$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: lxfq9w7/V2m6GxYnfBiLS6EMjxFk1iAGzTpqihpile0= Subject key identifier: 4B:39:29:26:EF:2F:60:54:A0:F1:DF:4C:3B:3D:12:A3:B0:7C:E5:6C Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 09DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 09D5 Signing time: Sat 18 May 2024 20:46:09 +0000 Manifest this update: Sat 18 May 2024 20:46:09 +0000 Manifest next update: Sat 25 May 2024 20:46:09 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: 8tdvupSNm2iozyHBNRxUvmTF1uxpg78m4C0iDw9ejn4=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: FsrqJMxwUArDqSx9PxSQpooYLmcJ2wgDgIoQ/drJeLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: May 18 20:46:09 2024 GMT Not After : May 25 20:46:09 2024 GMT Subject: CN=66491391-85bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:4a:7a:c5:80:2c:ec:1d:83:c0:6c:7a:6b: 8e:a2:7d:2f:e8:d4:a2:19:bd:cb:3f:8d:c4:a8:d4: 48:54:49:c6:6f:89:3f:1d:13:f1:ee:af:0a:2d:2f: 9a:e4:5e:66:e9:74:75:18:39:3c:96:ca:65:b4:80: 82:d6:d2:2a:bb:be:ad:1b:92:d7:e5:38:86:8f:29: e2:b9:41:84:f2:55:30:f4:1a:84:60:d3:e4:66:fc: e5:cf:6f:3a:d7:8e:c7:fd:76:6a:a7:53:e6:31:df: 36:90:19:72:e8:af:f6:2b:3b:03:e3:28:8d:2d:3e: b3:02:45:e5:a2:99:ab:fe:8d:07:0b:49:f1:80:35: 9c:c5:3a:ee:c0:56:2c:af:54:3d:3e:39:f7:50:27: 77:46:e9:8e:c7:ad:65:d1:d3:99:2a:86:74:f9:0f: c0:35:cf:21:d4:28:15:21:0e:05:1b:2a:14:8c:d7: b0:cc:b7:3b:ee:76:2f:c9:31:6f:7a:66:3e:a8:29: 84:f1:1e:bc:85:61:bc:b6:03:24:e5:ab:14:80:c7: d7:b6:d5:ea:4b:26:01:a5:f8:fc:b2:e7:1d:fb:e3: 4f:b5:b5:3b:4c:c1:0e:4e:1b:1d:2c:2f:d2:4d:f3: 75:da:6f:3e:29:4d:72:18:1a:98:67:9c:43:d4:36: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:39:29:26:EF:2F:60:54:A0:F1:DF:4C:3B:3D:12:A3:B0:7C:E5:6C X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ac:00:d6:e8:16:09:8b:aa:7b:97:25:ee:2f:1a:68:94:8e: 5e:85:52:3c:34:1d:4d:69:d0:2c:6b:fe:1e:d2:f0:e5:1b:60: 4e:f2:5d:ff:ff:c7:0d:31:21:4b:64:67:40:12:31:75:4c:f0: d1:8c:35:00:2f:4b:bd:b6:a8:b4:ed:2b:b6:da:a5:5a:19:21: e7:99:33:e3:6c:99:46:85:25:74:7e:bd:08:5f:9f:dc:1c:ca: 23:45:6f:08:d9:d2:00:60:31:6a:46:a8:b2:9f:85:34:be:11: 0f:58:a8:70:25:ce:9a:22:d7:77:e2:d6:39:b1:7b:e4:4f:af: a8:b8:6d:1e:91:6b:7f:5d:57:42:93:2c:93:e2:6f:45:c8:19: 98:f0:e5:e8:e9:9b:60:99:cf:7c:65:a5:e2:b8:65:bd:12:56: f4:56:70:c2:ac:19:0a:67:06:eb:76:94:76:d9:0d:72:e4:a6: 92:90:d3:1d:39:24:d4:8c:92:1f:bb:f0:3d:43:29:b8:7c:a0: d9:6b:ee:c3:a8:85:09:a7:b0:74:66:cd:8b:55:95:ce:ec:db: 2b:90:82:37:78:3e:31:fe:33:17:e3:91:f5:c9:3e:ed:ad:ed: df:c9:67:0f:b3:56:ec:2b:50:0d:0b:ac:73:22:87:4d:0d:0d: c0:cb:f4:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjQwNTE4MjA0NjA5WhcNMjQwNTI1MjA0NjA5WjAYMRYwFAYD VQQDEw02NjQ5MTM5MS04NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8lKesWALOwdg8BsemuOon0v6NSiGb3LP43EqNRIVEnGb4k/HRPx7q8KLS+a 5F5m6XR1GDk8lspltICC1tIqu76tG5LX5TiGjyniuUGE8lUw9BqEYNPkZvzlz286 147H/XZqp1PmMd82kBly6K/2KzsD4yiNLT6zAkXlopmr/o0HC0nxgDWcxTruwFYs r1Q9Pjn3UCd3RumOx61l0dOZKoZ0+Q/ANc8h1CgVIQ4FGyoUjNewzLc77nYvyTFv emY+qCmE8R68hWG8tgMk5asUgMfXttXqSyYBpfj8sucd++NPtbU7TMEOThsdLC/S TfN12m8+KU1yGBqYZ5xD1DYNgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs5KSbv L2BUoPHfTDs9EqOwfOVsMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZrADW6BYJi6p7lyXuLxpolI5ehVI8NB1NadAsa/4e0vDlG2BO8l3/ /8cNMSFLZGdAEjF1TPDRjDUAL0u9tqi07Su22qVaGSHnmTPjbJlGhSV0fr0IX5/c HMojRW8I2dIAYDFqRqiyn4U0vhEPWKhwJc6aItd34tY5sXvkT6+ouG0ekWt/XVdC kyyT4m9FyBmY8OXo6Ztgmc98ZaXiuGW9Elb0VnDCrBkKZwbrdpR22Q1y5KaSkNMd OSTUjJIfu/A9Qym4fKDZa+7DqIUJp7B0Zs2LVZXO7NsrkII3eD4x/jMX45H1yT7t re3fyWcPs1bsK1ANC6xzIodNDQ3Ay/TQ -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org