$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: 4RujsiPTt6dE7NcFHVExzutHluVTIcLEsOcNp6zjIA0= Subject key identifier: 8A:96:B7:9B:10:19:D7:52:C6:F6:37:71:EB:94:93:C8:C5:B4:77:75 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 0112 Signing time: Fri 03 May 2024 05:23:44 +0000 Manifest this update: Fri 03 May 2024 05:23:44 +0000 Manifest next update: Fri 10 May 2024 05:23:44 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: jhi3JZrNRQc9yEB9LGYOiuSlknMmFRtzek2dW4TRXDQ=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: Sopvdcy4i/zCtHJsS9WmVX/sgPvDELxJfyYNgX/g46Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: May 3 05:23:44 2024 GMT Not After : May 10 05:23:44 2024 GMT Subject: CN=663474e0-0384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:64:06:26:ad:d4:52:a2:e9:40:55:99:1b: 94:f7:b0:4f:3a:45:13:ec:87:83:a0:f8:12:50:dd: d0:ea:ba:a4:cd:ff:2c:c1:61:bf:a3:6c:23:e5:d1: 16:ae:2f:e6:12:72:73:4c:06:79:dc:39:19:e9:c3: 34:3c:44:c6:d8:17:3a:ba:61:bd:35:f1:4e:46:7c: 85:42:57:ad:ec:bf:21:06:38:64:3f:02:27:04:2c: b9:53:b9:46:fd:ec:4a:71:63:93:e6:36:31:42:db: 1e:3b:99:f1:1f:63:6c:4f:59:d7:7b:97:bb:fc:47: fc:1c:94:6b:9e:dc:ee:5b:eb:ba:90:eb:99:51:f5: 36:9a:3e:4c:43:62:3f:e0:b0:94:f4:36:1a:1e:48: ce:76:5a:18:63:4d:ef:d8:06:ed:5b:a5:36:3c:c4: d1:37:3b:a7:6d:77:92:79:b1:2d:97:aa:21:d4:91: 01:d5:7c:bd:99:f4:29:6c:35:06:b7:ec:fd:cf:c8: 26:e2:16:30:c3:0d:0b:73:7d:a9:64:8e:7b:d5:09: ea:c2:72:1e:4b:99:4c:a3:b1:12:6a:c7:68:16:4b: 68:af:c3:2c:22:f6:09:65:8a:72:6f:11:bc:15:70: 10:af:1d:e6:5c:bf:3a:3c:d7:0b:cc:66:72:4e:fb: a6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:B7:9B:10:19:D7:52:C6:F6:37:71:EB:94:93:C8:C5:B4:77:75 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:fe:6d:38:d7:7e:48:08:7f:21:e7:8e:5f:43:50:0f:60:14: 18:20:51:07:7b:4f:71:60:cf:b9:fa:a5:e6:87:8b:e2:14:84: a1:e2:4e:e3:03:90:e0:4f:63:2e:84:48:b8:f5:1e:57:e2:fd: 61:d0:04:5d:b4:74:ab:df:bf:d3:9a:9c:ff:08:9f:4e:47:68: 34:bb:fd:57:e8:a7:02:7e:b8:76:00:49:56:9d:6b:a7:c0:b7: 00:90:d2:8e:ef:0f:76:78:73:2a:4e:3f:bb:14:01:10:ea:18: 69:34:e3:13:84:4e:e5:bb:66:3f:dc:89:3b:50:67:5e:8d:68: 83:2c:cb:51:f8:9c:31:03:bd:c5:83:39:1b:d3:14:0d:54:7b: 61:24:4a:18:b1:bd:f5:ad:37:e1:61:62:11:42:b3:81:91:1c: 68:49:14:0a:45:76:83:a8:21:a6:7c:c4:0b:a4:70:31:e0:ef: 8f:93:79:57:9e:32:d7:f6:2a:71:66:c7:e5:1a:84:01:2f:02: 9a:e4:42:38:07:46:1e:af:8d:b9:77:9b:73:61:c1:7d:69:9d: b7:41:2b:3f:a3:0c:39:15:85:6c:4b:33:f1:82:3c:f4:2f:ad: 1f:8c:17:79:63:22:aa:c5:05:33:ce:0f:ad:47:a1:0d:cd:4c: 3e:f3:fb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjQwNTAzMDUyMzQ0WhcNMjQwNTEwMDUyMzQ0WjAYMRYwFAYD VQQDEw02NjM0NzRlMC0wMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwZkBiat1FKi6UBVmRuU97BPOkUT7IeDoPgSUN3Q6rqkzf8swWG/o2wj5dEW ri/mEnJzTAZ53DkZ6cM0PETG2Bc6umG9NfFORnyFQlet7L8hBjhkPwInBCy5U7lG /exKcWOT5jYxQtseO5nxH2NsT1nXe5e7/Ef8HJRrntzuW+u6kOuZUfU2mj5MQ2I/ 4LCU9DYaHkjOdloYY03v2AbtW6U2PMTRNzunbXeSebEtl6oh1JEB1Xy9mfQpbDUG t+z9z8gm4hYwww0Lc32pZI571QnqwnIeS5lMo7ESasdoFktor8MsIvYJZYpybxG8 FXAQrx3mXL86PNcLzGZyTvumIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqWt5sQ GddSxvY3ceuUk8jFtHd1MB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA/m04135ICH8h545fQ1APYBQYIFEHe09xYM+5+qXmh4viFISh4k7j A5DgT2MuhEi49R5X4v1h0ARdtHSr37/Tmpz/CJ9OR2g0u/1X6KcCfrh2AElWnWun wLcAkNKO7w92eHMqTj+7FAEQ6hhpNOMThE7lu2Y/3Ik7UGdejWiDLMtR+JwxA73F gzkb0xQNVHthJEoYsb31rTfhYWIRQrOBkRxoSRQKRXaDqCGmfMQLpHAx4O+Pk3lX njLX9ipxZsflGoQBLwKa5EI4B0Yer425d5tzYcF9aZ23QSs/oww5FYVsSzPxgjz0 L60fjBd5YyKqxQUzzg+tR6ENzUw+8/vd -----END CERTIFICATE-----Generated at Fri May 3 06:18:28 2024 by rpki-client on console-ams.rpki-client.org