8:02:f8:9a:a4:e4:90:34:c3:ed:5d: 6f:31:99:3b:a7:94:56:b2:ca:a9:ac:c8:24:bc:b3:b8:93:23: 9d:88:f9:2e:8a:95:f9:b0:1a:40:e5:2a:6f:2b:7a:9d:60:8c: 5d:2a:fb:ff:71:25:60:c7:5f:72:3e:6f:d7:90:b3:72:ac:65: 7d:c2:ce:1c:83:2b:46:d3:11:cb:f5:93:89:70:d2:4c:2a:9a: 71:8e:53:dd:12:37:a7:c7:0a:3f:8e:46:32:7e:df:83:a8:f8: df:8c:d6:bb:b9:5a:ca:c8:ec:4f:6d:f4:54:3f:50:78:52:11: d5:a8:d6:64:e2:97:c3:38:00:a0:ac:48:a8:42:ef:21:09:a0: bc:6f:ce:07:f7:d3:5f:f2:29:4b:b9:33:45:8b:cb:ec:40:2a: f3:f0:73:fa:99:ad:c8:13:2a:34:6a:ca:df:46:df:cd:f1:ae: 34:a7:33:db:4a:83:b8:37:8f:dc:95:ec:bb:1c:4e:cc:72:81: 07:4c:66:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjcxMTAvBgNVBAUTKEIyMzY2Qjk5MDQzNkI3MDY4QjVGMjU1Q0JBNUFBMDVF OURCREJGN0QwHhcNMjQwNTE5MDQzODUxWhcNMjQwNTI2MDQzODUxWjAYMRYwFAYD VQQDEw02NjQ5ODI1Yi1hMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviq/XVgg1zD0tj1xpc0h+kjUsKmXCMmB3WQiPsXi1AYhvWVaKsH4up/60yMh RcykQ0tXsbI8MiaD3+G8CuWrZWj+1ExWKnGUvnS6hmEVw5vORJwpK22z8nJFy/S7 Wn5LLur6F72hYq6NQPb/+I3AyU+mjkXAdC4BnVO3hSIITNh+P2/WOHzOpYCpZdAK x6VfNaAaPU9F+YHbHE8YxduQbxAnMtbSBiCTVUfmzERZZLB9nPyXv3S/tKGF3nBj +ni3DKT1g1MeNOOpOwH1F6fAGpMzevZ2czGF6HrdLpfuI5X/lIFyfUF+igiUTCch /pj8opcY2ZGVnqeyr5//bbYrFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEMQt3B 8yC1WXe6hsFJjOJzGLm2MB8GA1UdIwQYMBaAFLI2a5kENrcGi18lXLpaoF6dvb99 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNy8xMzY2MzE5QTE3 MDAxMUVEOTNBMjA2NDdDNEY5QUUwMi9zalpybVFRMnR3YUxYeVZjdWxxZ1hwMjl2 MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqWnJtUVEydHdhTFh5VmN1bHFnWHAyOXYzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNy8xMzY2MzE5QTE3MDAxMUVEOTNBMjA2NDdDNEY5QUUwMi9zalpybVFRMnR3 YUxYeVZjdWxxZ1hwMjl2MzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpgP+3gUB4IxniA7zxTi5bPtNzi7xsFliajxnmlmhcQ3Cqv2IXgEcX CeIl2nSUouwJKAkjMK6kC3gP8vp0qAL4mqTkkDTD7V1vMZk7p5RWssqprMgkvLO4 kyOdiPkuipX5sBpA5SpvK3qdYIxdKvv/cSVgx19yPm/XkLNyrGV9ws4cgytG0xHL 9ZOJcNJMKppxjlPdEjenxwo/jkYyft+DqPjfjNa7uVrKyOxPbfRUP1B4UhHVqNZk 4pfDOACgrEioQu8hCaC8b84H99Nf8ilLuTNFi8vsQCrz8HP6ma3IEyo0asrfRt/N 8a40pzPbSoO4N4/cley7HE7McoEHTGbn -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org