$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: iul0NEsSKZmbDW2v1ntqcn2SWb7F1HSkS4G9tGzKTT0= Subject key identifier: 5B:57:EB:E5:F5:85:4E:D1:47:B1:0A:B5:F3:97:41:2C:9C:D4:29:E0 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 14 Signing time: Wed 15 May 2024 08:56:56 +0000 Manifest this update: Wed 15 May 2024 08:56:56 +0000 Manifest next update: Wed 22 May 2024 08:56:56 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: 2C+cUIlyskWYJzXIq3hioIf3VPiwT6wkF2aCpeqm1uw=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: Usn+KtLh2fQfBRzeOzAzXm3AdLqgWTBEojWaTaYRxFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: May 15 08:56:56 2024 GMT Not After : May 22 08:56:56 2024 GMT Subject: CN=664478d8-1108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:7d:6f:fc:de:fd:a1:47:40:81:30:eb:05: 70:f9:87:3e:81:3c:08:fa:f9:2f:c1:46:48:d6:27: 5a:09:b3:48:43:e9:a6:6e:f5:6d:61:a1:a8:bd:ac: 9f:ed:3f:d4:86:35:af:f3:de:81:0f:a1:59:ef:56: a5:65:0b:2b:fb:bc:0c:2f:ce:54:56:7b:a8:d4:dd: bf:bd:66:df:20:dd:0d:b2:8e:f8:81:04:27:fd:ba: de:89:76:86:67:59:d8:14:9d:1c:ed:75:d2:ff:ab: f7:d6:59:72:a6:d1:9a:3b:64:60:3b:9c:41:fd:50: 06:1d:e5:fd:4d:40:37:ef:d3:5c:a1:16:03:55:c8: ca:ca:9e:fc:6b:56:af:d3:29:5a:f2:de:48:82:f6: ce:ff:53:65:2a:e0:03:b2:7a:d7:67:6b:2e:d5:74: 28:f9:16:e9:19:66:37:2d:3b:50:ec:8b:60:8a:54: 19:8f:20:4b:02:dd:8c:a3:ae:2e:c2:a4:64:38:51: 5c:37:b1:bb:de:84:c8:4a:fa:91:6b:28:6f:ec:cb: 8a:3b:d3:2c:2d:2a:87:f6:94:c2:27:d1:59:d9:bb: 9f:1f:9f:13:9d:d2:aa:67:1d:30:d0:d1:1a:b4:52: 64:54:4b:ed:43:e5:fc:03:b4:ef:72:8b:f4:e8:82: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:EB:E5:F5:85:4E:D1:47:B1:0A:B5:F3:97:41:2C:9C:D4:29:E0 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:b8:49:78:1a:dc:f6:88:fc:c8:09:11:db:90:7b:cf:c4: cf:e3:1b:2c:b7:78:cc:48:f6:5e:50:28:98:12:39:40:9f:9a: e4:8a:8c:5f:82:3e:f0:32:98:64:69:c5:6f:ab:3b:c2:25:53: ba:e9:d9:6c:06:b0:b3:5f:4e:20:74:61:6b:94:62:48:72:8e: c7:8d:c1:00:a1:6a:b4:ba:cd:2a:c8:d0:80:89:c5:c9:1f:4a: 8a:73:41:fb:e5:bb:4a:6d:53:71:a0:6f:d4:65:14:ac:7b:48: 83:ca:ae:35:20:bc:c9:77:70:7e:b6:4e:65:37:3a:16:04:9c: 85:3b:18:57:0f:c8:81:dc:d2:da:83:51:81:93:28:d0:69:c6: 31:d5:1f:03:c8:22:d8:8a:2a:f9:99:1f:e4:01:61:53:af:61: db:0a:82:24:d3:78:0a:03:2f:9e:33:48:7f:51:6d:bf:05:a1: 21:17:98:8a:09:f0:a8:11:ea:76:83:a1:41:82:53:5f:75:72: b5:2d:3b:c0:ab:ec:3e:93:07:73:d4:e4:54:65:77:82:f4:df: be:b8:8a:1d:1c:ad:46:f1:1c:aa:56:ca:86:1b:dd:44:8b:a4: f8:44:96:38:cc:fd:5d:bf:0e:f7:0d:8c:a2:88:62:4d:65:a2: 8b:a4:77:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0ExRTExMC8GA1UEBRMoOEU2NTBBNzEyREM4NEYyMkI4OUI4RjE4Qjg2NEMyOUY5 REQ3MTNDNTAeFw0yNDA1MTUwODU2NTZaFw0yNDA1MjIwODU2NTZaMBgxFjAUBgNV BAMTDTY2NDQ3OGQ4LTExMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCld31v/N79oUdAgTDrBXD5hz6BPAj6+S/BRkjWJ1oJs0hD6aZu9W1hoai9rJ/t P9SGNa/z3oEPoVnvVqVlCyv7vAwvzlRWe6jU3b+9Zt8g3Q2yjviBBCf9ut6JdoZn WdgUnRztddL/q/fWWXKm0Zo7ZGA7nEH9UAYd5f1NQDfv01yhFgNVyMrKnvxrVq/T KVry3kiC9s7/U2Uq4AOyetdnay7VdCj5FukZZjctO1Dsi2CKVBmPIEsC3Yyjri7C pGQ4UVw3sbvehMhK+pFrKG/sy4o70ywtKof2lMIn0VnZu58fnxOd0qpnHTDQ0Rq0 UmRUS+1D5fwDtO9yi/Togk2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW1fr5fWF TtFHsQq185dBLJzUKeAwHwYDVR0jBBgwFoAUjmUKcS3ITyK4m48YuGTCn53XE8Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTFFL0YwMDYyRjI4RjYz NDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvam1VS2NTM0lUeUs0bTQ4WXVHVENuNTNYRThVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTFFL0YwMDYyRjI4RjYzNDExRUU4QUVBQzc0N0M0RjlBRTAyL2ptVUtjUzNJVHlL NG00OFl1R1RDbjUzWEU4VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHCkuEl4Gtz2iPzICRHbkHvPxM/jGyy3eMxI9l5QKJgSOUCfmuSKjF+C PvAymGRpxW+rO8IlU7rp2WwGsLNfTiB0YWuUYkhyjseNwQCharS6zSrI0ICJxckf SopzQfvlu0ptU3Ggb9RlFKx7SIPKrjUgvMl3cH62TmU3OhYEnIU7GFcPyIHc0tqD UYGTKNBpxjHVHwPIItiKKvmZH+QBYVOvYdsKgiTTeAoDL54zSH9Rbb8FoSEXmIoJ 8KgR6naDoUGCU191crUtO8Cr7D6TB3PU5FRld4L03764ih0crUbxHKpWyoYb3USL pPhEljjM/V2/DvcNjKKIYk1looukd+4= -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org