$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: mG24Gw9NpSPMMEstYdhd4Bo5LThPNA2QOtDQ91Q139Q= Subject key identifier: B0:70:7D:3C:61:AD:95:22:1E:CE:B1:BB:74:8D:F5:4E:55:CB:02:D0 Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 19C5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 19BF Signing time: Sun 26 May 2024 16:02:46 +0000 Manifest this update: Sun 26 May 2024 16:02:45 +0000 Manifest next update: Sun 02 Jun 2024 16:02:45 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: lAQgaT5krhOXwwu4VZBnkcUVwouW3d4U0+ZoaI2FbQc=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: l6ozucYTFKjn39HEiVgGalsJ6EF9CCKenjj1DUfT/Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6597 (0x19c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: May 26 16:02:45 2024 GMT Not After : Jun 2 16:02:45 2024 GMT Subject: CN=66535d26-c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:9d:22:21:6e:64:c5:60:6c:3e:b5:c6:29: 5a:40:3a:59:ff:3b:35:3e:57:3e:fa:d5:a7:7f:ec: 7f:de:94:e3:43:33:18:11:cb:9b:8f:33:a1:83:e9: 55:7b:9a:f1:bb:88:c3:47:ed:f8:56:15:c3:e8:5f: 58:b1:7a:ec:a8:dd:8e:a3:a4:2d:9e:3d:a6:a1:7b: 49:aa:77:82:8d:aa:b6:ec:ad:79:95:5a:7a:2d:03: 64:f3:de:a9:80:4d:5c:ca:97:18:a0:70:f5:f9:f6: 27:7c:05:08:c7:2c:b5:82:4f:49:4f:f7:1a:02:ee: 9b:48:40:38:89:8a:5f:92:56:48:47:9a:ab:d3:01: 52:49:b8:26:5f:7c:4f:e4:85:17:16:a8:2b:e4:de: e1:2d:ae:72:21:f6:9c:20:21:c9:f9:7d:66:be:2b: fe:8b:42:42:f6:e9:9e:76:c7:58:4d:c3:56:7d:a9: 0f:83:e4:de:92:4c:97:a0:e4:f3:9d:cf:d6:4f:08: 21:ec:a3:c3:cf:4c:f4:31:96:28:f1:c9:1f:c0:34: 9a:0b:e3:54:f7:d1:a0:3d:47:3a:bf:2a:5f:d6:d4: 14:88:90:74:c4:00:d2:7f:78:ae:e8:88:df:2a:ef: a1:14:1d:8a:f6:d0:66:55:88:d1:cd:12:4d:7c:66: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:7D:3C:61:AD:95:22:1E:CE:B1:BB:74:8D:F5:4E:55:CB:02:D0 X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b4:0b:08:4e:ac:27:7e:a7:54:e2:22:da:04:d4:72:4d:dc: 84:36:c8:44:3f:86:ce:fb:a9:6e:0b:90:40:bf:5f:69:1c:99: 31:fb:03:bc:0a:46:4d:4a:3e:26:0a:1c:5b:68:b5:88:24:c4: 80:82:a3:3b:3b:42:76:f2:2f:c1:cb:ff:2d:16:c7:1a:c2:7c: ba:d0:1b:a4:9f:19:24:94:bb:24:3f:3a:e5:72:05:69:ab:2e: a5:e7:51:c2:77:a3:ca:2b:70:73:64:97:78:2a:8e:42:fb:00: 17:ea:0b:2f:07:68:2f:15:0a:3d:7a:0f:25:fc:47:a6:55:98: 83:18:1c:ac:7f:2e:aa:e0:bc:c7:52:99:b7:aa:4a:99:69:9a: 82:1e:87:c6:53:ae:2f:b0:2c:82:75:62:e6:4e:fd:42:5d:61: 97:ae:0c:8f:c7:4b:41:f7:32:6f:34:45:6c:16:80:e0:ce:5e: 01:b4:de:f1:0e:67:de:3c:e8:59:1e:ab:2a:51:cd:1c:50:cb: ec:83:13:a1:0f:2d:5c:98:53:fd:6b:27:fd:13:21:f6:ef:05: 7a:2a:5d:ae:99:ee:e0:f2:fb:94:4f:64:6a:17:5e:65:c6:96: 8c:44:4f:3f:9a:95:a9:74:b9:c8:30:e5:a9:d8:58:97:75:70: 18:be:bd:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjQwNTI2MTYwMjQ1WhcNMjQwNjAyMTYwMjQ1WjAYMRYwFAYD VQQDEw02NjUzNWQyNi1jNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsKdIiFuZMVgbD61xilaQDpZ/zs1Plc++tWnf+x/3pTjQzMYEcubjzOhg+lV e5rxu4jDR+34VhXD6F9YsXrsqN2Oo6Qtnj2moXtJqneCjaq27K15lVp6LQNk896p gE1cypcYoHD1+fYnfAUIxyy1gk9JT/caAu6bSEA4iYpfklZIR5qr0wFSSbgmX3xP 5IUXFqgr5N7hLa5yIfacICHJ+X1mviv+i0JC9umedsdYTcNWfakPg+TekkyXoOTz nc/WTwgh7KPDz0z0MZYo8ckfwDSaC+NU99GgPUc6vypf1tQUiJB0xADSf3iu6Ijf Ku+hFB2K9tBmVYjRzRJNfGZZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBwfTxh rZUiHs6xu3SN9U5VywLQMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCitAsITqwnfqdU4iLaBNRyTdyENshEP4bO+6luC5BAv19pHJkx+wO8 CkZNSj4mChxbaLWIJMSAgqM7O0J28i/By/8tFscawny60BuknxkklLskPzrlcgVp qy6l51HCd6PKK3BzZJd4Ko5C+wAX6gsvB2gvFQo9eg8l/EemVZiDGBysfy6q4LzH Upm3qkqZaZqCHofGU64vsCyCdWLmTv1CXWGXrgyPx0tB9zJvNEVsFoDgzl4BtN7x DmfePOhZHqsqUc0cUMvsgxOhDy1cmFP9ayf9EyH27wV6Kl2ume7g8vuUT2RqF15l xpaMRE8/mpWpdLnIMOWp2FiXdXAYvr2B -----END CERTIFICATE-----Generated at Sun May 26 19:11:41 2024 by rpki-client on console-ams.rpki-client.org