$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json) Hash identifier: 3nY1+8lSHGceEPLTmMUhNoGGW70HxRdR8IlI2K99jq4= Subject key identifier: 21:64:E4:9D:B5:FF:FF:2C:DA:76:CF:8D:91:17:62:C6:B1:02:74:FA Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft Manifest number: 20 Signing time: Sun 19 May 2024 08:35:09 +0000 Manifest this update: Sun 19 May 2024 08:35:09 +0000 Manifest next update: Sun 26 May 2024 08:35:09 +0000 Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: inns6G9fEd0kP7s5qsmLHWp5aN1X1qZvyl9gA1nVOJI=) 2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: 5YTtYU8GaHrvE4yyR1EY9hka1AZ6ZuRNXoHQQl1jR3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Validity Not Before: May 19 08:35:09 2024 GMT Not After : May 26 08:35:09 2024 GMT Subject: CN=6649b9bd-2b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:ab:ac:f5:e1:1d:c0:ef:22:72:f7:a0:46: b6:dc:22:70:a1:43:bf:de:cf:2c:a7:ba:bf:79:75: cf:52:3a:49:74:6f:00:6c:64:2e:21:97:92:54:f3: 40:22:41:a8:ae:50:fa:ac:01:62:d2:7f:41:9b:b7: 5d:f9:3d:67:d8:b2:6a:4b:08:8a:f5:2f:08:e1:b1: 23:a3:49:d3:8a:3b:64:ae:a6:1d:d9:87:c4:a2:c8: 01:59:25:47:02:8e:6f:95:ee:f2:39:a9:84:3b:92: 6a:9e:54:a9:6e:c7:48:df:91:58:b2:16:87:42:7b: eb:ff:d0:65:a8:7b:2b:14:63:d9:28:5e:e1:2d:ed: 72:19:03:ed:8b:a4:b0:4e:68:d1:55:3f:bc:d3:b8: 9c:ef:50:4a:d4:65:8b:23:ca:79:61:81:cd:62:ec: 56:a5:42:51:17:9d:25:10:45:f2:8f:78:20:a1:9b: 77:99:13:56:9f:d0:e0:9a:53:ec:6d:ac:e0:84:7f: 01:2e:9a:4e:fa:cc:0f:14:37:85:eb:ef:58:f3:db: a1:2f:77:6c:26:bc:32:d8:50:c8:4b:d8:63:6a:ff: 3a:b5:6f:3c:1d:4a:87:57:9a:8b:4d:41:7d:1e:93: da:d5:12:93:29:6e:25:32:bb:fa:92:39:02:5b:fc: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:E4:9D:B5:FF:FF:2C:DA:76:CF:8D:91:17:62:C6:B1:02:74:FA X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f5:2a:bc:f0:32:b2:32:59:7c:9e:3b:8e:8a:bd:4c:1b:1c: b0:35:78:a1:b3:aa:95:ee:70:96:69:95:cf:da:18:16:37:fd: 7d:6e:dc:58:6d:5e:1e:5e:ca:9a:10:b7:9d:93:71:3c:3e:b5: 41:10:4c:1b:52:28:5b:8d:65:d4:2a:88:87:b8:47:91:d8:65: 4f:1e:56:fe:f5:7b:56:01:86:6a:04:cc:51:99:39:6f:c3:e6: 44:4d:41:0f:fa:01:a3:c2:f1:3d:27:22:a6:8d:01:d5:42:b8: d5:d0:83:a3:d2:85:5b:96:a0:2d:29:8d:23:1c:1c:78:4c:44: e9:c1:5d:48:53:6a:ad:a1:82:b1:a0:7c:5c:f1:9c:5d:56:dc: 03:fa:1f:7a:88:5d:3d:34:1d:cb:48:8f:97:07:f6:c4:25:84: 9a:6d:88:02:0f:24:fe:dc:bf:4a:81:1c:a8:de:e7:ee:41:b1: 10:61:eb:06:99:98:e8:79:30:e9:5f:4b:db:4c:06:a4:1f:fc: ed:e5:ff:21:d8:9f:94:57:07:be:df:08:b4:e0:d4:3a:63:55: 32:8f:06:9f:1b:2a:bb:32:9d:04:9c:b9:0f:6a:a7:f5:0e:93: 4c:ba:5e:db:98:1d:a4:d0:02:17:27:07:88:f7:3a:bc:7a:48: f0:e7:de:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Qjg2RDExMC8GA1UEBRMoMjU2QjVEMTc5MEQyNEM0RDZDOTcyMDY0RTkxQzZBRjAw QkQ2OEUzMjAeFw0yNDA1MTkwODM1MDlaFw0yNDA1MjYwODM1MDlaMBgxFjAUBgNV BAMTDTY2NDliOWJkLTJiMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKAqus9eEdwO8icvegRrbcInChQ7/ezyynur95dc9SOkl0bwBsZC4hl5JU80Ai QaiuUPqsAWLSf0Gbt135PWfYsmpLCIr1LwjhsSOjSdOKO2Suph3Zh8SiyAFZJUcC jm+V7vI5qYQ7kmqeVKlux0jfkViyFodCe+v/0GWoeysUY9koXuEt7XIZA+2LpLBO aNFVP7zTuJzvUErUZYsjynlhgc1i7FalQlEXnSUQRfKPeCChm3eZE1af0OCaU+xt rOCEfwEumk76zA8UN4Xr71jz26Evd2wmvDLYUMhL2GNq/zq1bzwdSodXmotNQX0e k9rVEpMpbiUyu/qSOQJb/EQ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIWTknbX/ /yzads+NkRdixrECdPowHwYDVR0jBBgwFoAUJWtdF5DSTE1slyBk6Rxq8AvWjjIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCODZELzZGMDU4MjBFRTUz RTExRUVBMzhGMDg3N0M0RjlBRTAyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSld0ZEY1RFNURTFzbHlCazZSeHE4QXZXampJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC ODZELzZGMDU4MjBFRTUzRTExRUVBMzhGMDg3N0M0RjlBRTAyL0pXdGRGNURTVEUx c2x5Qms2UnhxOEF2V2pqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIX1KrzwMrIyWXyeO46KvUwbHLA1eKGzqpXucJZplc/aGBY3/X1u3Fht Xh5eypoQt52TcTw+tUEQTBtSKFuNZdQqiIe4R5HYZU8eVv71e1YBhmoEzFGZOW/D 5kRNQQ/6AaPC8T0nIqaNAdVCuNXQg6PShVuWoC0pjSMcHHhMROnBXUhTaq2hgrGg fFzxnF1W3AP6H3qIXT00HctIj5cH9sQlhJptiAIPJP7cv0qBHKje5+5BsRBh6waZ mOh5MOlfS9tMBqQf/O3l/yHYn5RXB77fCLTg1DpjVTKPBp8bKrsynQScuQ9qp/UO k0y6XtuYHaTQAhcnB4j3Orx6SPDn3lk= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org