$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: UVJm5Q3j/Gg22XEINwHNwIQUz0g0YoGb9Lyhh+DOB2o= Subject key identifier: AB:88:A0:80:ED:04:88:9E:99:42:F1:76:31:09:2F:D6:39:0B:C3:DF Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 062C Signing time: Sat 18 May 2024 23:46:31 +0000 Manifest this update: Sat 18 May 2024 23:46:30 +0000 Manifest next update: Sat 25 May 2024 23:46:30 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: bMuZ2yDV2ODv+exAHCbT3CSnq99nhMVmOUp2G9i4/LE=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: tklQtRdfCN4iqfDmzAmeABu5HqMOj1WU2XQNE+bTVBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: May 18 23:46:30 2024 GMT Not After : May 25 23:46:30 2024 GMT Subject: CN=66493dd7-a69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:ae:7a:a4:f2:9f:f9:6e:f2:73:b7:51:06: 59:be:15:fc:5b:af:c0:9c:8b:aa:ff:96:1f:fe:b5: fd:a9:23:6b:5d:80:5c:85:75:6c:e9:cc:44:ba:2c: 65:85:c5:88:40:49:2e:7a:d8:e5:37:38:63:26:f7: 66:7e:39:c9:77:2d:05:47:d4:65:5b:75:83:85:ef: 1d:de:e2:aa:f7:59:b2:59:76:17:f4:87:44:f3:ea: 41:77:c7:4d:5d:db:ab:f8:fa:b0:e6:b2:71:78:1e: 47:b4:32:de:14:53:68:0d:06:57:86:6b:72:86:10: 9c:6c:ca:0a:c2:24:96:23:eb:5b:8b:e0:1d:ef:5c: 2f:3b:15:c3:8c:37:da:44:73:05:fb:ec:83:90:ed: 2d:9f:9d:2f:45:88:c6:26:5d:14:e1:05:9e:0c:7e: 14:3c:e0:93:03:48:38:ea:7c:b3:3c:e9:88:26:80: a8:8b:3b:cb:eb:3a:ae:e7:31:03:c2:90:ac:f9:d2: c4:c7:79:ea:ff:ae:0c:51:28:16:6f:7a:a7:c4:84: af:3e:78:cb:8b:22:ff:ed:09:28:61:81:a1:5f:40: 68:91:d2:fe:9b:ef:de:cb:15:34:ee:3a:57:79:cc: 9a:14:4c:f5:fa:c9:ae:3e:21:ca:d3:c0:d2:fd:39: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:A0:80:ED:04:88:9E:99:42:F1:76:31:09:2F:D6:39:0B:C3:DF X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6d:29:04:34:66:63:eb:89:d9:3f:06:ed:e4:90:2c:92:6d: d3:8e:ac:a3:87:22:b0:21:82:02:fb:b1:eb:31:a5:c9:e4:0e: 04:06:ae:2f:86:0f:7a:d9:c1:35:3c:21:2d:56:39:2c:a7:1a: bf:d6:3f:ca:d0:d2:c7:e9:8e:00:66:f8:98:a2:c1:09:3c:10: a9:1c:58:5c:28:94:02:eb:f2:82:9a:45:03:4e:97:0a:f8:ea: d7:01:d2:64:d9:0b:e7:76:3e:1a:83:4b:16:a2:db:6d:db:48: 18:1f:fe:9e:28:e3:86:dc:60:7e:f6:9d:5b:1c:c3:90:69:15: 77:d6:0a:2d:af:d2:77:4d:a3:5d:b8:01:dc:ea:45:53:69:02: a3:d9:f1:dc:dd:69:8b:a5:4c:ec:03:ce:c6:76:95:06:c1:90: eb:28:55:9e:31:1f:a2:70:42:ee:f9:44:2f:08:15:c3:41:29: e0:f9:87:d9:df:0d:8d:e3:07:7e:80:0e:b3:1e:1a:8c:79:94: 05:f5:12:1a:a0:0e:9a:4c:93:12:44:60:8f:1f:86:fb:7a:52: 1c:8a:9b:06:1e:b7:67:72:77:02:35:f1:a9:40:eb:2e:eb:98: f8:2b:e2:76:80:6a:50:d1:a5:1e:d3:28:80:f1:af:dd:cc:29: 86:07:04:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjQwNTE4MjM0NjMwWhcNMjQwNTI1MjM0NjMwWjAYMRYwFAYD VQQDEw02NjQ5M2RkNy1hNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrOueqTyn/lu8nO3UQZZvhX8W6/AnIuq/5Yf/rX9qSNrXYBchXVs6cxEuixl hcWIQEkuetjlNzhjJvdmfjnJdy0FR9RlW3WDhe8d3uKq91myWXYX9IdE8+pBd8dN Xdur+Pqw5rJxeB5HtDLeFFNoDQZXhmtyhhCcbMoKwiSWI+tbi+Ad71wvOxXDjDfa RHMF++yDkO0tn50vRYjGJl0U4QWeDH4UPOCTA0g46nyzPOmIJoCoizvL6zqu5zED wpCs+dLEx3nq/64MUSgWb3qnxISvPnjLiyL/7QkoYYGhX0BokdL+m+/eyxU07jpX ecyaFEz1+smuPiHK08DS/TkMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuIoIDt BIiemULxdjEJL9Y5C8PfMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXbSkENGZj64nZPwbt5JAskm3TjqyjhyKwIYIC+7HrMaXJ5A4EBq4v hg962cE1PCEtVjkspxq/1j/K0NLH6Y4AZviYosEJPBCpHFhcKJQC6/KCmkUDTpcK +OrXAdJk2Qvndj4ag0sWottt20gYH/6eKOOG3GB+9p1bHMOQaRV31gotr9J3TaNd uAHc6kVTaQKj2fHc3WmLpUzsA87GdpUGwZDrKFWeMR+icELu+UQvCBXDQSng+YfZ 3w2N4wd+gA6zHhqMeZQF9RIaoA6aTJMSRGCPH4b7elIcipsGHrdncncCNfGpQOsu 65j4K+J2gGpQ0aUe0yiA8a/dzCmGBwSh -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org