$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft File: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json) Hash identifier: 0LSDpRVuXibj2znljINcskQd87irnwcq2lizvMQ6yVM= Subject key identifier: F0:12:62:FC:2E:38:83:D8:F5:1E:A9:1C:1F:1A:8E:66:8C:D2:FD:F1 Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft Manifest number: 0255 Signing time: Sun 05 May 2024 04:00:24 +0000 Manifest this update: Sun 05 May 2024 04:00:24 +0000 Manifest next update: Sun 12 May 2024 04:00:24 +0000 Files and hashes: 1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: CpXHyXMLVYVFEL3gINf/dRjyyRjQSPRw/ErVrbb8zQg=) 2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: GyEQGNb6/HPOG/qVRsMzlLs+Kg9iPItUKUNxu4RTN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Validity Not Before: May 5 04:00:24 2024 GMT Not After : May 12 04:00:24 2024 GMT Subject: CN=66370458-274b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:53:6a:b0:70:52:58:5d:ad:02:1d:75:d7: 33:66:a5:be:50:9f:aa:43:68:73:ba:23:2a:a7:92: 00:45:c8:62:cb:68:83:1f:4b:cf:5a:93:9f:6a:ae: ae:24:61:94:86:f5:8e:d0:6a:38:84:37:d5:a5:4e: 5f:a5:2f:a0:c6:02:b8:85:85:57:8a:34:df:71:6c: 02:09:1b:2d:bd:1a:9a:95:45:24:16:26:43:0b:ac: 7a:f4:ad:8a:36:3e:40:be:7d:fb:e5:75:4f:1e:f9: 12:84:e7:f9:f5:4a:25:5b:ec:2d:6f:30:07:a4:d3: ad:c3:5c:22:3f:c5:55:04:c4:14:d9:5f:ec:ce:8d: 49:af:eb:79:bc:8e:2a:6d:6e:67:e0:4c:6f:36:85: 38:3b:06:b5:61:45:91:58:e4:fb:03:98:01:54:93: bc:03:ee:55:ba:b9:57:a1:a0:bc:18:9d:38:a1:01: 5b:8e:49:17:9f:43:4c:a4:a0:06:3a:ce:b5:7d:9e: 06:da:dd:ed:36:da:22:4f:75:25:25:78:51:3a:e1: 5d:44:63:89:2a:14:5d:4a:ec:61:e9:2d:4d:14:9e: 42:8e:9d:f3:61:00:de:55:fa:6a:59:42:ff:ca:f1: c8:5e:01:f4:29:8f:a6:c5:95:cb:fa:71:c0:a2:0c: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:12:62:FC:2E:38:83:D8:F5:1E:A9:1C:1F:1A:8E:66:8C:D2:FD:F1 X509v3 Authority Key Identifier: keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4b:9c:9c:47:73:b4:4b:87:00:a0:3e:ac:7b:77:7f:0d:5d: 37:d4:86:11:70:b8:6d:b3:7f:20:9f:69:c2:e5:2c:b7:e3:f9: 32:96:7e:2e:ad:53:53:2e:80:ce:f4:6b:d4:c9:6f:b1:93:e9: 11:96:5c:bb:fd:4e:4e:ce:8f:58:54:1d:7b:5c:21:3d:6e:dd: 89:fd:65:75:57:be:1b:06:57:d7:ea:de:35:c4:be:1d:bd:35: db:0e:f0:1e:cf:e9:5b:11:39:f4:b3:71:fc:07:29:34:5a:52: 44:60:c6:dc:27:f9:39:45:90:f9:b7:a6:a1:f8:b1:d2:b7:01: 14:42:8e:95:fd:f0:ad:6a:f7:66:ef:22:9c:d2:38:bb:5b:0c: 79:a9:d3:d8:9b:5b:c6:ac:59:ef:13:e6:56:3b:0b:2d:a1:f0: 6a:18:e4:eb:13:24:7c:60:96:3f:dd:77:15:04:03:b5:e8:f0: 00:f7:d5:32:b6:f4:67:f3:17:74:95:7d:64:ef:03:b6:33:e9: ec:ae:86:10:92:22:85:ef:16:45:c2:5b:ba:49:44:1b:be:78: b2:d3:df:ed:05:c9:68:26:cf:d1:3c:50:84:e8:1a:ad:05:0f: e7:48:01:98:d8:fb:30:92:8b:6d:7a:84:e8:ef:d4:c6:a7:41: 47:5e:ae:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy NzM2MjM1OUYwHhcNMjQwNTA1MDQwMDI0WhcNMjQwNTEyMDQwMDI0WjAYMRYwFAYD VQQDEw02NjM3MDQ1OC0yNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21pTarBwUlhdrQIdddczZqW+UJ+qQ2hzuiMqp5IARchiy2iDH0vPWpOfaq6u JGGUhvWO0Go4hDfVpU5fpS+gxgK4hYVXijTfcWwCCRstvRqalUUkFiZDC6x69K2K Nj5Avn375XVPHvkShOf59UolW+wtbzAHpNOtw1wiP8VVBMQU2V/szo1Jr+t5vI4q bW5n4ExvNoU4Owa1YUWRWOT7A5gBVJO8A+5VurlXoaC8GJ04oQFbjkkXn0NMpKAG Os61fZ4G2t3tNtoiT3UlJXhROuFdRGOJKhRdSuxh6S1NFJ5Cjp3zYQDeVfpqWUL/ yvHIXgH0KY+mxZXL+nHAogxFWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPASYvwu OIPY9R6pHB8ajmaM0v3xMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuS5ycR3O0S4cAoD6se3d/DV031IYRcLhts38gn2nC5Sy34/kyln4u rVNTLoDO9GvUyW+xk+kRlly7/U5Ozo9YVB17XCE9bt2J/WV1V74bBlfX6t41xL4d vTXbDvAez+lbETn0s3H8Byk0WlJEYMbcJ/k5RZD5t6ah+LHStwEUQo6V/fCtavdm 7yKc0ji7Wwx5qdPYm1vGrFnvE+ZWOwstofBqGOTrEyR8YJY/3XcVBAO16PAA99Uy tvRn8xd0lX1k7wO2M+nsroYQkiKF7xZFwlu6SUQbvniy09/tBcloJs/RPFCE6Bqt BQ/nSAGY2PswkotteoTo79TGp0FHXq6U -----END CERTIFICATE-----Generated at Sun May 5 04:39:59 2024 by rpki-client on console-ams.rpki-client.org