$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: y3amcaGkw6/EjsVYR3G4J7cOu8SHYrp3ovqibOyPtbI= Subject key identifier: 09:48:9C:FD:CF:B9:3E:D1:E7:30:0F:24:83:F2:DA:D4:79:AE:93:D1 Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 66 Signing time: Wed 15 May 2024 07:41:05 +0000 Manifest this update: Wed 15 May 2024 07:41:05 +0000 Manifest next update: Wed 22 May 2024 07:41:05 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: Jw0FMohC7YKMpx3X8iffjmbL8F6gJ+EH+owRwu4Krok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: May 15 07:41:05 2024 GMT Not After : May 22 07:41:05 2024 GMT Subject: CN=66446711-3073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:9b:72:13:1f:97:3d:8c:9e:9f:ac:d5:27: f3:1d:72:b7:3d:10:91:b8:21:50:00:1b:d2:10:ec: 37:ce:a1:39:d1:14:3e:40:c4:3d:22:2a:65:cf:e7: 2e:a7:46:0d:30:c8:50:49:68:80:ca:c9:bc:df:15: 23:61:60:44:af:ab:53:ff:e8:c5:28:e6:62:ea:69: 90:69:e0:7e:99:97:4b:34:59:af:c3:f4:58:e7:02: f1:41:f6:ef:77:b6:2e:5a:31:a7:d8:2d:bb:f1:67: dd:01:f5:48:98:08:af:51:5f:cf:e0:c7:bb:5a:db: 3d:4e:10:11:ed:a5:b8:10:f7:7c:4f:52:92:99:51: c0:03:ed:bf:47:e2:c5:6c:32:7c:b0:73:45:85:ab: f0:30:7f:ce:8a:87:e8:a8:38:7f:ff:8b:f8:98:12: 26:7e:0b:04:04:0b:b5:bd:d4:ba:7a:c9:74:6d:9c: ed:d6:b2:73:be:3d:3e:c3:d2:56:6b:0d:fa:8e:ec: df:f1:8e:49:6f:20:b7:50:7f:3d:2d:60:ce:c0:c8: 62:1a:17:5f:af:1b:c6:38:9b:c9:26:52:6b:ec:6e: 26:b0:e0:3a:0a:4c:6e:34:d5:c5:7d:ee:f6:9b:9f: f5:2f:9b:34:43:ea:b8:48:04:bd:cf:71:0e:17:42: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:9C:FD:CF:B9:3E:D1:E7:30:0F:24:83:F2:DA:D4:79:AE:93:D1 X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:07:d0:af:a6:16:37:41:c0:09:6d:40:6e:9f:54:eb:63: 90:5f:c2:ec:9c:04:69:c6:cf:12:15:c9:30:ba:2a:db:10:ce: 95:f9:b8:7a:3b:ab:fa:fe:2e:83:9f:c5:f6:6c:29:de:5b:27: 3f:06:96:3b:52:75:da:75:3a:73:08:56:e3:ad:24:ad:8d:09: 9a:09:85:69:f4:38:fb:b6:19:42:76:3f:18:1a:9b:c6:de:53: 6f:82:10:a2:ad:94:69:64:24:33:b5:ee:59:f0:07:79:a6:72: 80:af:36:11:24:b4:03:47:da:ea:30:81:14:b0:97:55:cf:6d: fe:4e:32:f7:22:26:2b:d0:48:96:06:da:a9:88:6b:77:0d:4d: 90:9c:a3:25:19:76:08:44:a0:5f:b5:87:1f:86:26:12:b2:3e: 2e:ce:14:b0:5e:90:4e:9f:cd:de:94:37:d0:83:6a:b8:e0:a1: 51:65:ce:6e:09:37:ff:9f:a2:a9:78:98:32:0d:4e:de:8d:25: 91:df:36:18:19:a0:74:7f:d5:2f:cc:1c:ac:7e:48:08:0b:8b: 72:7e:97:52:3e:05:d7:20:b8:57:00:4b:9b:46:5d:8f:41:7f: c0:be:a1:fe:6d:40:26:1c:5f:69:f3:c4:42:c3:93:7b:bd:3b: 1e:5a:26:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTJBNTExMC8GA1UEBRMoOENEQ0U1NzhBMjM5RTU4Q0U3RkU3NjgzQkI0NzY5RjlE QzU1MjJCQTAeFw0yNDA1MTUwNzQxMDVaFw0yNDA1MjIwNzQxMDVaMBgxFjAUBgNV BAMTDTY2NDQ2NzExLTMwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvaZtyEx+XPYyen6zVJ/Mdcrc9EJG4IVAAG9IQ7DfOoTnRFD5AxD0iKmXP5y6n Rg0wyFBJaIDKybzfFSNhYESvq1P/6MUo5mLqaZBp4H6Zl0s0Wa/D9FjnAvFB9u93 ti5aMafYLbvxZ90B9UiYCK9RX8/gx7ta2z1OEBHtpbgQ93xPUpKZUcAD7b9H4sVs Mnywc0WFq/Awf86Kh+ioOH//i/iYEiZ+CwQEC7W91Lp6yXRtnO3WsnO+PT7D0lZr DfqO7N/xjklvILdQfz0tYM7AyGIaF1+vG8Y4m8kmUmvsbiaw4DoKTG401cV97vab n/UvmzRD6rhIBL3PcQ4XQldhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCUic/c+5 PtHnMA8kg/La1Hmuk9EwHwYDVR0jBBgwFoAUjNzleKI55Yzn/naDu0dp+dxVIrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMkE1L0ExQzA0RDBBNzZD QjExRUU5M0Y1ODc0N0M0RjlBRTAyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vkly by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak56bGVLSTU1WXpuX25hRHUwZHAtZHhWSXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MkE1L0ExQzA0RDBBNzZDQjExRUU5M0Y1ODc0N0M0RjlBRTAyL2pOemxlS0k1NVl6 bl9uYUR1MGRwLWR4Vklyby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGB1B9CvphY3QcAJbUBun1TrY5BfwuycBGnGzxIVyTC6KtsQzpX5uHo7 q/r+LoOfxfZsKd5bJz8GljtSddp1OnMIVuOtJK2NCZoJhWn0OPu2GUJ2Pxgam8be U2+CEKKtlGlkJDO17lnwB3mmcoCvNhEktANH2uowgRSwl1XPbf5OMvciJivQSJYG 2qmIa3cNTZCcoyUZdghEoF+1hx+GJhKyPi7OFLBekE6fzd6UN9CDarjgoVFlzm4J N/+foql4mDINTt6NJZHfNhgZoHR/1S/MHKx+SAgLi3J+l1I+BdcguFcAS5tGXY9B f8C+of5tQCYcX2nzxELDk3u9Ox5aJpw= -----END CERTIFICATE-----Generated at Wed May 15 09:04:14 2024 by rpki-client on console-ams.rpki-client.org