$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: Ihcj7r+DGK/guiIEoefNa3SIGzFFTh0luFgzdAZFPbQ= Subject key identifier: 06:F2:5E:7C:BB:B1:C3:69:FA:C7:96:3F:B9:B3:15:DD:A7:78:53:7B Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 01B7 Signing time: Sun 19 May 2024 04:32:22 +0000 Manifest this update: Sun 19 May 2024 04:32:22 +0000 Manifest next update: Sun 26 May 2024 04:32:22 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: iGY1PVVowwm7hEhgAL/+bNw2izTGDBJHf+yoE93saP8=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: pJjk8SgvyYIKX49gQqUloPx3MgDR+TPracxmi/zcmsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: May 19 04:32:22 2024 GMT Not After : May 26 04:32:22 2024 GMT Subject: CN=664980d6-8fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:4f:58:2f:d6:8c:2c:2a:c2:df:83:e6:fd: 1f:89:11:ab:e4:7b:f2:53:70:b9:fc:b6:2e:c0:2b: f2:29:e2:6c:6a:36:d5:93:44:c0:38:72:34:b7:ba: 36:92:b6:8a:f9:4d:b3:87:7d:d1:e0:bf:c0:2b:b4: 59:54:e8:f6:88:0a:75:0d:51:ee:7d:89:56:99:c8: a0:6b:d9:cf:3f:b7:ab:9f:28:8b:3b:c6:0a:91:7e: 55:8f:15:eb:c2:aa:66:70:42:8d:00:dc:b1:ad:98: d0:56:8e:10:b9:32:24:4c:89:44:fe:d3:e9:83:a7: d0:b3:df:25:ca:d3:e2:76:ab:26:03:99:c8:01:3a: 4f:e3:05:16:c3:50:51:8c:ec:42:3d:00:e8:e1:0d: 18:8f:21:fa:76:2a:7f:04:5c:af:a4:aa:e8:65:ca: fc:92:63:9d:b2:b7:3a:a6:17:aa:e5:18:b2:87:a4: ff:f9:a2:51:1f:fd:15:60:3d:fa:7a:8e:74:be:ad: 72:41:d4:02:13:da:fb:66:58:28:55:a5:27:5b:82: 7b:2f:d5:3b:82:cf:f5:d8:ce:a2:e6:32:f6:7d:bd: 8b:5d:c6:51:dd:1d:76:e5:72:29:f5:3e:35:89:8c: 8b:68:1d:f1:c0:6d:f1:0e:76:3a:f3:68:28:ba:40: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:5E:7C:BB:B1:C3:69:FA:C7:96:3F:B9:B3:15:DD:A7:78:53:7B X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:5b:dc:04:85:9a:b7:00:cb:fb:8d:c4:ce:35:32:1a:42: 6b:43:3d:96:c9:32:e1:cb:80:1b:f7:74:a8:fd:98:a7:33:3c: 91:19:e9:d5:eb:d5:b6:d2:b0:a0:5d:a5:2d:e7:5d:67:5b:bf: 56:78:58:f6:9f:03:fc:69:9a:f3:64:c0:a4:80:02:b7:5d:20: 01:b4:db:bd:5c:88:4f:5a:7b:88:20:ad:13:0d:11:da:33:e7: d9:9e:ef:b8:2d:b3:2b:21:3e:4d:25:72:90:ec:17:8c:fa:90: e2:cc:f0:52:de:04:e9:dc:50:8f:6e:48:97:c2:be:27:31:27: ce:99:da:48:86:d0:46:ae:a1:af:94:e4:98:84:4a:55:d7:9d: 4a:34:69:92:06:9a:f0:2c:f6:f6:32:bc:b8:db:db:e4:09:0f: 64:2e:3b:c2:64:fd:fe:80:41:b0:89:0b:bd:64:db:52:61:d3: ad:d4:e0:a0:9b:49:05:0b:4d:b0:3b:66:ac:26:0f:56:4d:83: e7:b1:a2:55:45:92:ba:60:83:dc:dc:7d:8e:d0:89:5a:1e:4b: a3:bf:88:05:90:41:f9:ee:b0:6c:94:8b:d0:45:56:36:2b:d8: 87:30:ae:95:d7:38:3f:ef:ba:cf:cc:12:3f:15:0e:aa:8a:86: df:8b:5f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjQwNTE5MDQzMjIyWhcNMjQwNTI2MDQzMjIyWjAYMRYwFAYD VQQDEw02NjQ5ODBkNi04ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQVPWC/WjCwqwt+D5v0fiRGr5HvyU3C5/LYuwCvyKeJsajbVk0TAOHI0t7o2 kraK+U2zh33R4L/AK7RZVOj2iAp1DVHufYlWmciga9nPP7ernyiLO8YKkX5VjxXr wqpmcEKNANyxrZjQVo4QuTIkTIlE/tPpg6fQs98lytPidqsmA5nIATpP4wUWw1BR jOxCPQDo4Q0YjyH6dip/BFyvpKroZcr8kmOdsrc6pheq5Riyh6T/+aJRH/0VYD36 eo50vq1yQdQCE9r7ZlgoVaUnW4J7L9U7gs/12M6i5jL2fb2LXcZR3R125XIp9T41 iYyLaB3xwG3xDnY682goukDkjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbyXny7 scNp+seWP7mzFd2neFN7MB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC5FvcBIWatwDL+43EzjUyGkJrQz2WyTLhy4Ab93So/ZinMzyRGenV 69W20rCgXaUt511nW79WeFj2nwP8aZrzZMCkgAK3XSABtNu9XIhPWnuIIK0TDRHa M+fZnu+4LbMrIT5NJXKQ7BeM+pDizPBS3gTp3FCPbkiXwr4nMSfOmdpIhtBGrqGv lOSYhEpV151KNGmSBprwLPb2Mry429vkCQ9kLjvCZP3+gEGwiQu9ZNtSYdOt1OCg m0kFC02wO2asJg9WTYPnsaJVRZK6YIPc3H2O0IlaHkujv4gFkEH57rBslIvQRVY2 K9iHMK6V1zg/77rPzBI/FQ6qiobfi1/4 -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org