$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: 6pFvg4rDczzf5wk0ywFQxeHNSI9PNgWYWoqrGb4vKw4= Subject key identifier: 84:B5:20:17:0D:F2:15:72:E0:E6:12:19:2C:82:FF:5E:39:8B:6F:44 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0957 Signing time: Sat 18 May 2024 21:04:54 +0000 Manifest this update: Sat 18 May 2024 21:04:53 +0000 Manifest next update: Sat 25 May 2024 21:04:53 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: lvBuNm8tQ7yurMPXCJof/3RSXltkEY9j5Hb7tCBmRBA=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: BGa9+GYs4hK5GmJ5aUSd8kTVkDmVguAXYWAgPRO+w54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: May 18 21:04:53 2024 GMT Not After : May 25 21:04:53 2024 GMT Subject: CN=664917f6-3b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:68:a4:74:b1:ed:44:fe:52:8c:26:f5:5e: 54:df:2a:05:9a:07:ce:dd:4c:ff:d5:a3:85:d8:b4: f5:ec:a3:45:60:57:46:92:1d:49:d4:ce:39:c4:51: ed:44:5f:d9:f9:67:81:95:38:34:e3:08:aa:3d:7e: 42:c6:a9:1e:59:e3:52:68:07:c5:70:f7:59:89:fd: 5b:0c:42:a0:19:b5:58:bb:d9:2d:05:5e:a7:c9:5e: 55:7a:c6:6b:e3:5e:04:c4:f1:0b:55:ac:d0:f1:0c: cf:12:e5:4f:f0:da:e9:27:6a:73:a8:38:e5:67:65: aa:76:27:98:ff:cc:1c:89:b9:b9:5d:6d:4f:68:1a: 19:b5:1a:b2:65:34:0d:3e:27:29:55:d7:e9:b8:24: 45:84:c3:ba:a2:2e:5d:c5:2b:67:c8:3b:67:99:d6: 70:6a:92:19:0c:45:22:94:cb:7c:b6:d9:71:02:5d: 86:ed:b3:e6:68:36:76:cb:45:da:a5:1a:da:25:51: d4:40:d8:a7:5a:dc:4c:7f:a5:6b:b9:54:34:05:d5: 3e:3b:6d:ae:51:f4:14:04:d1:07:19:f3:55:8b:f9: 59:21:55:23:1c:e2:40:10:b1:bf:dc:d9:7a:62:a5: ef:89:2f:90:ac:3c:7e:d1:aa:b3:8b:f5:80:6f:cb: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B5:20:17:0D:F2:15:72:E0:E6:12:19:2C:82:FF:5E:39:8B:6F:44 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5e:69:68:29:8b:d9:05:87:bb:20:cf:7f:fc:4b:69:e8:9c: 76:4d:d8:f3:46:ef:dd:8e:57:56:1e:af:36:ad:c6:d9:53:3a: 1a:f4:62:b7:2c:00:4d:38:92:b8:02:32:06:80:e5:8b:83:6f: 48:f0:7f:2e:55:04:d9:34:93:ed:e4:7b:bf:a3:92:f4:1b:c7: 5f:60:97:ed:04:39:86:1c:10:a6:30:75:0d:40:54:74:d7:23: 81:48:da:e6:1c:8c:64:8a:51:e9:54:ea:aa:dd:37:29:6a:86: 28:b6:08:df:4f:21:ef:5f:04:10:68:62:da:c7:66:14:7f:fa: fb:6c:ad:bd:5c:e8:63:b2:2a:e1:61:d6:93:5c:56:aa:8f:9b: bb:cc:6c:e4:3b:c8:20:f5:20:58:fd:55:f0:65:b3:b9:3f:4c: ad:c8:bb:82:20:88:dd:95:0e:38:5e:06:4b:c5:81:a3:fc:09: 49:8a:4d:ef:c1:ef:40:48:f7:11:f0:9b:21:8a:82:5f:07:8b: ac:0a:49:04:7c:e3:74:43:fe:02:da:45:a3:6e:6a:5a:78:9e: 09:b8:3d:38:92:10:e4:59:02:40:90:38:37:aa:d0:b9:f2:dc: 55:ea:2f:d5:38:d6:b9:35:42:9d:61:59:b3:3b:f7:18:bc:f5: 50:68:37:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjQwNTE4MjEwNDUzWhcNMjQwNTI1MjEwNDUzWjAYMRYwFAYD VQQDEw02NjQ5MTdmNi0zYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c5opHSx7UT+Uowm9V5U3yoFmgfO3Uz/1aOF2LT17KNFYFdGkh1J1M45xFHt RF/Z+WeBlTg04wiqPX5CxqkeWeNSaAfFcPdZif1bDEKgGbVYu9ktBV6nyV5VesZr 414ExPELVazQ8QzPEuVP8NrpJ2pzqDjlZ2WqdieY/8wcibm5XW1PaBoZtRqyZTQN PicpVdfpuCRFhMO6oi5dxStnyDtnmdZwapIZDEUilMt8ttlxAl2G7bPmaDZ2y0Xa pRraJVHUQNinWtxMf6VruVQ0BdU+O22uUfQUBNEHGfNVi/lZIVUjHOJAELG/3Nl6 YqXviS+QrDx+0aqzi/WAb8s0JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS1IBcN 8hVy4OYSGSyC/145i29EMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvXmloKYvZBYe7IM9//Etp6Jx2TdjzRu/djldWHq82rcbZUzoa9GK3 LABNOJK4AjIGgOWLg29I8H8uVQTZNJPt5Hu/o5L0G8dfYJftBDmGHBCmMHUNQFR0 1yOBSNrmHIxkilHpVOqq3TcpaoYotgjfTyHvXwQQaGLax2YUf/r7bK29XOhjsirh YdaTXFaqj5u7zGzkO8gg9SBY/VXwZbO5P0ytyLuCIIjdlQ44XgZLxYGj/AlJik3v we9ASPcR8JshioJfB4usCkkEfON0Q/4C2kWjbmpaeJ4JuD04khDkWQJAkDg3qtC5 8txV6i/VONa5NUKdYVmzO/cYvPVQaDfS -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org