$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: WNSoM6ZV1PkL9/khLZmGMY1mV8FvpoQaoyyYFNelHEM= Subject key identifier: E5:02:BE:68:EE:D1:69:45:4F:41:58:86:00:C9:B5:1D:A0:8F:9C:FB Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: 1E Signing time: Wed 15 May 2024 08:51:26 +0000 Manifest this update: Wed 15 May 2024 08:51:25 +0000 Manifest next update: Wed 22 May 2024 08:51:25 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: WCtwxBmTrBW0iU6GQ3pgkOsvXOjauLVpVhk5ceb9h3s=) 2: 45B4466AFE7F11EEADB89215C4F9AE02.roa (hash: JW221SdR0OgfqbHYXSY52jDrerqJ9Os9G5oX3VBUzJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: May 15 08:51:25 2024 GMT Not After : May 22 08:51:25 2024 GMT Subject: CN=6644778d-530f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7a:78:7a:8e:78:41:6c:4d:08:07:cd:0c:43: c7:08:b5:63:ad:0c:d9:73:21:76:f9:40:32:84:6e: 22:31:df:8f:36:7c:bf:4d:ee:79:2f:4f:db:e0:96: 54:22:7e:a4:fe:80:e0:4e:71:cd:4e:8b:42:e8:bc: 83:1f:7e:3b:29:8b:1d:60:4d:0a:f1:76:c8:3f:06: f1:80:41:68:17:c3:69:32:7e:41:1c:16:81:43:c4: 33:bd:cc:10:3b:af:24:0d:64:fb:2c:5b:2f:08:7f: 46:f4:cc:51:2c:3d:9f:5b:97:b4:22:35:29:f0:ef: 70:35:4a:f1:e0:e4:40:a9:11:0d:15:2e:96:60:c6: 3d:57:88:e4:b3:c1:49:2f:4b:44:0d:56:ba:1d:d9: 05:fb:e9:73:fc:d5:8a:07:d0:d8:fa:81:dd:3e:2d: 71:2d:c7:d9:e6:f5:57:d9:4d:53:80:9b:aa:c4:17: 41:af:2d:f5:46:0a:c4:4d:a7:c1:c6:a8:ea:f0:83: 8e:c5:db:1c:ef:85:4a:d6:eb:ac:0a:f5:be:f8:2a: a5:ad:25:ff:05:94:5f:4b:f1:a3:29:80:a7:df:c6: 2b:e4:f8:96:42:79:0b:d1:38:1f:cd:06:70:a4:a1: 16:b3:36:b5:8b:c4:21:f5:bb:66:3a:08:5e:4d:0a: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:BE:68:EE:D1:69:45:4F:41:58:86:00:C9:B5:1D:A0:8F:9C:FB X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a9:68:be:89:55:40:b3:15:9a:aa:62:a6:d9:b3:78:fc:26: d1:3c:ad:a0:d9:c6:d3:bc:63:79:31:b3:1b:6d:bf:f6:c2:48: 71:1d:db:d0:e8:fb:fb:6c:88:24:7d:ff:fb:a0:5b:29:a8:1b: 00:1e:31:c9:3e:91:4b:b0:7d:41:de:94:c4:71:7e:b3:af:0e: 36:7e:ec:e2:a3:12:ee:e6:e9:87:68:98:c5:8e:5f:cc:c8:40: d6:cf:e2:99:98:2b:33:ba:19:04:4b:3a:52:aa:ad:44:f4:2f: 28:99:02:88:6c:03:01:87:73:49:2c:7d:aa:9a:1b:e6:be:1d: 51:9e:d1:0c:bd:1d:ea:35:b9:1d:0a:14:bc:d1:b1:ed:94:55: ca:31:88:66:76:91:08:32:d8:8e:f0:90:86:d7:00:e1:79:00: c0:7f:06:44:c8:88:bd:63:b2:cb:96:23:61:da:df:31:36:9a: eb:80:15:ca:f7:7a:4c:a6:8a:78:47:4a:37:95:ef:61:a9:8f: bd:ac:3f:f3:8e:a9:00:12:a3:4f:2d:dc:18:89:85:de:cf:d9: 9e:83:38:ba:dc:bf:3c:11:10:3b:c0:3a:81:e6:fc:6c:d2:01: 8b:b1:7d:d8:73:c4:87:4c:20:11:47:7e:cd:82:67:c8:e8:75: a0:b6:b1:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjhEMDExMC8GA1UEBRMoMjU0RUFGNjQ5MDc1NEY1MDdEQjgxQ0U5MEREQjYyOUI2 MjJGNDY2MDAeFw0yNDA1MTUwODUxMjVaFw0yNDA1MjIwODUxMjVaMBgxFjAUBgNV BAMTDTY2NDQ3NzhkLTUzMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZenh6jnhBbE0IB80MQ8cItWOtDNlzIXb5QDKEbiIx3482fL9N7nkvT9vgllQi fqT+gOBOcc1Oi0LovIMffjspix1gTQrxdsg/BvGAQWgXw2kyfkEcFoFDxDO9zBA7 ryQNZPssWy8If0b0zFEsPZ9bl7QiNSnw73A1SvHg5ECpEQ0VLpZgxj1XiOSzwUkv S0QNVrod2QX76XP81YoH0Nj6gd0+LXEtx9nm9VfZTVOAm6rEF0GvLfVGCsRNp8HG qOrwg47F2xzvhUrW66wK9b74KqWtJf8FlF9L8aMpgKffxivk+JZCeQvROB/NBnCk oRazNrWLxCH1u2Y6CF5NCq2LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5QK+aO7R aUVPQViGAMm1HaCPnPswHwYDVR0jBBgwFoAUJU6vZJB1T1B9uBzpDdtim2IvRmAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCOEQwLzQxRTJCRTI4RUI2 RTExRUU4M0UzQUU1MUM0RjlBRTAyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlU2dlpKQjFUMUI5dUJ6cERkdGltMkl2Um1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC OEQwLzQxRTJCRTI4RUI2RTExRUU4M0UzQUU1MUM0RjlBRTAyL0pVNnZaSkIxVDFC OXVCenBEZHRpbTJJdlJtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKapaL6JVUCzFZqqYqbZs3j8JtE8raDZxtO8Y3kxsxttv/bCSHEd29Do +/tsiCR9//ugWymoGwAeMck+kUuwfUHelMRxfrOvDjZ+7OKjEu7m6YdomMWOX8zI QNbP4pmYKzO6GQRLOlKqrUT0LyiZAohsAwGHc0ksfaqaG+a+HVGe0Qy9Heo1uR0K FLzRse2UVcoxiGZ2kQgy2I7wkIbXAOF5AMB/BkTIiL1jssuWI2Ha3zE2muuAFcr3 ekyminhHSjeV72Gpj72sP/OOqQASo08t3BiJhd7P2Z6DOLrcvzwREDvAOoHm/GzS AYuxfdhzxIdMIBFHfs2CZ8jodaC2sXE= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org