$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json) Hash identifier: 4wE/DcVEczf2ow0rQ7YYnnSdZ50S2ZB934avATa45AI= Subject key identifier: 6A:E6:35:A9:6A:CA:40:74:A2:35:B4:AB:C7:25:7E:22:35:94:09:13 Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft Manifest number: BA Signing time: Sun 19 May 2024 06:28:00 +0000 Manifest this update: Sun 19 May 2024 06:27:59 +0000 Manifest next update: Sun 26 May 2024 06:27:59 +0000 Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: vg1YOGGlEV7JeI0RN8CsyJzzFkgBK7JjcmZZtvJB2Nk=) 2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: rlKl2Pr8a6vrmygkXuTtnSn/232x96ED+d2JzG3BqsA=) 3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: S9orSF/SA+1jJMFTdvWFlE7rC4BhJzueXE/ToaNYW+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Validity Not Before: May 19 06:27:59 2024 GMT Not After : May 26 06:27:59 2024 GMT Subject: CN=66499bf0-b306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:65:56:fa:72:88:8c:2e:cb:53:ff:16:80: 44:a3:3c:2b:51:05:ef:50:75:b6:15:79:f4:c2:13: bd:ab:2f:82:07:81:b2:dd:38:6f:11:2e:9a:76:97: 6b:b0:21:82:ee:42:c5:73:13:07:5f:21:bf:a8:79: 15:c2:b2:dc:23:b4:c7:32:e1:93:55:90:2f:d5:41: b0:3a:24:1e:63:7b:76:27:d2:9c:75:32:2c:c4:b8: 4f:ba:51:e0:47:09:5d:ef:e6:95:37:47:cd:4a:1e: 16:20:d6:8b:c4:02:74:ea:9f:f4:bc:55:11:93:99: b2:20:76:18:97:ae:03:32:c1:16:8f:98:da:be:46: e2:1c:fa:d1:9e:0d:9a:5e:7a:23:91:23:c4:9a:85: ff:ea:31:54:ba:17:0f:69:0e:cd:df:3d:ce:1d:76: 16:3e:75:98:a5:d7:47:59:90:42:31:18:ca:3f:dc: 1a:90:69:ba:e4:73:b3:a7:2a:60:11:46:f5:81:cf: e9:fd:b6:98:e9:4a:62:24:c5:d3:15:7a:77:d7:5a: e2:ac:83:51:7e:85:c7:38:88:74:26:b6:74:f4:27: 60:c7:17:2b:de:1f:c0:72:d6:86:5d:fa:bf:c1:a6: ec:a8:80:e6:fe:c9:c2:1b:f7:f0:c5:dd:af:4f:52: d7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E6:35:A9:6A:CA:40:74:A2:35:B4:AB:C7:25:7E:22:35:94:09:13 X509v3 Authority Key Identifier: keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f5:d5:44:aa:9d:09:b5:fb:e4:91:0f:f2:f7:55:c4:29:7d: cb:a2:9c:25:30:10:5c:32:58:c5:7e:8b:2f:1d:6e:a7:07:11: 9b:87:9e:2e:87:6f:21:02:0e:c7:0d:4c:66:4b:69:fe:e5:1c: 8f:40:23:38:56:6e:7a:b7:20:c3:db:ba:51:34:8e:30:df:a0: 9c:86:8e:fc:32:76:69:e1:a5:4b:aa:d3:ca:99:56:23:8d:21: 01:73:0c:53:c1:c1:bb:8f:bc:41:ae:b3:18:84:43:45:9f:bb: bb:e1:7a:52:75:fd:ad:8e:aa:0f:02:54:b0:2b:0a:d3:5a:47: f3:dc:15:fc:cb:6c:0f:21:47:6a:18:2d:48:d2:62:3b:17:aa: ab:e5:2a:17:f7:b2:43:db:d4:05:b6:24:e1:4c:24:56:ba:37: 3a:87:bc:a4:c1:54:21:27:43:03:93:02:02:17:25:77:cc:b6: f2:48:b8:85:d8:92:52:cc:c8:24:b8:91:7d:5c:5c:0a:70:7c: 6c:c4:e3:d0:05:8a:18:b1:30:fd:d3:d4:8d:34:67:7a:1f:f5: 23:1c:90:c3:c6:9d:fb:83:66:25:6f:80:37:00:76:ce:14:62: 40:73:f4:4a:da:8b:45:9c:3f:42:47:ab:b7:6d:bb:03:86:bd: 1e:8c:83:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RUMxMTAvBgNVBAUTKDI2QjJDODQ2MkZFQTFEQTUxNDE2NkI1QjEzOTBBRDBD QzI3N0E1QTgwHhcNMjQwNTE5MDYyNzU5WhcNMjQwNTI2MDYyNzU5WjAYMRYwFAYD VQQDEw02NjQ5OWJmMC1iMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IVlVvpyiIwuy1P/FoBEozwrUQXvUHW2FXn0whO9qy+CB4Gy3ThvES6adpdr sCGC7kLFcxMHXyG/qHkVwrLcI7THMuGTVZAv1UGwOiQeY3t2J9KcdTIsxLhPulHg Rwld7+aVN0fNSh4WINaLxAJ06p/0vFURk5myIHYYl64DMsEWj5javkbiHPrRng2a XnojkSPEmoX/6jFUuhcPaQ7N3z3OHXYWPnWYpddHWZBCMRjKP9wakGm65HOzpypg EUb1gc/p/baY6UpiJMXTFXp311rirINRfoXHOIh0JrZ09Cdgxxcr3h/ActaGXfq/ wabsqIDm/snCG/fwxd2vT1LX1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrmNalq ykB0ojW0q8clfiI1lAkTMB8GA1UdIwQYMBaAFCayyEYv6h2lFBZrWxOQrQzCd6Wo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFQy8wNTMxNURFRUZE REIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhhVVVGbXRiRTVDdERNSjNw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyTElSaV9xSGFVVUZtdGJFNUN0RE1KM3BhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFQy8wNTMxNURFRUZEREIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhh VVVGbXRiRTVDdERNSjNwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR9dVEqp0JtfvkkQ/y91XEKX3LopwlMBBcMljFfosvHW6nBxGbh54u h28hAg7HDUxmS2n+5RyPQCM4Vm56tyDD27pRNI4w36Ccho78MnZp4aVLqtPKmVYj jSEBcwxTwcG7j7xBrrMYhENFn7u74XpSdf2tjqoPAlSwKwrTWkfz3BX8y2wPIUdq GC1I0mI7F6qr5SoX97JD29QFtiThTCRWujc6h7ykwVQhJ0MDkwICFyV3zLbySLiF 2JJSzMgkuJF9XFwKcHxsxOPQBYoYsTD909SNNGd6H/UjHJDDxp37g2Ylb4A3AHbO FGJAc/RK2otFnD9CR6u3bbsDhr0ejIN1 -----END CERTIFICATE-----Generated at Sun May 19 08:25:11 2024 by rpki-client on console-ams.rpki-client.org