$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json) Hash identifier: BM+55n/TZ9kqUrV/eOgxS/y6SLIBfPJYgg6egf9Pr7I= Subject key identifier: 54:4A:F1:CC:1F:B5:28:2D:09:BD:DE:F3:4F:3E:60:77:2B:74:53:46 Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Certificate serial: 33DE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft Manifest number: 45A8 Signing time: Mon 20 May 2024 14:22:30 +0000 Manifest this update: Mon 20 May 2024 14:22:29 +0000 Manifest next update: Mon 27 May 2024 14:22:29 +0000 Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: W9WkyNn9bw6+FyBeO7bYEjaPqIY69CQCEcd3vu1GP9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 14:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13278 (0x33de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Validity Not Before: May 20 14:22:29 2024 GMT Not After : May 27 14:22:29 2024 GMT Subject: CN=664b5ca6-4610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:81:94:fb:b8:5a:45:e8:79:c5:2b:b2:35: af:9b:e9:98:1e:8a:f6:f4:26:e1:32:16:8f:85:2e: 21:b1:39:9f:0e:94:59:9a:66:12:02:e7:d7:2d:b5: 40:90:08:59:89:f3:24:c2:a6:94:4f:28:75:2e:e6: 02:f2:79:17:65:92:1d:ac:11:65:9c:bc:7e:00:76: 2a:fa:8d:01:7e:87:a1:31:44:06:61:fc:72:86:c3: 60:1e:4e:65:1d:fa:1c:56:ec:07:63:88:e0:df:82: 29:54:3f:28:9a:b1:99:64:66:cf:40:f4:65:19:2a: bf:54:39:aa:9d:b2:35:6d:35:76:94:e4:55:78:38: 6d:c7:bb:67:86:b4:d7:0e:29:68:b4:ae:c5:50:c1: 30:e4:57:cf:c5:03:7d:8e:a3:53:c2:94:16:3b:b5: 86:4e:ff:d0:3e:d0:82:d1:5f:0e:5a:cc:cf:7c:dc: 16:7a:26:aa:9b:c5:77:ed:de:d6:7d:c2:a1:3d:af: 6c:f6:e6:ca:87:5d:28:c1:24:c1:a7:fb:9f:ca:6d: e6:82:62:55:0e:e9:71:c2:69:7b:5a:27:c8:32:26: ec:72:53:54:8b:d4:1d:49:db:e2:11:c9:52:83:1a: 64:c5:96:70:2f:78:03:49:56:5e:2b:ac:42:4e:e5: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:F1:CC:1F:B5:28:2D:09:BD:DE:F3:4F:3E:60:77:2B:74:53:46 X509v3 Authority Key Identifier: keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:11:ed:58:f8:e0:0e:c2:c9:3f:63:8e:95:52:ed:a1:73:78: 50:cc:85:6b:31:9b:ae:42:9e:7e:05:44:19:f5:ab:1a:59:7a: b2:58:38:59:ed:89:ac:3b:58:6b:49:f9:49:ca:03:90:77:ec: a5:7b:b7:5a:d4:13:69:16:59:93:a1:f3:a8:dd:f0:ca:a0:50: a7:91:21:0a:fd:86:fd:ad:c4:77:e9:3f:a5:ac:b7:c4:d2:6c: a6:7c:84:f9:28:0d:13:42:76:66:0a:fb:70:cc:ae:6b:95:0b: 52:45:82:5f:f9:d9:c2:68:ea:f2:e7:30:f1:0d:73:7e:f8:9b: b9:52:94:a6:71:a3:e5:0d:59:9c:52:70:df:70:1d:7c:f2:ba: e3:a5:dc:a9:34:06:28:93:99:84:6a:46:fa:e8:f1:14:0d:1c: 43:31:54:ca:4b:93:eb:0a:9c:bb:4d:de:fc:c5:ba:da:14:1a: de:4f:0f:3e:ca:88:fd:a2:57:1a:4f:99:cd:9d:60:65:10:45: c4:b7:12:61:42:04:be:dd:ab:cc:0a:2b:c2:c4:0b:98:99:24: 36:7f:94:e2:82:cf:e0:b7:67:3c:40:e9:dd:da:59:88:b4:a6: 65:7e:6b:56:d6:c4:c1:8d:b5:48:ad:6b:fb:36:5d:27:f6:91: 7d:a8:37:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDI3MjMwN0IyMjc5MzZEQjNFRTNCNjU0MDYwMkMzMkQ5 NTgzMDlGNjEwHhcNMjQwNTIwMTQyMjI5WhcNMjQwNTI3MTQyMjI5WjAYMRYwFAYD VQQDEw02NjRiNWNhNi00NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGmBlPu4WkXoecUrsjWvm+mYHor29CbhMhaPhS4hsTmfDpRZmmYSAufXLbVA kAhZifMkwqaUTyh1LuYC8nkXZZIdrBFlnLx+AHYq+o0BfoehMUQGYfxyhsNgHk5l HfocVuwHY4jg34IpVD8omrGZZGbPQPRlGSq/VDmqnbI1bTV2lORVeDhtx7tnhrTX DilotK7FUMEw5FfPxQN9jqNTwpQWO7WGTv/QPtCC0V8OWszPfNwWeiaqm8V37d7W fcKhPa9s9ubKh10owSTBp/ufym3mgmJVDulxwml7WifIMibsclNUi9QdSdviEclS gxpkxZZwL3gDSVZeK6xCTuWGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRK8cwf tSgtCb3e808+YHcrdFNGMB8GA1UdIwQYMBaAFCcjB7Ink22z7jtlQGAsMtlYMJ9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJiUHVPMlZBWUN3eTJWZ3du MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0p5TUhzaWVUYmJQdU8yVkFZQ3d5MlZnd24yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJi UHVPMlZBWUN3eTJWZ3duMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyEe1Y+OAOwsk/Y46VUu2hc3hQzIVrMZuuQp5+BUQZ9asaWXqyWDhZ 7YmsO1hrSflJygOQd+yle7da1BNpFlmTofOo3fDKoFCnkSEK/Yb9rcR36T+lrLfE 0mymfIT5KA0TQnZmCvtwzK5rlQtSRYJf+dnCaOry5zDxDXN++Ju5UpSmcaPlDVmc UnDfcB188rrjpdypNAYok5mEakb66PEUDRxDMVTKS5PrCpy7Td78xbraFBreTw8+ yoj9olcaT5nNnWBlEEXEtxJhQgS+3avMCivCxAuYmSQ2f5Tigs/gt2c8QOnd2lmI tKZlfmtW1sTBjbVIrWv7Nl0n9pF9qDd3 -----END CERTIFICATE-----Generated at Mon May 20 17:23:58 2024 by rpki-client on console-ams.rpki-client.org