$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: WVaxhWJ013wo6Fdct59H2loa0NOhypbREiUwQwjqVaU= Subject key identifier: 80:9A:31:30:41:3F:49:07:13:A6:A9:32:B3:CA:4B:8C:36:92:01:89 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 50 Signing time: Fri 17 May 2024 08:02:25 +0000 Manifest this update: Fri 17 May 2024 08:02:25 +0000 Manifest next update: Fri 24 May 2024 08:02:25 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: ahDm/42WZku0Fzoa18ZOW/JcFvGy50YNQLtifsYzgFo=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: k5vDxZxY0nlbHanZLi0NcjwM/K12xntBq1yqMO9Bazs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: May 17 08:02:25 2024 GMT Not After : May 24 08:02:25 2024 GMT Subject: CN=66470f11-2844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:4a:ee:88:f8:b8:f0:bb:da:18:45:43:64: 9c:b4:66:fe:a8:05:43:96:c8:a2:8a:2f:b0:a6:3e: 06:04:28:70:b4:1c:27:da:2c:3c:42:f1:77:66:95: de:1c:0d:00:3b:93:7e:c8:6b:f3:49:db:a2:ab:d7: 7f:ee:a9:bd:dc:6c:e9:e5:a9:e3:02:27:3f:75:ec: 74:e5:4d:5d:87:dd:e2:c7:cf:ab:78:c1:de:e2:64: e4:2a:71:de:04:6e:6f:9b:eb:bd:b8:09:57:0c:91: 71:7d:b4:de:52:b7:30:b7:71:57:00:a2:f4:0b:7a: 86:2d:3f:a2:d6:42:f7:57:34:f8:21:d2:4a:2a:24: f6:cb:1f:29:f1:1e:a7:83:2c:da:8b:e9:e7:04:5d: c1:f6:5f:cb:0b:29:af:21:14:5c:95:47:db:0b:c4: 48:6c:92:51:73:4e:91:fc:9f:8d:ed:02:c3:98:95: ee:16:ee:ac:25:e5:ce:97:0b:a8:5f:6a:46:62:fe: 57:b0:a7:41:a2:83:af:b6:5d:ba:30:4a:61:98:36: dc:04:fa:9b:a8:72:59:83:39:22:af:48:39:f6:5e: 0d:6a:0d:79:3e:0d:b2:06:b4:f3:89:23:94:27:95: bf:b4:ee:53:57:d0:d3:99:51:ac:02:de:ae:41:0b: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9A:31:30:41:3F:49:07:13:A6:A9:32:B3:CA:4B:8C:36:92:01:89 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d5:4a:8b:f1:9e:09:30:53:eb:f7:90:dd:c9:15:2a:2e:82: 52:1f:56:ad:df:c9:c8:37:ea:e6:48:b7:2c:83:b4:17:ad:22: 8d:83:ad:9c:f4:89:85:ba:23:40:7d:c7:c3:8b:91:98:a3:b8: 96:83:04:0f:d2:78:6f:b0:23:37:4e:1e:ec:49:8a:3c:b0:85: 79:c7:f8:7f:5d:4d:57:fd:41:b8:be:5a:58:40:75:c1:ff:a3: 47:bd:db:37:0b:6a:9e:6d:81:e0:2c:b9:ba:c1:b5:0e:21:39: d8:0b:21:e7:52:4d:1a:bb:3a:f3:a1:45:ab:c6:3a:8a:43:3e: 16:e4:85:ba:9c:1d:c2:c8:ae:a6:fe:3f:1e:c7:84:a4:ec:7c: 90:7c:c4:79:77:41:ca:3b:89:05:14:65:fc:7a:43:83:55:05: 18:68:5c:d7:5e:5f:54:03:65:ec:62:9e:36:df:24:1b:14:2a: 06:01:7e:96:b2:08:1a:83:79:e9:42:c4:df:70:1d:9d:9b:20: 6e:8f:1e:d3:a7:f6:7d:e0:53:fe:68:b7:5f:2a:63:29:32:5c: 25:63:3f:53:af:ec:54:09:99:a2:3d:3a:29:74:44:3f:2c:e5: e3:28:4d:18:14:09:a7:c9:c8:62:5f:2b:72:dd:2b:c0:b8:8a: 7f:d9:d2:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDFBMjExMC8GA1UEBRMoOEYwNjg2OUNFRkNENUMyNzIzMTMyRTNFRjlDREI3QTQ2 MUQwMUIxOTAeFw0yNDA1MTcwODAyMjVaFw0yNDA1MjQwODAyMjVaMBgxFjAUBgNV BAMTDTY2NDcwZjExLTI4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr90ruiPi48LvaGEVDZJy0Zv6oBUOWyKKKL7CmPgYEKHC0HCfaLDxC8Xdmld4c DQA7k37Ia/NJ26Kr13/uqb3cbOnlqeMCJz917HTlTV2H3eLHz6t4wd7iZOQqcd4E bm+b6724CVcMkXF9tN5StzC3cVcAovQLeoYtP6LWQvdXNPgh0koqJPbLHynxHqeD LNqL6ecEXcH2X8sLKa8hFFyVR9sLxEhsklFzTpH8n43tAsOYle4W7qwl5c6XC6hf akZi/lewp0Gig6+2XbowSmGYNtwE+puoclmDOSKvSDn2Xg1qDXk+DbIGtPOJI5Qn lb+07lNX0NOZUawC3q5BC2xZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgJoxMEE/ SQcTpqkys8pLjDaSAYkwHwYDVR0jBBgwFoAUjwaGnO/NXCcjEy4++c23pGHQGxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMUEyL0VGRTA0MDRBOUIz QzExRUVCM0ZDQUQ0OUM0RjlBRTAyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvandhR25PX05YQ2NqRXk0LS1jMjNwR0hRR3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MUEyL0VGRTA0MDRBOUIzQzExRUVCM0ZDQUQ0OUM0RjlBRTAyL2p3YUduT19OWENj akV5NC0tYzIzcEdIUUd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzVSovxngkwU+v3kN3JFSouglIfVq3fycg36uZItyyDtBetIo2DrZz0 iYW6I0B9x8OLkZijuJaDBA/SeG+wIzdOHuxJijywhXnH+H9dTVf9Qbi+WlhAdcH/ o0e92zcLap5tgeAsubrBtQ4hOdgLIedSTRq7OvOhRavGOopDPhbkhbqcHcLIrqb+ Px7HhKTsfJB8xHl3Qco7iQUUZfx6Q4NVBRhoXNdeX1QDZexinjbfJBsUKgYBfpay CBqDeelCxN9wHZ2bIG6PHtOn9n3gU/5ot18qYykyXCVjP1Ov7FQJmaI9Oil0RD8s 5eMoTRgUCafJyGJfK3LdK8C4in/Z0i8= -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org