$ rpki-client -vvf rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft File: jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft (raw, json) Hash identifier: JbYzDW5Bvq7kTr9qT51J9UHlwB7qvugg2viUa+GhSy8= Subject key identifier: FF:AB:2A:4F:ED:96:0A:1B:11:5D:D1:A0:3D:27:8A:60:12:91:A3:EB Authority key identifier: 8C:99:F2:E5:0A:3D:AA:96:2F:1C:B7:75:B4:59:67:01:51:6A:0A:C1 Certificate issuer: /CN=A915B373/serialNumber=8C99F2E50A3DAA962F1CB775B4596701516A0AC1 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft Manifest number: 010C Signing time: Wed 01 May 2024 05:41:22 +0000 Manifest this update: Wed 01 May 2024 05:41:21 +0000 Manifest next update: Wed 08 May 2024 05:41:21 +0000 Files and hashes: 1: jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl (hash: l5iQvYDRfq3YFKJsPcWUKPp+urK4uvFZ/Z7hFz+g36k=) 2: 5020EAB4771611EDB65FBF71C4F9AE02.roa (hash: ezVWqt4lKiKasE2xngP4ghkwOjGorI9YBOEqUBWnhsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 05:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B373/serialNumber=8C99F2E50A3DAA962F1CB775B4596701516A0AC1 Validity Not Before: May 1 05:41:21 2024 GMT Not After : May 8 05:41:21 2024 GMT Subject: CN=6631d601-1888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:e5:11:3b:85:d7:df:93:04:db:10:71:b6: 0f:91:46:78:48:ed:60:08:ec:79:1e:90:9f:24:9d: 31:5d:8d:c7:e7:8d:ba:9e:f6:21:eb:83:68:c2:4b: e6:4d:5e:64:8d:3a:46:e8:c7:f0:47:71:f9:65:1f: cc:a2:91:b8:19:f0:71:ae:1d:f7:07:80:6d:84:0b: 15:72:79:c5:85:74:82:34:1c:f6:b2:0a:4d:72:42: a6:9c:4a:b2:b5:6c:05:51:ad:6e:7d:3c:2e:b0:1c: 26:3a:7b:39:54:a1:ed:fb:5a:c0:2d:f0:23:57:1f: a5:6e:6c:82:dd:78:ea:1f:62:14:cb:fd:10:94:ce: 93:62:60:0f:4a:44:a7:2e:4c:e5:9c:c2:c5:b7:ee: 5c:e8:a4:2a:60:cd:35:ec:73:d9:18:a0:fb:20:c1: 3d:7e:6c:46:d8:ac:5a:ce:58:aa:26:bf:05:c6:6f: ce:1b:2c:a0:6d:6c:ff:8f:63:12:d5:0d:7b:05:9e: 3f:ce:fd:2c:09:cc:c2:c7:ae:3c:7a:96:ff:a6:95: 2f:95:dc:6f:de:2c:28:b1:c9:a5:6c:66:32:3a:a7: 8d:e4:8a:8e:54:50:2e:17:61:72:eb:9e:7a:a5:f0: b5:95:93:b8:92:c7:b7:63:f9:bf:c0:53:b4:65:4a: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:2A:4F:ED:96:0A:1B:11:5D:D1:A0:3D:27:8A:60:12:91:A3:EB X509v3 Authority Key Identifier: keyid:8C:99:F2:E5:0A:3D:AA:96:2F:1C:B7:75:B4:59:67:01:51:6A:0A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7b:50:35:9a:e7:a9:82:b3:41:9a:ef:fd:d3:20:cc:11:e2: 02:7e:ca:fb:6b:b0:80:4a:4e:6a:f4:eb:ba:a4:ba:91:54:70: c5:f4:1c:b7:1b:8d:c9:28:56:f3:b7:ab:9a:36:db:8e:3f:09: 8f:21:82:10:c6:46:ac:5e:58:db:71:96:c7:d5:58:22:90:20: e1:c6:fc:bf:79:04:26:8d:68:91:47:78:7d:6a:c1:c2:fa:47: c6:62:7c:94:32:0d:49:7c:7d:f8:26:8e:57:d7:37:a2:f4:62: 45:40:4d:29:dc:2c:02:c8:e4:48:75:80:12:ad:3f:50:1b:f7: 2e:b1:1a:74:ca:65:80:28:b4:25:02:e4:87:35:4f:64:fb:f7: 79:ae:cb:b1:b3:bb:fb:22:a4:18:09:e7:bd:b8:92:b1:85:de: 1c:92:06:5c:9d:83:b2:53:10:54:ae:af:37:5f:05:3a:19:e7: b8:fa:79:0d:31:0f:23:8f:87:79:64:e1:a3:1f:47:38:d4:16: 8c:b7:f5:c2:4a:14:59:a9:96:b3:a8:b0:2b:39:29:e9:e3:5e: 7e:f0:82:6f:5c:c1:dd:63:3e:f6:93:0d:83:8f:e1:60:b9:74: a4:42:7c:f7:17:7e:88:48:f4:aa:04:0e:a9:2a:95:2b:ab:c8: 09:bc:38:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNzMxMTAvBgNVBAUTKDhDOTlGMkU1MEEzREFBOTYyRjFDQjc3NUI0NTk2NzAx NTE2QTBBQzEwHhcNMjQwNTAxMDU0MTIxWhcNMjQwNTA4MDU0MTIxWjAYMRYwFAYD VQQDEw02NjMxZDYwMS0xODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKnlETuF19+TBNsQcbYPkUZ4SO1gCOx5HpCfJJ0xXY3H5426nvYh64Nowkvm TV5kjTpG6MfwR3H5ZR/MopG4GfBxrh33B4BthAsVcnnFhXSCNBz2sgpNckKmnEqy tWwFUa1ufTwusBwmOns5VKHt+1rALfAjVx+lbmyC3XjqH2IUy/0QlM6TYmAPSkSn LkzlnMLFt+5c6KQqYM017HPZGKD7IME9fmxG2KxazliqJr8Fxm/OGyygbWz/j2MS 1Q17BZ4/zv0sCczCx648epb/ppUvldxv3iwoscmlbGYyOqeN5IqOVFAuF2Fy6556 pfC1lZO4kse3Y/m/wFO0ZUrGfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+rKk/t lgobEV3RoD0nimASkaPrMB8GA1UdIwQYMBaAFIyZ8uUKPaqWLxy3dbRZZwFRagrB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM3My82MzcyRTVDQTZF MjYxMUVEQjA3OTRGNkZDNEY5QUUwMi9qSm55NVFvOXFwWXZITGQxdEZsbkFWRnFD c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKbnk1UW85cXBZdkhMZDF0RmxuQVZGcUNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM3My82MzcyRTVDQTZFMjYxMUVEQjA3OTRGNkZDNEY5QUUwMi9qSm55NVFvOXFw WXZITGQxdEZsbkFWRnFDc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpe1A1muepgrNBmu/90yDMEeICfsr7a7CASk5q9Ou6pLqRVHDF9By3 G43JKFbzt6uaNtuOPwmPIYIQxkasXljbcZbH1VgikCDhxvy/eQQmjWiRR3h9asHC +kfGYnyUMg1JfH34Jo5X1zei9GJFQE0p3CwCyORIdYASrT9QG/cusRp0ymWAKLQl AuSHNU9k+/d5rsuxs7v7IqQYCee9uJKxhd4ckgZcnYOyUxBUrq83XwU6Gee4+nkN MQ8jj4d5ZOGjH0c41BaMt/XCShRZqZazqLArOSnp415+8IJvXMHdYz72kw2Dj+Fg uXSkQnz3F36ISPSqBA6pKpUrq8gJvDju -----END CERTIFICATE-----Generated at Wed May 1 07:06:28 2024 by rpki-client on console-fra.rpki-client.org