$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: Ui4ME3ISaZR+XAPE9c892AEzcLaOI4C6T1WLIyFKJ64= Subject key identifier: 1B:4A:18:53:62:FA:9B:3D:55:C2:7B:9C:6D:E6:55:02:F1:C4:DC:58 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 05E6 Signing time: Fri 26 Apr 2024 23:59:18 +0000 Manifest this update: Fri 26 Apr 2024 23:59:17 +0000 Manifest next update: Fri 03 May 2024 23:59:17 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: YwEX+HVG6cHGezenI4B/6vRKwHd+Yg95AKOfOMIjKgc=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: t7mfrUSDQrKIp8JEdIvGwr5fOfRSKBqvcJKp6zu78N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: Apr 26 23:59:17 2024 GMT Not After : May 3 23:59:17 2024 GMT Subject: CN=662c3fd6-8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:f4:6b:28:ae:bf:4f:a5:5c:a2:6b:54:ee: 4b:4c:46:c1:64:f0:ef:ca:d3:18:76:ed:1f:9b:0d: 80:9c:e2:66:83:83:38:b1:8a:5c:86:6c:56:c0:2c: a6:09:8b:45:f1:62:26:6b:f1:53:dd:69:0f:f9:2e: dc:ec:37:e4:f0:6d:0a:9d:2c:3b:2c:a9:ab:66:d6: 8a:bc:81:93:ec:a9:1e:cf:65:cc:15:35:c5:c6:63: a6:d2:f8:7c:3e:9f:43:3f:50:bf:75:91:41:8a:07: 7e:fa:f8:1f:47:ac:41:cc:69:14:81:e4:a3:b8:53: 51:a6:f0:90:6b:ae:59:79:7c:11:b8:96:e9:9a:4a: 15:88:60:9d:4c:53:25:9d:ab:31:b5:64:02:79:6d: 8a:9a:b6:fb:40:cd:1c:5c:32:d6:4b:b3:8e:60:20: 8d:e9:66:1b:ba:42:c9:33:50:9b:64:45:87:de:92: 3d:8b:55:eb:c4:b9:ba:39:dd:a2:bf:85:6a:c6:53: 55:f9:10:28:2e:b0:14:ea:41:ac:ba:13:f4:1c:da: 8b:4f:a7:a9:36:34:02:8b:07:03:10:2f:ab:3b:46: 8f:18:91:f0:d9:00:4f:36:0f:6a:37:83:cf:a5:a4: 24:84:d2:69:60:2c:36:15:d9:50:d4:1b:60:b3:6a: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:18:53:62:FA:9B:3D:55:C2:7B:9C:6D:E6:55:02:F1:C4:DC:58 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7f:2f:a4:af:3c:76:4b:05:de:3d:bb:bf:f3:e1:28:0c:f9: 06:f9:85:74:3f:c4:03:e5:9a:21:90:60:a7:59:b1:b6:ff:7e: 4c:05:a5:b2:da:31:d7:f1:80:00:16:f4:0c:b9:3c:63:1b:a1: e4:a9:41:34:78:1b:f9:97:4e:e4:a6:88:19:06:df:27:22:55: 74:34:1e:c0:ed:d1:8c:82:9a:fb:6e:c9:4f:1e:fb:f0:a3:53: 42:5d:a2:17:68:ea:a5:89:da:47:32:04:76:b4:ab:a2:2d:87: e7:4e:80:c2:fb:5c:76:12:4d:e7:f1:a7:b1:98:cb:33:2b:d0: 25:7c:29:54:38:ab:f0:9e:c7:66:80:57:92:26:3a:63:ec:c5: 53:39:82:e8:1d:63:89:28:a3:31:df:f0:e1:06:e4:36:c3:f3: 48:c3:c1:9b:d8:3c:d9:fc:f0:9a:2a:47:60:65:60:1e:93:4b: e4:af:15:6b:6a:c4:25:c7:55:ab:a7:96:a0:c7:80:fd:35:dd: cf:ae:dc:6e:7d:ca:eb:35:81:68:92:03:39:01:c6:03:97:94: 85:64:3a:fc:70:20:db:4b:d0:45:ef:48:96:06:25:be:6b:47: 21:7b:5f:b6:b4:75:4e:c3:95:95:4a:f0:0d:89:7b:bb:08:3e: 22:f4:c0:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjQwNDI2MjM1OTE3WhcNMjQwNTAzMjM1OTE3WjAYMRYwFAYD VQQDEw02NjJjM2ZkNi04ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hb0ayiuv0+lXKJrVO5LTEbBZPDvytMYdu0fmw2AnOJmg4M4sYpchmxWwCym CYtF8WIma/FT3WkP+S7c7Dfk8G0KnSw7LKmrZtaKvIGT7Kkez2XMFTXFxmOm0vh8 Pp9DP1C/dZFBigd++vgfR6xBzGkUgeSjuFNRpvCQa65ZeXwRuJbpmkoViGCdTFMl nasxtWQCeW2Kmrb7QM0cXDLWS7OOYCCN6WYbukLJM1CbZEWH3pI9i1XrxLm6Od2i v4VqxlNV+RAoLrAU6kGsuhP0HNqLT6epNjQCiwcDEC+rO0aPGJHw2QBPNg9qN4PP paQkhNJpYCw2FdlQ1Btgs2rcfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtKGFNi +ps9VcJ7nG3mVQLxxNxYMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQfy+krzx2SwXePbu/8+EoDPkG+YV0P8QD5ZohkGCnWbG2/35MBaWy 2jHX8YAAFvQMuTxjG6HkqUE0eBv5l07kpogZBt8nIlV0NB7A7dGMgpr7bslPHvvw o1NCXaIXaOqlidpHMgR2tKuiLYfnToDC+1x2Ek3n8aexmMszK9AlfClUOKvwnsdm gFeSJjpj7MVTOYLoHWOJKKMx3/DhBuQ2w/NIw8Gb2DzZ/PCaKkdgZWAek0vkrxVr asQlx1Wrp5agx4D9Nd3PrtxufcrrNYFokgM5AcYDl5SFZDr8cCDbS9BF70iWBiW+ a0che1+2tHVOw5WVSvANiXu7CD4i9MB6 -----END CERTIFICATE-----Generated at Sat Apr 27 10:21:01 2024 by rpki-client on console-ams.rpki-client.org