$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: 64v0lUz0cAQIOO/tXlRqSbDgfecfUJXg2jL4tdFlnbI= Subject key identifier: 74:B8:C5:9D:CE:5B:CD:98:0D:6C:40:C5:90:79:92:15:3A:0F:DE:12 Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0B4C Signing time: Fri 26 Apr 2024 19:45:10 +0000 Manifest this update: Fri 26 Apr 2024 19:45:09 +0000 Manifest next update: Fri 03 May 2024 19:45:09 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: zokzM+n88+FXFIRum3gBwLDNlpISddZ2pPrIUlhnSHM=) 2: 996294F0F6F811ECB7D4B564C4F9AE02.roa (hash: vzr5FLi/+HqX3i2PY9Ml2cOPQTizJVDGVELIBhdYlQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Apr 26 19:45:09 2024 GMT Not After : May 3 19:45:09 2024 GMT Subject: CN=662c0446-12cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:c7:68:ba:33:37:b3:7b:5f:82:2b:fb:d5: 49:f1:4d:e6:25:7d:d4:b4:a5:27:28:99:1f:10:4d: 4e:d7:4d:ca:77:29:5d:13:dc:19:3e:94:8a:09:67: 17:f0:78:f1:52:01:0a:90:1b:7a:84:24:4b:b5:2a: 90:b3:32:ba:ad:39:ee:30:24:b0:ed:ba:cd:7c:96: 22:11:2c:91:21:60:cd:b1:db:1c:c3:4b:93:a1:34: 79:e7:8c:0c:b3:48:70:d2:a1:e5:c1:34:1d:18:9d: a8:a3:ce:d0:ca:00:5b:8c:5a:4a:90:9f:d1:6e:d3: 7f:05:32:55:f5:07:39:4b:82:c0:ef:f0:ce:09:bd: 76:a3:e3:63:2b:3d:6f:3e:6e:74:7e:d1:f4:4a:d4: 28:76:ea:0d:03:b0:4a:9e:ce:b2:df:0a:3c:1f:60: 93:27:8b:5d:d7:02:5c:8c:f2:b0:1d:b9:d0:b4:55: b6:fa:fc:ed:c8:fd:cc:e1:ef:c4:23:4d:5d:83:ba: 64:c3:ed:2c:be:42:b8:6c:8b:09:3c:b5:f9:70:ce: c4:d7:a6:2f:d8:8c:e4:01:c0:3d:20:3b:43:22:ec: e1:10:a6:ab:35:66:c4:18:35:a9:ce:c0:e8:b9:34: b7:19:7d:5d:ea:47:0e:d2:fa:38:45:33:02:48:f2: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:C5:9D:CE:5B:CD:98:0D:6C:40:C5:90:79:92:15:3A:0F:DE:12 X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f1:5e:5d:b2:a9:dc:ac:d2:27:31:5f:51:f1:b1:d1:c3:0b: 61:bb:56:1b:62:2d:d3:78:52:d2:5b:26:0b:19:7e:57:18:5e: 78:f9:70:76:f6:00:22:9d:5e:32:68:5b:4d:34:ce:5d:ef:fb: ce:54:50:60:d8:b6:22:72:47:ef:a1:dc:23:69:52:8c:2d:0e: 6a:68:cd:cf:02:02:32:91:d4:91:ba:82:c0:81:7d:23:b6:90: 38:01:4c:0d:39:ec:de:b7:6c:3a:d6:ec:ef:df:3e:a5:92:5a: 1e:1b:ce:4b:ad:ec:71:f4:5e:75:e2:2c:11:35:a9:ac:0e:12: d4:df:92:7c:09:85:20:e9:86:05:53:44:32:90:90:c8:7f:a8: b2:a7:b9:57:2d:22:f4:11:31:28:85:ff:b1:72:80:a1:af:6f: aa:55:16:ea:37:ae:9f:e4:1f:b6:c5:dd:9e:3f:42:f9:2f:d7: d2:86:be:4e:ab:f2:a0:4e:7d:60:6a:bd:a8:96:32:70:01:15: 27:c6:44:2c:00:49:5b:3b:59:76:4b:11:b1:bc:cf:15:42:95: 37:ab:04:cd:ae:0f:83:ea:6c:f6:57:e3:82:bb:a6:ba:31:b9: cd:10:f1:78:82:aa:61:c2:f3:c9:6b:9c:72:db:5d:af:41:46: fd:09:a3:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjQwNDI2MTk0NTA5WhcNMjQwNTAzMTk0NTA5WjAYMRYwFAYD VQQDEw02NjJjMDQ0Ni0xMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlX/HaLozN7N7X4Ir+9VJ8U3mJX3UtKUnKJkfEE1O103KdyldE9wZPpSKCWcX 8HjxUgEKkBt6hCRLtSqQszK6rTnuMCSw7brNfJYiESyRIWDNsdscw0uToTR554wM s0hw0qHlwTQdGJ2oo87QygBbjFpKkJ/RbtN/BTJV9Qc5S4LA7/DOCb12o+NjKz1v Pm50ftH0StQoduoNA7BKns6y3wo8H2CTJ4td1wJcjPKwHbnQtFW2+vztyP3M4e/E I01dg7pkw+0svkK4bIsJPLX5cM7E16Yv2IzkAcA9IDtDIuzhEKarNWbEGDWpzsDo uTS3GX1d6kcO0vo4RTMCSPLzLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS4xZ3O W82YDWxAxZB5khU6D94SMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ8V5dsqncrNInMV9R8bHRwwthu1YbYi3TeFLSWyYLGX5XGF54+XB2 9gAinV4yaFtNNM5d7/vOVFBg2LYickfvodwjaVKMLQ5qaM3PAgIykdSRuoLAgX0j tpA4AUwNOezet2w61uzv3z6lkloeG85Lrexx9F514iwRNamsDhLU35J8CYUg6YYF U0QykJDIf6iyp7lXLSL0ETEohf+xcoChr2+qVRbqN66f5B+2xd2eP0L5L9fShr5O q/KgTn1gar2oljJwARUnxkQsAElbO1l2SxGxvM8VQpU3qwTNrg+D6mz2V+OCu6a6 MbnNEPF4gqphwvPJa5xy212vQUb9CaNy -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:11 2024 by rpki-client on console-ams.rpki-client.org