$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft File: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft (raw, json) Hash identifier: Vubggyoxup62SQfgG5q0Kc3jZz6wZR4AUDrMS3LWlwM= Subject key identifier: 0F:04:8D:A5:5F:8E:CA:CB:37:DC:43:05:A9:D7:BE:02:FE:34:0C:36 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft Manifest number: 048F Signing time: Sun 05 May 2024 02:01:13 +0000 Manifest this update: Sun 05 May 2024 02:01:13 +0000 Manifest next update: Sun 12 May 2024 02:01:13 +0000 Files and hashes: 1: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl (hash: H5TyMUGfETbJdQEDzvgz+XMLLWisgarVdu+Gc1A7vzU=) 2: 4235F184DACE11EE8E67437CC4F9AE02.roa (hash: 0K9yV68yal6enaHOZm3w2lBcPnlb+xnfeR0xcd5iRnM=) 3: 7480CB3208B611EDACE57065C4F9AE02.roa (hash: mGTbyMCc4t96n5naa9E/HE+s6Ix7JnfOfnlCugy+J4Y=) 4: 76FA56B208B611EDACE57065C4F9AE02.roa (hash: q6mAQ8hxd2tNHOeHiwocWnXXo2B/QkgbUwPsKgAKJhY=) 5: 76C6B0C8105511EC92580578C4F9AE02.roa (hash: f7aJp3CdLsyo0t+stZfCboVaIQ0kQDW57cl0sFNYD7o=) 6: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (hash: oxb+ZVwngQZ78D0VC7fWYXbul+BsPCCKgwQOCW8hTEE=) 7: 7BE0CE60064911ECA853EB0FC4F9AE02.roa (hash: gDBnMv48s1UFFyZstRqCDF5/vwHsnGAPQKDpz0kNK0I=) 8: 791CA9EC064911ECA853EB0FC4F9AE02.roa (hash: RxSRTomweO6ts9ni1HZ6OoKGhk3rdB8KvzAv2ZiLHVM=) 9: 7B2B3168064911ECA853EB0FC4F9AE02.roa (hash: Cv9HKfCMSb/EctoOxUhakYVAfd+nexx28h1L94HgS6c=) 10: 1D6F108A00D511ED9262EB53C4F9AE02.roa (hash: mfy+4Z1cUmQQl5TnEQ1tOyJ6L8Iq2x+lSczxFz0X1qQ=) 11: 9A7D9276665111EEAD781D28C4F9AE02.roa (hash: xYW+1P4nFgpBHGgktFX5W2cYeiS3xZCgxQIQN4yauwk=) 12: F008FF08C22111ECB9FFB964C4F9AE02.roa (hash: oAv73McLTHeEFMcD3FBKqTvYSVmZhn6Jm+0WPoOKxS0=) 13: 52564FC4836B11EE960BCA6FC4F9AE02.roa (hash: v6XT6ftivFwtelPGcCuwnPo7+zQIxSq9Lx+uRjU+5nc=) 14: 794E571008B611EDACE57065C4F9AE02.roa (hash: yYkxyq9Q7xW7Fh6FR1oaPA/DA7Y7nl6MGlcmMf3J52A=) 15: 99C5A4CC201211EC8520994EC4F9AE02.roa (hash: z43CXMMv4cj/JnnDmFAUo8YAQWcVS+cF/NtDYz0EAjM=) 16: 73D3C5B808B611EDACE57065C4F9AE02.roa (hash: 0j8pGgEnnkRB/1ZIOO4H9vJci41MEFFf4lTymQz/fYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: May 5 02:01:13 2024 GMT Not After : May 12 02:01:13 2024 GMT Subject: CN=6636e869-9ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:5e:b7:4b:12:f8:67:83:46:a6:1a:94:cb: 74:95:5e:e9:88:ad:48:f0:7c:eb:84:be:b6:b2:0a: d8:8d:01:08:95:18:b3:0e:92:b5:aa:2d:ba:b8:da: 4b:f7:5b:37:cd:88:8f:54:af:9b:15:3e:f2:b8:c4: d7:db:2c:e1:0b:69:f8:00:2b:75:45:4c:11:ca:3b: f8:c2:b2:ed:04:93:18:d0:f3:cb:35:a2:e8:6c:a0: 22:c9:a8:b4:8e:45:4c:15:4f:38:6f:24:e7:f0:1d: 90:83:13:a5:7d:a1:6c:ba:6f:c6:fe:ba:a1:d6:a5: d7:a0:6f:18:65:bd:4e:ef:3c:e3:41:c9:d6:ab:22: 22:25:e0:1c:d6:c8:55:c5:1a:2e:be:dd:b7:02:bb: be:d2:45:65:2a:56:6b:76:f2:ec:0a:73:bc:05:4a: 18:d7:6c:f4:56:15:8d:06:c3:e0:f3:c5:31:0e:ad: 0e:e5:66:88:58:0a:87:a4:9b:23:80:87:fd:6f:30: 84:6a:5c:20:ac:3d:4f:5c:15:82:f2:05:51:78:79: 73:30:a8:1a:0b:63:ee:9e:13:18:b9:2e:1b:3b:a1: 0f:27:64:89:86:66:e1:a9:3e:6b:eb:f8:07:82:53: c5:99:48:6b:8f:2f:a4:d4:39:71:a5:d5:61:2f:a1: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:04:8D:A5:5F:8E:CA:CB:37:DC:43:05:A9:D7:BE:02:FE:34:0C:36 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:4a:c7:f7:0e:a5:e3:f2:c7:a7:4e:7a:8f:ce:42:b4:86: 47:cd:18:1b:50:b1:a7:1d:35:38:46:38:1e:99:c5:35:44:9f: 43:97:f0:0c:9f:fe:df:0c:e0:a8:da:a2:f7:00:52:00:cb:80: 81:b7:f1:de:94:ec:aa:56:f8:04:4e:d3:21:06:44:47:b6:9f: 48:e3:37:9a:96:e5:95:d1:6b:59:48:36:31:c3:31:a3:ae:8b: 39:d8:9f:f4:48:df:77:ed:2d:5c:11:f8:d1:79:b3:51:70:68: 2d:0d:96:dd:f4:b0:13:43:3a:73:cb:16:ed:15:3b:23:4c:a6: 82:59:e9:11:8f:8d:5f:e4:07:ba:57:e0:3c:88:3b:23:95:9e: 98:ea:bc:9f:64:19:a8:cb:a5:d4:a9:1e:7b:bb:60:ab:80:5a: a2:9d:f9:60:0b:a3:81:a5:50:e3:a3:42:a2:d8:10:ef:17:c2: 30:cc:25:6a:e5:7e:d8:33:6f:d1:d0:d7:31:b7:f7:27:69:12: 81:37:2b:46:a4:a6:aa:82:25:10:1e:d9:23:25:42:b6:c2:83: 8e:34:36:e9:29:fa:8c:91:38:ce:78:32:88:a7:03:13:7d:e4: 64:2b:1b:87:ea:76:f6:a3:9b:65:10:fc:9a:b2:ad:f0:46:c2: e5:5a:6a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjQwNTA1MDIwMTEzWhcNMjQwNTEyMDIwMTEzWjAYMRYwFAYD VQQDEw02NjM2ZTg2OS05ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskRet0sS+GeDRqYalMt0lV7piK1I8HzrhL62sgrYjQEIlRizDpK1qi26uNpL 91s3zYiPVK+bFT7yuMTX2yzhC2n4ACt1RUwRyjv4wrLtBJMY0PPLNaLobKAiyai0 jkVMFU84byTn8B2QgxOlfaFsum/G/rqh1qXXoG8YZb1O7zzjQcnWqyIiJeAc1shV xRouvt23Aru+0kVlKlZrdvLsCnO8BUoY12z0VhWNBsPg88UxDq0O5WaIWAqHpJsj gIf9bzCEalwgrD1PXBWC8gVReHlzMKgaC2PunhMYuS4bO6EPJ2SJhmbhqT5r6/gH glPFmUhrjy+k1DlxpdVhL6G9wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8EjaVf jsrLN9xDBanXvgL+NAw2MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU2MS9BMjZFMDZFMDA1NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBC czlHUldIYVc1YV9kak96UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0hErH9w6l4/LHp056j85CtIZHzRgbULGnHTU4RjgemcU1RJ9Dl/AM n/7fDOCo2qL3AFIAy4CBt/HelOyqVvgETtMhBkRHtp9I4zealuWV0WtZSDYxwzGj ros52J/0SN937S1cEfjRebNRcGgtDZbd9LATQzpzyxbtFTsjTKaCWekRj41f5Ae6 V+A8iDsjlZ6Y6ryfZBmoy6XUqR57u2CrgFqinflgC6OBpVDjo0Ki2BDvF8IwzCVq 5X7YM2/R0Ncxt/cnaRKBNytGpKaqgiUQHtkjJUK2woOONDbpKfqMkTjOeDKIpwMT feRkKxuH6nb2o5tlEPyasq3wRsLlWmr6 -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org