$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: MobvGxLra3xLC45kjZHRKCxWAw/1s46T81j9W7PD92Q= Subject key identifier: 00:EC:0F:8B:5F:5F:8B:0F:39:24:44:3C:D7:DA:0D:AE:F1:63:D6:E8 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: CD Signing time: Wed 29 May 2024 06:52:22 +0000 Manifest this update: Wed 29 May 2024 06:52:22 +0000 Manifest next update: Wed 05 Jun 2024 06:52:22 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: 3cyPyBI2vTNeLdj3iBO6VAK7RtTiGUH3v1/6UkQ4CoA=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: n3ouhPei4NotgM38MNTkKFy/IQI2+nN1IBqN3B6eYFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: May 29 06:52:22 2024 GMT Not After : Jun 5 06:52:22 2024 GMT Subject: CN=6656d0a6-23db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:63:04:a0:3a:c9:21:9d:4f:8e:17:6a:6e: f6:95:b2:2e:e5:16:f6:c2:0e:41:c8:bb:f4:af:c0: fc:21:cb:c3:95:88:66:56:bc:8a:9d:ed:bd:e5:43: 0f:89:ec:78:96:00:ec:6d:54:26:ab:06:cb:b0:f3: 15:6e:ee:ce:82:b0:f1:f3:8c:d6:94:54:4f:67:d4: b8:51:5a:fb:13:b8:45:51:09:7e:ba:ba:52:7b:d5: 52:94:6b:0d:73:f3:e0:21:16:65:ea:8a:cc:d0:f5: 5b:bb:d6:50:1c:41:61:eb:13:7b:6a:a3:fb:cd:ae: 6c:7d:bf:a3:b2:37:06:8d:53:6c:df:71:11:be:e5: 70:e5:8d:bb:67:be:90:ea:65:90:5d:b7:f2:cf:00: d0:f5:9d:2f:70:fc:68:cf:11:95:42:42:f9:3b:4d: 7f:89:e4:f7:bc:51:3a:e5:35:9f:f0:84:54:f7:51: 83:97:4e:ea:05:60:f5:7e:7f:16:ed:b4:b9:00:4c: 1b:fa:2f:dc:91:3d:03:2d:39:38:c9:92:82:7c:2e: 5b:f7:ff:02:90:4d:62:12:48:74:70:6d:f6:5e:67: d7:bc:67:8e:f2:56:22:72:fd:04:4a:bb:26:fe:41: 6e:43:ea:19:44:01:9c:86:f7:07:85:da:b3:e5:7b: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EC:0F:8B:5F:5F:8B:0F:39:24:44:3C:D7:DA:0D:AE:F1:63:D6:E8 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:81:c8:6f:c2:3e:8b:b5:4e:17:ad:f4:6a:15:8b:88:ee:79: 07:f3:57:bd:c9:61:ad:05:01:c8:ea:a8:c6:e4:bd:81:28:71: f5:2e:80:08:4b:a3:56:f0:55:f1:c2:83:cb:e4:19:31:e0:b7: a4:87:15:2a:cb:43:87:80:3d:9c:15:ec:ad:69:f5:65:f6:05: 2e:98:c7:34:b1:7c:56:4b:59:cb:21:01:8e:cb:26:e6:cc:fc: be:40:52:a0:46:68:cb:21:6e:ef:f1:fd:5c:f4:7b:b7:ea:83: 53:a2:d3:67:81:d5:b0:21:61:8a:2b:93:ff:01:ca:82:e9:4d: e1:cc:a6:53:05:9d:e2:45:27:a0:2d:d6:3a:da:2a:87:f3:ed: 95:02:da:5b:d7:05:de:21:49:8d:a8:1f:af:0b:97:0a:fc:7d: e9:d7:5f:b5:42:a0:91:ec:c0:c0:44:5c:24:1d:c2:da:bb:19: 85:b5:17:c8:bb:77:3c:a4:bb:e0:93:8d:46:de:2f:b7:a8:27: 9f:4d:5f:5b:77:25:10:11:da:f9:b6:e2:4c:5b:99:ae:ee:5d: 22:3e:21:3b:86:df:a9:84:65:42:8d:43:cc:8c:95:25:f2:29: e7:85:91:7c:80:1b:0c:af:8a:1d:1f:11:31:82:e1:cf:9a:5c: b4:a1:f6:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjQwNTI5MDY1MjIyWhcNMjQwNjA1MDY1MjIyWjAYMRYwFAYD VQQDEw02NjU2ZDBhNi0yM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEpjBKA6ySGdT44Xam72lbIu5Rb2wg5ByLv0r8D8IcvDlYhmVryKne295UMP iex4lgDsbVQmqwbLsPMVbu7OgrDx84zWlFRPZ9S4UVr7E7hFUQl+urpSe9VSlGsN c/PgIRZl6orM0PVbu9ZQHEFh6xN7aqP7za5sfb+jsjcGjVNs33ERvuVw5Y27Z76Q 6mWQXbfyzwDQ9Z0vcPxozxGVQkL5O01/ieT3vFE65TWf8IRU91GDl07qBWD1fn8W 7bS5AEwb+i/ckT0DLTk4yZKCfC5b9/8CkE1iEkh0cG32XmfXvGeO8lYicv0ESrsm /kFuQ+oZRAGchvcHhdqz5XsMJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADsD4tf X4sPOSREPNfaDa7xY9boMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPgchvwj6LtU4XrfRqFYuI7nkH81e9yWGtBQHI6qjG5L2BKHH1LoAI S6NW8FXxwoPL5Bkx4LekhxUqy0OHgD2cFeytafVl9gUumMc0sXxWS1nLIQGOyybm zPy+QFKgRmjLIW7v8f1c9Hu36oNTotNngdWwIWGKK5P/AcqC6U3hzKZTBZ3iRSeg LdY62iqH8+2VAtpb1wXeIUmNqB+vC5cK/H3p11+1QqCR7MDARFwkHcLauxmFtRfI u3c8pLvgk41G3i+3qCefTV9bdyUQEdr5tuJMW5mu7l0iPiE7ht+phGVCjUPMjJUl 8innhZF8gBsMr4odHxExguHPmly0ofYT -----END CERTIFICATE-----Generated at Wed May 29 07:26:49 2024 by rpki-client on console-ams.rpki-client.org