$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: iTNIsJZJ/WMPhl/MvmrqVVyGwHYm68TuJy/83TwFSu4= Subject key identifier: 99:0F:7F:01:1E:D5:CA:7F:D6:3B:A0:D3:C2:21:9D:3D:AA:B6:29:9E Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 01B4 Signing time: Sat 27 Apr 2024 04:25:37 +0000 Manifest this update: Sat 27 Apr 2024 04:25:37 +0000 Manifest next update: Sat 04 May 2024 04:25:37 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: I4s7RRMcgq1jDEAVqlut0Vy8amPBcj1IuZaCywhNwr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: Apr 27 04:25:37 2024 GMT Not After : May 4 04:25:37 2024 GMT Subject: CN=662c7e41-2d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:ee:c6:58:cb:1f:0a:b9:5b:4d:47:67:db: 93:19:13:61:91:02:89:54:57:f7:12:f9:39:d4:ca: 0a:82:4e:c6:01:61:ae:aa:54:48:84:d4:9f:d0:a9: 7d:86:c0:74:3c:f5:7c:47:8b:f6:e4:0e:e4:4e:87: 30:52:55:f5:95:cb:db:9d:c9:a9:25:bd:3a:04:6b: f4:98:44:d9:06:0b:ff:d1:18:d8:d1:ee:45:50:06: 74:a6:e6:f5:7a:a7:10:69:6d:5b:60:c1:40:0a:2a: d8:68:56:0c:49:1b:06:b5:60:3f:06:35:4f:6d:40: 37:df:80:d8:10:9e:0d:f2:d5:ad:44:07:48:d9:1a: 4d:a4:d2:0e:30:07:b2:90:70:da:29:64:0c:a8:0f: 55:5f:3a:a4:0a:af:b9:cb:7c:6b:44:eb:ca:81:33: 6e:00:c3:87:e3:17:89:56:05:7a:23:c7:cd:cb:9b: 63:4d:ac:68:a0:ea:67:f6:05:e9:63:c0:26:f4:f8: e3:6e:f6:8a:83:29:f5:5d:29:28:68:0f:a4:9d:c0: 32:13:1d:9a:df:48:9d:5b:cf:af:4d:5b:9e:67:41: 3e:83:17:af:43:26:6e:07:92:8d:3a:64:7c:06:11: 4f:71:95:2f:54:c0:c0:da:f3:f5:8c:b8:04:75:71: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0F:7F:01:1E:D5:CA:7F:D6:3B:A0:D3:C2:21:9D:3D:AA:B6:29:9E X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e4:74:07:e1:54:60:ba:56:83:4c:37:9e:0f:c9:4f:48:25: 17:0f:fa:ad:73:8c:a6:5d:c4:d3:7d:af:4b:df:1f:c8:4d:62: a7:a5:97:ca:8f:1f:40:2b:be:9b:8d:9e:5d:6d:cb:47:e0:11: 45:81:47:da:c9:7d:97:74:a2:04:ff:92:f2:f8:76:75:48:2a: 33:1a:7d:a3:23:9d:94:ea:e2:a5:43:93:d2:d6:d7:15:0e:02: 47:7d:e2:d5:52:90:70:71:b9:85:fa:0a:3f:9f:b8:3d:55:f4: 7e:6a:aa:a9:84:92:8a:69:62:a4:9c:15:54:37:37:ce:8b:61: 06:38:07:2e:e7:2f:54:19:cc:fd:0c:9d:0f:02:08:d1:98:8a: 94:90:31:f5:54:96:66:64:8d:a2:89:94:d5:3f:4e:61:31:64: e1:ad:c3:0f:cb:5f:bd:08:1f:3b:57:90:89:ee:1f:c7:5e:f1: 49:7b:cc:9a:4c:09:dc:95:d7:07:0d:94:5a:e2:c5:8a:4f:aa: ef:8a:93:ff:7e:8a:d7:da:cf:b2:a5:8e:6d:05:79:14:b2:26: 87:a4:4a:71:52:d7:32:6c:14:6f:95:1f:36:39:60:e2:92:75: 4d:71:6f:74:67:3c:64:41:e8:f6:ec:cf:67:92:4d:71:da:6d: 12:1b:0d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjQwNDI3MDQyNTM3WhcNMjQwNTA0MDQyNTM3WjAYMRYwFAYD VQQDEw02NjJjN2U0MS0yZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJHuxljLHwq5W01HZ9uTGRNhkQKJVFf3Evk51MoKgk7GAWGuqlRIhNSf0Kl9 hsB0PPV8R4v25A7kTocwUlX1lcvbncmpJb06BGv0mETZBgv/0RjY0e5FUAZ0pub1 eqcQaW1bYMFACirYaFYMSRsGtWA/BjVPbUA334DYEJ4N8tWtRAdI2RpNpNIOMAey kHDaKWQMqA9VXzqkCq+5y3xrROvKgTNuAMOH4xeJVgV6I8fNy5tjTaxooOpn9gXp Y8Am9PjjbvaKgyn1XSkoaA+kncAyEx2a30idW8+vTVueZ0E+gxevQyZuB5KNOmR8 BhFPcZUvVMDA2vP1jLgEdXFp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkPfwEe 1cp/1jug08IhnT2qtimeMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw5HQH4VRgulaDTDeeD8lPSCUXD/qtc4ymXcTTfa9L3x/ITWKnpZfK jx9AK76bjZ5dbctH4BFFgUfayX2XdKIE/5Ly+HZ1SCozGn2jI52U6uKlQ5PS1tcV DgJHfeLVUpBwcbmF+go/n7g9VfR+aqqphJKKaWKknBVUNzfOi2EGOAcu5y9UGcz9 DJ0PAgjRmIqUkDH1VJZmZI2iiZTVP05hMWThrcMPy1+9CB87V5CJ7h/HXvFJe8ya TAncldcHDZRa4sWKT6rvipP/forX2s+ypY5tBXkUsiaHpEpxUtcybBRvlR82OWDi knVNcW90ZzxkQej27M9nkk1x2m0SGw2j -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org