$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: ff57oRwSclIzl7uZUlWvoy9EviHLeaxDkjF5LsqUjZ0= Subject key identifier: BA:21:5C:03:41:40:81:D8:57:63:1E:9E:B4:F7:85:53:30:DA:98:90 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 5C Signing time: Wed 15 May 2024 07:55:06 +0000 Manifest this update: Wed 15 May 2024 07:55:06 +0000 Manifest next update: Wed 22 May 2024 07:55:05 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: n6mmunVI4rp0VCV4lytTWPeVXcj1JE96YKZLAOyfJm0=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: t9AWerdFoSlx8BlZhPHhMpsds8XRNwYqNkMr3i+O4XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: May 15 07:55:06 2024 GMT Not After : May 22 07:55:05 2024 GMT Subject: CN=66446a5a-1a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:fc:91:17:e0:ab:d8:d9:78:17:09:64:20: 2b:67:23:aa:e9:69:46:c6:88:71:eb:2c:94:f1:ee: ec:94:cc:83:39:c5:e6:31:3e:4f:fa:5c:8e:d3:f1: f4:ee:d4:72:51:1f:b3:ee:50:f2:0d:71:ce:b3:68: 72:b4:c5:8e:e3:68:0a:43:bc:ca:68:63:21:b7:50: 33:bb:59:39:82:14:a5:bf:f8:f4:15:b7:62:de:c3: 2f:6b:6a:96:55:e1:78:52:40:f9:82:b0:be:84:27: 3f:5e:43:8b:f9:66:5d:47:c4:36:b6:7a:5a:1d:a9: 0f:db:11:cf:ab:ee:7e:c9:33:04:3f:81:75:5d:cb: 0f:a0:5f:f2:bd:a8:86:14:fe:8a:05:3e:3e:58:56: 59:51:58:8d:32:d9:e7:97:47:39:b4:4e:89:48:f7: 69:7d:80:00:f0:c9:01:a7:db:18:f2:be:5c:0a:b9: be:45:15:e4:90:b4:03:a3:9a:08:26:cb:8f:a4:e5: 7b:bc:39:92:a5:d7:16:33:57:e0:65:fc:37:86:6f: 79:09:7f:69:b2:bb:21:e0:d5:ee:77:18:2e:c9:67: f6:15:95:c8:07:1e:06:a2:cd:4f:76:15:7d:91:aa: d0:f0:c1:6d:bf:4b:2f:64:2e:78:b0:73:53:9b:67: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:5C:03:41:40:81:D8:57:63:1E:9E:B4:F7:85:53:30:DA:98:90 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:81:fa:80:52:fe:5b:51:59:f5:de:0b:51:4b:1e:7d:6d:80: cf:a8:57:ff:b9:8e:4f:80:c4:b2:57:cf:78:9f:74:6e:c0:31: f4:70:22:ad:da:9e:0c:96:c4:1f:14:0c:fe:86:f2:91:fb:78: 98:46:85:91:48:4e:66:5e:bc:be:de:a6:f5:40:ac:1c:11:41: 46:14:a7:f9:d8:76:e5:bf:d9:75:a2:08:43:1e:ab:9d:36:be: d7:03:8a:0c:0f:32:9b:e3:20:fd:ee:8e:17:73:53:c4:d5:1e: 0b:09:24:1e:78:d7:87:8f:5d:21:a2:f0:01:08:e7:00:78:34: 28:c8:52:7e:94:43:29:71:5d:12:32:97:77:ab:3e:f2:a9:ca: cf:fd:1a:99:43:a9:b7:2d:c4:14:93:82:16:e1:45:a0:a6:44: 30:e3:21:9c:55:ee:8c:3b:e7:32:3f:1e:11:7f:e7:ce:f4:b4: 06:05:77:2f:95:c9:ec:87:73:7e:fd:38:e1:f6:7e:04:9f:3a: d8:4d:5b:5c:2c:36:eb:d7:57:02:bf:d7:1a:a2:ff:f6:5a:65: 14:82:5c:52:8f:44:26:ce:02:b9:bc:a9:b1:a6:0d:58:9b:44: 4c:c1:19:2c:b8:3a:c3:83:26:f1:ef:48:a5:c1:ea:0c:6b:d3: f5:2f:30:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjRGNjExMC8GA1UEBRMoOENDMzA0M0Q0QjQ2QzQ4RjEyNkMwNkU4Mjk3MEVCQjQ4 QjY0NjNDODAeFw0yNDA1MTUwNzU1MDZaFw0yNDA1MjIwNzU1MDVaMBgxFjAUBgNV BAMTDTY2NDQ2YTVhLTFhNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8BPyRF+Cr2Nl4FwlkICtnI6rpaUbGiHHrLJTx7uyUzIM5xeYxPk/6XI7T8fTu 1HJRH7PuUPINcc6zaHK0xY7jaApDvMpoYyG3UDO7WTmCFKW/+PQVt2Lewy9rapZV 4XhSQPmCsL6EJz9eQ4v5Zl1HxDa2elodqQ/bEc+r7n7JMwQ/gXVdyw+gX/K9qIYU /ooFPj5YVllRWI0y2eeXRzm0TolI92l9gADwyQGn2xjyvlwKub5FFeSQtAOjmggm y4+k5Xu8OZKl1xYzV+Bl/DeGb3kJf2myuyHg1e53GC7JZ/YVlcgHHgaizU92FX2R qtDwwW2/Sy9kLniwc1ObZ3FvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuiFcA0FA gdhXYx6etPeFUzDamJAwHwYDVR0jBBgwFoAUjMMEPUtGxI8SbAboKXDrtItkY8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2NEY2L0UxQ0YzQzU2OTBE QjExRUVCOUNEMkE3NkM0RjlBRTAyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak1NRVBVdEd4SThTYkFib0tYRHJ0SXRrWThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 NEY2L0UxQ0YzQzU2OTBEQjExRUVCOUNEMkE3NkM0RjlBRTAyL2pNTUVQVXRHeEk4 U2JBYm9LWERydEl0a1k4Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+B+oBS/ltRWfXeC1FLHn1tgM+oV/+5jk+AxLJXz3ifdG7AMfRwIq3a ngyWxB8UDP6G8pH7eJhGhZFITmZevL7epvVArBwRQUYUp/nYduW/2XWiCEMeq502 vtcDigwPMpvjIP3ujhdzU8TVHgsJJB5414ePXSGi8AEI5wB4NCjIUn6UQylxXRIy l3erPvKpys/9GplDqbctxBSTghbhRaCmRDDjIZxV7ow75zI/HhF/5870tAYFdy+V yeyHc379OOH2fgSfOthNW1wsNuvXVwK/1xqi//ZaZRSCXFKPRCbOArm8qbGmDVib REzBGSy4OsODJvHvSKXB6gxr0/UvMOA= -----END CERTIFICATE-----Generated at Wed May 15 09:04:42 2024 by rpki-client on console-ams.rpki-client.org