$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: DObL5KnEYfEoMD0eHD+UUh5wps3fKBhSVPRuFenuB6k= Subject key identifier: 45:A9:4D:AF:12:AA:89:98:93:97:73:0D:5A:88:62:63:F1:5F:65:93 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 16 Signing time: Sun 19 May 2024 08:45:27 +0000 Manifest this update: Sun 19 May 2024 08:45:27 +0000 Manifest next update: Sun 26 May 2024 08:45:27 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: zn9vBXl3CxU+wcv1R2pFMuObhpkU9alrcz3iJfI1f/U=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: Usn+KtLh2fQfBRzeOzAzXm3AdLqgWTBEojWaTaYRxFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: May 19 08:45:27 2024 GMT Not After : May 26 08:45:27 2024 GMT Subject: CN=6649bc27-387f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:67:3d:02:62:bd:08:73:a4:45:ee:f8:bc: 66:3f:db:5d:e7:98:ba:d2:37:90:1d:0b:15:a1:a1: 89:53:76:d2:58:64:81:a0:c9:43:e5:9c:31:72:5f: f9:91:47:86:d8:47:6f:88:27:5e:2f:73:89:78:c0: ce:14:d5:7e:18:91:6f:0c:9e:28:9d:96:03:e9:e3: ab:b2:ad:f4:79:e6:43:68:04:e8:89:3f:d8:73:cb: e6:e6:75:77:9c:f8:bb:38:25:94:a1:f8:9d:b2:0f: 06:39:fd:0f:41:3f:88:dd:6d:9e:14:a5:b2:06:50: ea:4e:2f:13:79:af:77:ff:88:e0:c9:5d:f2:5f:4f: c2:0f:90:49:06:13:cd:4a:95:88:6c:f5:ab:cb:31: 18:ff:72:78:85:4c:3d:53:4d:4e:f5:c3:f5:48:92: 59:5a:42:6b:0f:0f:f1:f9:83:9e:2f:c3:a2:7c:86: 8f:0d:d4:0a:22:30:ce:71:46:2d:fe:eb:35:74:bd: d3:06:5c:4f:d2:df:d7:85:95:fd:12:e2:61:8a:90: 61:40:cc:e9:56:75:9c:93:37:25:46:17:10:92:c8: ff:7d:01:84:4b:6e:07:1f:d6:33:b1:91:b4:c6:16: 91:68:47:7a:10:60:0e:bc:79:d9:cb:c6:f9:b2:0b: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:4D:AF:12:AA:89:98:93:97:73:0D:5A:88:62:63:F1:5F:65:93 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b1:cb:3f:ce:89:51:a1:fd:bb:cf:0b:ce:87:db:b3:1e:dc: e6:f1:c5:3e:ed:f6:1c:79:a4:c1:2e:8f:99:29:99:fb:36:31: bf:3d:e8:82:f6:13:9b:92:e2:0f:ad:55:89:2c:bc:d5:a6:4c: c3:ba:2f:ed:79:b6:26:01:a3:10:0d:c0:54:8f:c4:f5:ec:fb: db:06:0e:51:53:1f:8b:7c:70:a6:5d:8b:88:87:59:86:97:4f: 5e:a4:19:e1:8c:81:0e:9a:de:62:a3:5b:61:30:ca:e2:0f:e3: 35:24:5e:29:5c:94:dd:cb:b3:ad:72:a7:79:3e:00:bb:93:d7: 3b:36:e0:7b:2a:c2:f8:23:76:f7:50:4c:a4:ab:2d:c8:67:57: 70:ee:30:ae:17:51:ae:9b:da:6d:fc:74:cc:a7:7c:fe:6d:a5: 2d:a4:3c:4d:38:1e:c6:a3:39:2b:aa:be:57:ec:e2:7f:82:79: cb:3d:cf:cd:68:e1:e9:f3:b4:ec:8b:44:d9:7e:5c:b8:58:e2: 19:ae:c4:f0:47:1e:49:af:4c:6b:fb:3b:21:17:1c:1e:b7:8d: 96:bc:f1:4f:8b:14:73:f4:c4:b2:ea:d6:fa:f7:a2:00:6c:40: e3:e3:ee:c7:ef:94:b5:5d:d1:73:99:4c:43:ed:9b:be:9d:31: 0a:68:29:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0ExRTExMC8GA1UEBRMoOEU2NTBBNzEyREM4NEYyMkI4OUI4RjE4Qjg2NEMyOUY5 REQ3MTNDNTAeFw0yNDA1MTkwODQ1MjdaFw0yNDA1MjYwODQ1MjdaMBgxFjAUBgNV BAMTDTY2NDliYzI3LTM4N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU5mc9AmK9CHOkRe74vGY/213nmLrSN5AdCxWhoYlTdtJYZIGgyUPlnDFyX/mR R4bYR2+IJ14vc4l4wM4U1X4YkW8MniidlgPp46uyrfR55kNoBOiJP9hzy+bmdXec +Ls4JZSh+J2yDwY5/Q9BP4jdbZ4UpbIGUOpOLxN5r3f/iODJXfJfT8IPkEkGE81K lYhs9avLMRj/cniFTD1TTU71w/VIkllaQmsPD/H5g54vw6J8ho8N1AoiMM5xRi3+ 6zV0vdMGXE/S39eFlf0S4mGKkGFAzOlWdZyTNyVGFxCSyP99AYRLbgcf1jOxkbTG FpFoR3oQYA68ednLxvmyC9L3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURalNrxKq iZiTl3MNWohiY/FfZZMwHwYDVR0jBBgwFoAUjmUKcS3ITyK4m48YuGTCn53XE8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTFFL0YwMDYyRjI4RjYz NDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam1VS2NTM0lUeUs0bTQ4WXVHVENuNTNYRThVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTFFL0YwMDYyRjI4RjYzNDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlL NG00OFl1R1RDbjUzWEU4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyxyz/OiVGh/bvPC86H27Me3ObxxT7t9hx5pMEuj5kpmfs2Mb896IL2 E5uS4g+tVYksvNWmTMO6L+15tiYBoxANwFSPxPXs+9sGDlFTH4t8cKZdi4iHWYaX T16kGeGMgQ6a3mKjW2EwyuIP4zUkXilclN3Ls61yp3k+ALuT1zs24HsqwvgjdvdQ TKSrLchnV3DuMK4XUa6b2m38dMynfP5tpS2kPE04HsajOSuqvlfs4n+Cecs9z81o 4enztOyLRNl+XLhY4hmuxPBHHkmvTGv7OyEXHB63jZa88U+LFHP0xLLq1vr3ogBs QOPj7sfvlLVd0XOZTEPtm76dMQpoKfw= -----END CERTIFICATE-----Generated at Sun May 19 09:32:20 2024 by rpki-client on console-ams.rpki-client.org