$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: 6S68FTrQsqQZ0IL3AreUBJ7UWjnhJJyYbt/9ViDAO1M= Subject key identifier: A1:8F:5E:21:A7:F2:95:DA:24:DE:5A:08:20:43:CD:1A:A1:73:D3:51 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 44 Signing time: Wed 15 May 2024 08:09:34 +0000 Manifest this update: Wed 15 May 2024 08:09:34 +0000 Manifest next update: Wed 22 May 2024 08:09:34 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: x6pSh9TMF+3rjaB0MJark/OAu5v1zqRG6oQc3JqCeT4=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: u1e6gHKsFUwrQu/7FKxWIy7of4aafsukFg7L7eS89eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: May 15 08:09:34 2024 GMT Not After : May 22 08:09:34 2024 GMT Subject: CN=66446dbe-649f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:1a:ae:7f:f8:ce:e1:af:c3:70:e4:be:23: ab:be:ff:d5:b1:9f:58:69:58:b2:f2:d9:f3:e5:77: 26:d2:b9:02:16:fd:63:7f:0a:bd:d3:db:b8:3d:ed: 42:3b:d3:43:6c:7d:70:e6:21:99:3e:71:7b:e8:7f: 76:5b:72:b3:1a:86:17:9d:0c:f3:88:f4:2e:d1:27: 80:fe:b3:c9:44:3c:91:5a:6b:3b:55:21:e7:dd:9e: 5f:6f:e5:5f:fd:b7:97:7d:c9:42:2a:52:51:3c:a4: 05:d8:d6:f0:52:c7:6f:00:53:2b:d4:6b:eb:ff:77: 45:54:33:8d:c1:f3:2d:55:ce:6a:d5:e2:20:ef:3c: 3b:81:50:fe:a8:51:c1:c2:43:69:53:57:32:de:09: bf:fd:51:37:f1:12:09:0a:d5:50:e4:da:f9:0c:9d: a4:14:7d:27:1c:67:3d:92:be:de:aa:04:5d:68:10: 6e:c1:76:8c:08:dd:64:0f:0c:71:cb:be:c7:5e:3e: 0f:89:8a:34:b8:37:ff:e1:7b:ff:ce:df:c5:89:be: f3:b7:b3:48:85:9a:c4:fc:42:c6:e4:45:34:9d:05: 8a:a3:e0:2f:fe:f0:fd:13:ff:81:1a:6e:2a:76:a7: ec:15:91:2c:8f:79:15:85:3e:ba:0c:ef:77:89:86: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:5E:21:A7:F2:95:DA:24:DE:5A:08:20:43:CD:1A:A1:73:D3:51 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5d:43:7f:25:e4:42:e5:0c:b8:dd:ef:68:19:2d:8f:35:25: 0b:d6:87:14:16:22:1d:ef:90:67:35:c0:cb:ad:81:ff:da:4b: cb:7a:89:6a:f8:5f:9d:61:83:04:3b:b8:43:4a:c1:2e:78:57: 59:bb:f4:23:10:7b:ea:6a:8b:ff:1f:64:51:d8:26:38:90:5b: a1:5d:ed:74:02:bd:07:cb:ce:3c:91:a8:d2:17:0f:b7:35:0d: 6f:5c:73:51:7a:7b:b1:d3:17:81:4a:8f:5a:60:aa:8d:51:f7: e9:28:4b:51:c0:d6:2e:b7:d9:ee:34:28:99:a9:59:7a:02:c5: 99:c9:23:5e:a5:ee:11:7a:89:0e:8d:06:3d:29:60:38:e5:84: 5c:6d:6c:f6:b4:25:e9:7e:ef:0c:35:39:a6:cd:ad:81:a1:8a: da:53:8a:b9:38:37:e5:72:60:51:d3:6a:37:07:0e:e5:3c:43: 05:86:a6:6d:7f:b0:35:ce:e9:d9:18:7e:d6:a3:4d:62:b1:ea: b9:0b:20:0d:ef:44:87:bf:82:f6:0a:cf:c2:5b:55:0e:c3:1d: 80:25:89:a1:bc:0d:81:9c:0e:38:19:30:85:35:18:4b:25:8d: 61:9d:21:89:ae:80:52:a5:9b:95:5d:4c:20:3f:38:c8:65:a5: 67:01:1a:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RENEMjExMC8GA1UEBRMoMjZDM0U3MTM2MjA3NjM5QTA2REM3MDgzMDhFMDExNzQ3 QkEyNzFDQjAeFw0yNDA1MTUwODA5MzRaFw0yNDA1MjIwODA5MzRaMBgxFjAUBgNV BAMTDTY2NDQ2ZGJlLTY0OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLexquf/jO4a/DcOS+I6u+/9Wxn1hpWLLy2fPldybSuQIW/WN/Cr3T27g97UI7 00NsfXDmIZk+cXvof3ZbcrMahhedDPOI9C7RJ4D+s8lEPJFaaztVIefdnl9v5V/9 t5d9yUIqUlE8pAXY1vBSx28AUyvUa+v/d0VUM43B8y1VzmrV4iDvPDuBUP6oUcHC Q2lTVzLeCb/9UTfxEgkK1VDk2vkMnaQUfSccZz2Svt6qBF1oEG7BdowI3WQPDHHL vsdePg+JijS4N//he//O38WJvvO3s0iFmsT8QsbkRTSdBYqj4C/+8P0T/4Eabip2 p+wVkSyPeRWFProM73eJhmxtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoY9eIafy ldok3loIIEPNGqFz01EwHwYDVR0jBBgwFoAUJsPnE2IHY5oG3HCDCOARdHuiccsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEQ0QyL0VFNTFFNURDQUIz OTExRUVBMUFCMjMxNkM0RjlBRTAyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnNQbkUySUhZNW9HM0hDRENPQVJkSHVpY2NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE Q0QyL0VFNTFFNURDQUIzOTExRUVBMUFCMjMxNkM0RjlBRTAyL0pzUG5FMklIWTVv RzNIQ0RDT0FSZEh1aWNjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJddQ38l5ELlDLjd72gZLY81JQvWhxQWIh3vkGc1wMutgf/aS8t6iWr4 X51hgwQ7uENKwS54V1m79CMQe+pqi/8fZFHYJjiQW6Fd7XQCvQfLzjyRqNIXD7c1 DW9cc1F6e7HTF4FKj1pgqo1R9+koS1HA1i632e40KJmpWXoCxZnJI16l7hF6iQ6N Bj0pYDjlhFxtbPa0Jel+7ww1OabNrYGhitpTirk4N+VyYFHTajcHDuU8QwWGpm1/ sDXO6dkYftajTWKx6rkLIA3vRIe/gvYKz8JbVQ7DHYAliaG8DYGcDjgZMIU1GEsl jWGdIYmugFKlm5VdTCA/OMhlpWcBGiA= -----END CERTIFICATE-----Generated at Wed May 15 09:04:41 2024 by rpki-client on console-ams.rpki-client.org