$ rpki-client -vvf rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft File: 0jmSiWbYmE6i-kU_xT-YhrWty5U.mft (raw, json) Hash identifier: xXp5naN6N6IxrxBQoqxnJXVb2J8u4qLujjWQG7sHikQ= Subject key identifier: 1E:B2:A6:F3:51:C2:32:73:D9:62:2F:4D:AA:9D:C7:7C:7A:6A:F9:8F Authority key identifier: D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95 Certificate issuer: /CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft Manifest number: 01CF Signing time: Wed 01 May 2024 05:07:22 +0000 Manifest this update: Wed 01 May 2024 05:07:21 +0000 Manifest next update: Wed 08 May 2024 05:07:21 +0000 Files and hashes: 1: 0jmSiWbYmE6i-kU_xT-YhrWty5U.crl (hash: EcECqB0xlx/SDbKevtv+xQzncIz48TTe8sSGc3z1eKI=) 2: 4BE3F42AD78511EEA090E379C4F9AE02.roa (hash: imEV3Spjp+MTHUrUnASghoK4PxCSAmWp5fKa0+YXT/E=) 3: 4C50A2AAD78511EEA090E379C4F9AE02.roa (hash: jCC8h5mh3Isbg0/56AT2brXUGc2iI6QwVbQW8CcGH7U=) 4: 4B623C8CD78511EEA090E379C4F9AE02.roa (hash: mv0KszXp5CVKja4nK1pmYH1yWEaEPEaZ0kYP+yQ+Siw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B6E8/serialNumber=D239928966D8984EA2FA453FC53F9886B5ADCB95 Validity Not Before: May 1 05:07:21 2024 GMT Not After : May 8 05:07:21 2024 GMT Subject: CN=6631ce09-48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:df:ef:e6:e5:c6:1c:a8:3b:c0:80:30:36:fb: bb:8c:3d:25:b4:9e:df:7b:ab:2e:33:6a:85:c2:4a: af:0d:cd:b8:d4:20:20:28:ff:2b:7d:de:dd:37:1c: 19:44:76:bc:ce:5f:4b:0c:a5:95:98:d0:c4:c7:25: c1:75:46:7c:c6:b8:f1:ed:9c:c2:02:34:83:ba:81: 17:9b:96:9f:b9:90:64:47:72:44:f5:b0:74:11:23: 50:3e:6b:97:6d:ee:1f:85:b2:9a:93:4a:63:f6:98: 38:80:da:05:4b:bc:11:ea:18:e0:e8:37:42:c2:0d: e4:a3:9e:7a:08:9c:3b:25:23:26:40:24:85:1e:94: 25:02:6e:02:f8:d9:e4:1e:54:52:66:aa:a7:c2:ad: a2:39:b1:79:05:6b:c8:a1:c7:c2:39:4c:d6:3b:94: ab:d0:cb:70:eb:fd:00:68:ff:fc:0d:e2:c5:40:a2: a0:c0:23:cc:74:75:ca:fd:28:9b:f1:cb:95:1e:44: 00:40:67:2a:04:6d:3d:e6:e8:1e:77:15:2d:9a:21: 21:f8:41:e6:e1:00:9f:62:da:53:5f:90:ad:9d:f2: 60:2c:92:33:50:25:42:c6:29:be:1d:0c:a4:ba:e0: 3f:d5:46:b4:a0:d9:e8:b7:01:76:70:a3:86:c0:73: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B2:A6:F3:51:C2:32:73:D9:62:2F:4D:AA:9D:C7:7C:7A:6A:F9:8F X509v3 Authority Key Identifier: keyid:D2:39:92:89:66:D8:98:4E:A2:FA:45:3F:C5:3F:98:86:B5:AD:CB:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jmSiWbYmE6i-kU_xT-YhrWty5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B6E8/D8E0DD3E01DA11EDA2AE1545C4F9AE02/0jmSiWbYmE6i-kU_xT-YhrWty5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:a6:6e:aa:fe:17:69:a7:87:6d:dc:73:5b:06:2e:d3:a5: 6e:bd:af:2e:60:34:26:9b:15:79:4a:d6:c2:a9:fd:a5:73:d8: fc:c3:8a:f6:a9:11:b0:55:61:4f:87:46:f2:05:18:94:14:4b: 1d:6d:d3:c7:d1:0a:69:29:0c:88:1d:7d:c8:91:50:a5:e7:c6: 50:fa:b2:1d:78:86:a4:9c:09:f6:ce:0e:67:1b:5a:08:9d:1a: 90:33:05:dd:9f:da:d8:a2:f1:2c:f4:c0:0d:bc:5a:a1:76:23: 1c:4e:2e:07:f5:c0:4e:03:02:c4:35:7b:1c:74:53:9b:f1:66: 61:3c:9c:b0:b3:e5:93:6e:b3:17:7c:50:47:6d:a0:c0:1d:86: 26:da:26:66:08:d6:53:35:2a:6a:54:04:1f:ce:df:42:90:ea: 93:36:09:35:b8:9c:44:15:4f:96:52:5a:03:8b:c3:13:97:b4: 24:a2:cd:c5:93:be:9d:ee:87:d3:26:fa:94:47:19:4e:7c:40: b5:9f:e0:cd:c8:09:f7:78:89:ef:04:03:26:70:5e:64:5c:dc: f5:a3:e9:fa:f8:e2:fb:89:f1:be:5e:72:12:e0:b5:ef:b5:d6: 03:a0:f1:8f:81:a5:ce:f2:ae:35:5c:21:44:d9:f7:e4:15:b4: fc:7d:bb:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2RTgxMTAvBgNVBAUTKEQyMzk5Mjg5NjZEODk4NEVBMkZBNDUzRkM1M0Y5ODg2 QjVBRENCOTUwHhcNMjQwNTAxMDUwNzIxWhcNMjQwNTA4MDUwNzIxWjAYMRYwFAYD VQQDEw02NjMxY2UwOS00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4N/v5uXGHKg7wIAwNvu7jD0ltJ7fe6suM2qFwkqvDc241CAgKP8rfd7dNxwZ RHa8zl9LDKWVmNDExyXBdUZ8xrjx7ZzCAjSDuoEXm5afuZBkR3JE9bB0ESNQPmuX be4fhbKak0pj9pg4gNoFS7wR6hjg6DdCwg3ko556CJw7JSMmQCSFHpQlAm4C+Nnk HlRSZqqnwq2iObF5BWvIocfCOUzWO5Sr0Mtw6/0AaP/8DeLFQKKgwCPMdHXK/Sib 8cuVHkQAQGcqBG095ugedxUtmiEh+EHm4QCfYtpTX5CtnfJgLJIzUCVCxim+HQyk uuA/1Ua0oNnotwF2cKOGwHPDiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6ypvNR wjJz2WIvTaqdx3x6avmPMB8GA1UdIwQYMBaAFNI5kolm2JhOovpFP8U/mIa1rcuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjZFOC9EOEUwREQzRTAx REExMUVEQTJBRTE1NDVDNEY5QUUwMi8wam1TaVdiWW1FNmkta1VfeFQtWWhyV3R5 NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBqbVNpV2JZbUU2aS1rVV94VC1ZaHJXdHk1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjZFOC9EOEUwREQzRTAxREExMUVEQTJBRTE1NDVDNEY5QUUwMi8wam1TaVdiWW1F Nmkta1VfeFQtWWhyV3R5NVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxqZuqv4XaaeHbdxzWwYu06Vuva8uYDQmmxV5StbCqf2lc9j8w4r2 qRGwVWFPh0byBRiUFEsdbdPH0QppKQyIHX3IkVCl58ZQ+rIdeIaknAn2zg5nG1oI nRqQMwXdn9rYovEs9MANvFqhdiMcTi4H9cBOAwLENXscdFOb8WZhPJyws+WTbrMX fFBHbaDAHYYm2iZmCNZTNSpqVAQfzt9CkOqTNgk1uJxEFU+WUloDi8MTl7Qkos3F k76d7ofTJvqURxlOfEC1n+DNyAn3eInvBAMmcF5kXNz1o+n6+OL7ifG+XnIS4LXv tdYDoPGPgaXO8q41XCFE2ffkFbT8fbv4 -----END CERTIFICATE-----Generated at Wed May 1 05:55:43 2024 by rpki-client on console-ams.rpki-client.org