$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: xyg3cCsJHyuEPo+CVpC1G4MHBIwOIG8YW5FnGbJoq3E= Subject key identifier: 94:13:AB:07:B5:28:A0:80:EF:34:39:BC:D3:6F:0D:21:5F:7C:80:6D Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 51 Signing time: Sun 19 May 2024 07:56:21 +0000 Manifest this update: Sun 19 May 2024 07:56:21 +0000 Manifest next update: Sun 26 May 2024 07:56:21 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: w7NbHUxKvi0ci67W0JfuV8KRslwezsL471YZPejb4q4=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: k5vDxZxY0nlbHanZLi0NcjwM/K12xntBq1yqMO9Bazs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: May 19 07:56:21 2024 GMT Not After : May 26 07:56:21 2024 GMT Subject: CN=6649b0a5-3355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:7b:6c:cf:fc:31:1a:6e:99:d3:95:1d:b2: 97:2f:5a:73:80:e2:f4:57:93:8c:c2:6f:91:73:a1: c8:40:0c:fc:d5:4f:1d:af:c8:d5:50:41:8e:8d:0f: 25:e4:40:bb:0b:ab:74:de:73:b8:f2:63:c1:a5:d4: 8b:ee:f9:1b:44:d3:c8:33:38:59:68:92:fb:7c:68: 45:a2:75:c3:ba:fc:d5:b2:f9:ba:b4:e7:05:8e:e8: 38:bb:f4:11:8b:80:0a:d7:09:66:df:8c:0f:66:10: 5e:68:0e:00:77:5d:3a:99:00:7a:25:3a:49:64:c4: 2e:07:3c:99:d5:15:07:07:ec:f3:34:f2:86:91:40: 9f:2f:77:e3:6c:09:d2:c9:26:83:29:ed:af:93:5d: 0c:87:ed:a5:3b:85:c5:82:cc:48:0b:88:07:cc:22: 96:91:d0:c5:bd:88:ed:17:2c:d3:23:3a:a8:e5:6b: ae:36:7b:84:8d:b2:87:e8:7b:42:31:da:f3:ad:8d: fc:85:5c:c5:b6:ae:eb:6f:b6:ae:39:fd:79:6d:09: 58:ab:13:94:ef:da:fd:e0:8b:1c:e9:3b:ac:f5:ea: 57:75:77:41:e3:12:98:bb:7a:c3:ab:d5:2a:ba:b4: 21:86:86:a6:9c:e7:13:a0:56:01:ab:b4:dc:fa:17: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:13:AB:07:B5:28:A0:80:EF:34:39:BC:D3:6F:0D:21:5F:7C:80:6D X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:c4:37:d8:de:8f:de:ff:fc:8e:7e:f8:79:78:ba:09:2a: b3:86:5a:b4:0d:d9:de:da:62:87:92:69:ed:6d:be:5f:c9:66: 0c:40:9a:b2:6e:c6:81:34:b4:bb:54:9b:b1:df:0f:a6:e2:a9: f6:e3:fd:c8:f9:8e:11:0b:b0:0c:a0:bb:4c:64:5c:04:70:ae: 7b:f7:4e:c9:ae:8a:05:7f:91:d6:17:db:30:d4:17:9d:f1:9f: c3:b8:f6:2c:f3:74:13:86:73:e9:18:ab:68:f7:e0:5d:8d:00: e9:1b:c0:95:0b:f0:a5:dd:01:6c:59:48:e8:6d:00:19:1d:14: 68:4f:58:f1:d4:f4:3c:79:1b:26:05:ee:b0:86:23:5d:cd:a3: d0:8e:37:cc:9f:b2:8d:8c:75:5b:86:5e:4d:7f:bf:29:a7:e5: a9:8a:11:5a:73:61:d9:43:f5:89:e0:e1:5c:a0:30:a8:b5:46: 69:1a:c8:22:ee:27:d5:72:30:10:a5:39:63:8e:1b:4f:34:9a: f3:de:de:8d:cb:29:8a:c6:92:80:2b:c6:8e:ae:b6:a1:23:4c: 2f:44:cf:57:24:42:85:59:19:51:1b:10:44:80:8f:a6:59:19: b1:67:21:9b:91:21:81:2e:6f:5b:ac:aa:96:64:be:a1:fd:34: f3:3e:80:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDFBMjExMC8GA1UEBRMoOEYwNjg2OUNFRkNENUMyNzIzMTMyRTNFRjlDREI3QTQ2 MUQwMUIxOTAeFw0yNDA1MTkwNzU2MjFaFw0yNDA1MjYwNzU2MjFaMBgxFjAUBgNV BAMTDTY2NDliMGE1LTMzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrUHtsz/wxGm6Z05UdspcvWnOA4vRXk4zCb5FzochADPzVTx2vyNVQQY6NDyXk QLsLq3Tec7jyY8Gl1Ivu+RtE08gzOFlokvt8aEWidcO6/NWy+bq05wWO6Di79BGL gArXCWbfjA9mEF5oDgB3XTqZAHolOklkxC4HPJnVFQcH7PM08oaRQJ8vd+NsCdLJ JoMp7a+TXQyH7aU7hcWCzEgLiAfMIpaR0MW9iO0XLNMjOqjla642e4SNsofoe0Ix 2vOtjfyFXMW2rutvtq45/XltCVirE5Tv2v3gixzpO6z16ld1d0HjEpi7esOr1Sq6 tCGGhqac5xOgVgGrtNz6F86rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlBOrB7Uo oIDvNDm8028NIV98gG0wHwYDVR0jBBgwFoAUjwaGnO/NXCcjEy4++c23pGHQGxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMUEyL0VGRTA0MDRBOUIz QzExRUVCM0ZDQUQ0OUM0RjlBRTAyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvandhR25PX05YQ2NqRXk0LS1jMjNwR0hRR3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MUEyL0VGRTA0MDRBOUIzQzExRUVCM0ZDQUQ0OUM0RjlBRTAyL2p3YUduT19OWENj akV5NC0tYzIzcEdIUUd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIr+xDfY3o/e//yOfvh5eLoJKrOGWrQN2d7aYoeSae1tvl/JZgxAmrJu xoE0tLtUm7HfD6biqfbj/cj5jhELsAygu0xkXARwrnv3TsmuigV/kdYX2zDUF53x n8O49izzdBOGc+kYq2j34F2NAOkbwJUL8KXdAWxZSOhtABkdFGhPWPHU9Dx5GyYF 7rCGI13No9CON8yfso2MdVuGXk1/vymn5amKEVpzYdlD9Yng4VygMKi1RmkayCLu J9VyMBClOWOOG080mvPe3o3LKYrGkoArxo6utqEjTC9Ez1ckQoVZGVEbEESAj6ZZ GbFnIZuRIYEub1usqpZkvqH9NPM+gIs= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org