$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: tDBbU7+tqeGfqkCTWTdV6Vz5qfDPICqxS9t2mPBwcTw= Subject key identifier: 6B:FB:5C:E6:E9:E2:2C:88:15:FA:1E:5E:0A:51:BA:DD:CB:FC:8B:EA Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0B91 Signing time: Sat 18 May 2024 19:24:27 +0000 Manifest this update: Sat 18 May 2024 19:24:27 +0000 Manifest next update: Sat 25 May 2024 19:24:27 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: wjLcEg2QD0p0pygnrjRd5Mqam0zA007IniRjnDOH9Rc=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: JQNpQ6gxCAzbnnH9Yf0p2LfKBc2ucCX716tqFsvKS60=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: cs9csxclLbT2VZkBXhivKDsv1cu/tEkHFvTr8v3XfJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: May 18 19:24:27 2024 GMT Not After : May 25 19:24:27 2024 GMT Subject: CN=6649006b-6d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:7f:9d:d7:6d:5e:ee:e4:db:60:1e:11:61: ad:46:0e:fc:e2:29:ff:49:b0:7f:a5:d2:5a:76:ab: 3f:71:89:ac:a3:be:e1:4f:a6:93:6e:b9:de:ad:13: 40:f9:36:db:93:a8:2a:1d:8c:82:e5:f7:95:d2:f0: 77:58:0d:e0:d2:be:ca:43:f7:12:b9:82:9a:55:21: 39:b0:13:05:69:85:6d:3d:04:3e:3c:a6:13:30:61: a5:52:8a:83:94:6f:6c:48:f1:fc:d1:76:18:d6:bb: 5c:d2:86:d2:d6:54:d2:d0:b2:ae:6f:86:d5:f5:fd: 0b:ff:8e:4e:dd:15:30:da:dc:ab:d2:ec:d7:5a:d7: ac:42:fc:d0:38:4e:53:d0:b0:ad:5a:c8:9f:b4:ed: 45:87:16:38:51:3f:b8:39:aa:81:7f:d0:74:4f:77: d8:8d:c2:66:16:6f:b4:fa:25:53:9d:8f:f9:11:eb: 19:ac:23:c2:0e:23:91:87:40:c8:e0:85:57:9e:8b: b1:8c:9c:4c:43:6a:31:95:48:fb:25:b5:cc:30:cb: f3:c5:87:11:55:f1:fc:25:f8:b4:2e:84:55:d6:ed: c5:29:7d:36:4d:12:8a:6a:08:bc:cd:a4:a3:e8:ff: 7d:0f:c9:e0:68:66:58:a9:3c:8e:6a:cd:b2:9f:6a: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:5C:E6:E9:E2:2C:88:15:FA:1E:5E:0A:51:BA:DD:CB:FC:8B:EA X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:82:c7:04:fd:a7:c2:e8:89:d1:7f:41:36:fc:ed:3d:25:bd: 68:b1:b6:70:d1:ec:7c:c3:a6:f4:49:e9:bf:32:45:6a:08:24: c7:9c:5a:86:52:c8:9a:50:ef:bd:ed:36:db:94:6b:8f:ea:c1: f8:1d:5c:48:a4:95:c9:86:5d:2b:05:c6:cc:2b:b6:50:5e:6a: 7c:1d:9d:c4:a8:61:6d:4d:89:59:c3:20:e1:02:d8:68:6e:c5: 17:5b:6b:56:2f:41:2a:03:df:2a:ca:fc:97:52:9c:a4:69:d6: 47:6e:13:2c:69:9d:e3:30:7f:ae:a5:71:44:1a:75:80:a5:3c: f3:d7:9a:92:f3:3b:40:e2:08:73:bf:e7:72:8e:4b:7c:14:7b: 82:ea:8f:ed:9a:7b:04:5c:ed:af:43:f8:bf:8d:7e:5a:b9:74: e0:44:e8:15:c1:72:e9:f2:1d:76:8d:64:2c:94:73:a1:81:b7: bb:44:04:84:05:26:20:65:ad:3a:08:23:e7:f3:06:63:ae:94: 33:28:b0:7e:e3:99:be:9e:62:50:80:92:f7:be:4b:ab:18:e4: 2d:0d:fa:a2:78:1e:a8:e9:5b:b0:a7:2a:e3:df:a1:9d:fa:10: 2b:cb:ee:78:72:bd:11:05:57:71:77:36:1c:1f:f2:af:e1:a5: 50:ea:8b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjQwNTE4MTkyNDI3WhcNMjQwNTI1MTkyNDI3WjAYMRYwFAYD VQQDEw02NjQ5MDA2Yi02ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4F/nddtXu7k22AeEWGtRg784in/SbB/pdJadqs/cYmso77hT6aTbrnerRNA +Tbbk6gqHYyC5feV0vB3WA3g0r7KQ/cSuYKaVSE5sBMFaYVtPQQ+PKYTMGGlUoqD lG9sSPH80XYY1rtc0obS1lTS0LKub4bV9f0L/45O3RUw2tyr0uzXWtesQvzQOE5T 0LCtWsiftO1FhxY4UT+4OaqBf9B0T3fYjcJmFm+0+iVTnY/5EesZrCPCDiORh0DI 4IVXnouxjJxMQ2oxlUj7JbXMMMvzxYcRVfH8Jfi0LoRV1u3FKX02TRKKagi8zaSj 6P99D8ngaGZYqTyOas2yn2oDawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv7XObp 4iyIFfoeXgpRut3L/IvqMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcgscE/afC6InRf0E2/O09Jb1osbZw0ex8w6b0Sem/MkVqCCTHnFqG UsiaUO+97TbblGuP6sH4HVxIpJXJhl0rBcbMK7ZQXmp8HZ3EqGFtTYlZwyDhAtho bsUXW2tWL0EqA98qyvyXUpykadZHbhMsaZ3jMH+upXFEGnWApTzz15qS8ztA4ghz v+dyjkt8FHuC6o/tmnsEXO2vQ/i/jX5auXTgROgVwXLp8h12jWQslHOhgbe7RASE BSYgZa06CCPn8wZjrpQzKLB+45m+nmJQgJL3vkurGOQtDfqieB6o6Vuwpyrj36Gd +hAry+54cr0RBVdxdzYcH/Kv4aVQ6ova -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org