$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: CAxSw3Pn9mG3Be9hoO1U1coCDNAYZ6ZW1YUlExK5WEQ= Subject key identifier: F3:3B:3A:D3:00:EA:12:6A:B5:F5:09:97:3D:00:1F:4A:A2:15:0E:D1 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 02CD Signing time: Fri 31 May 2024 04:04:54 +0000 Manifest this update: Fri 31 May 2024 04:04:54 +0000 Manifest next update: Fri 07 Jun 2024 04:04:54 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: ZmnZz/yq3QBgQzXD/+vSz4HVpz6k//k+/fiol6aJW/8=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: L06G5zhFCO9MeNvA+zmysMr9Z+WhY3SxKgFZgoOfL9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: May 31 04:04:54 2024 GMT Not After : Jun 7 04:04:54 2024 GMT Subject: CN=66594c66-9d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:d4:6f:e6:33:c5:e0:6e:80:3d:77:3b:e9: 2f:0d:41:44:72:26:0d:00:e6:7f:2a:be:7d:df:0c: d8:13:0d:21:7e:92:d7:7f:24:f3:70:d6:92:10:ec: a5:b1:0b:64:47:60:de:65:80:69:c2:5e:50:5b:b7: 0b:aa:36:77:e3:ee:d1:fb:91:57:4c:66:46:a9:59: d0:bb:61:ae:a2:5f:c6:7d:fc:d7:38:a2:48:d3:53: 38:11:de:67:d5:72:bc:31:c6:92:64:43:18:8f:30: d4:f4:a9:72:ba:40:05:e2:d0:68:73:e1:d9:91:89: 83:c4:bc:57:e1:5b:de:43:5c:08:6e:f5:dc:1e:b9: 6e:a8:ff:02:2d:40:c5:f8:26:ef:69:17:bc:52:66: 33:9c:c7:0e:a0:13:f1:76:3a:b0:44:61:0d:31:ef: 9b:01:75:ab:85:08:58:98:d4:68:c3:74:b3:4d:19: ab:e3:fe:d6:b9:ff:b2:8e:49:61:1a:a7:59:71:6a: d7:e9:79:28:03:5f:ac:08:8e:18:89:5a:fe:65:1d: fa:8e:be:ee:ef:82:92:1d:f3:82:3a:72:36:20:a4: 7a:92:05:c7:2b:78:90:cf:cf:b8:cb:e5:d5:cb:ea: a2:71:55:bb:6e:a0:e4:98:56:3e:72:7a:54:86:3c: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3B:3A:D3:00:EA:12:6A:B5:F5:09:97:3D:00:1F:4A:A2:15:0E:D1 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:f7:6a:42:c1:e1:f1:61:1f:cf:64:5a:b7:b7:61:ce:ae:da: 0d:0b:02:ab:56:b9:9d:6b:48:b5:d4:83:80:59:b3:33:60:cf: 6c:7e:98:f3:18:83:7a:cc:5e:f6:a2:4d:65:69:fb:b5:14:db: 9e:4a:e9:83:32:4d:10:5f:30:b0:6a:71:14:f0:97:b9:e0:55: 17:d5:10:1a:66:da:0e:61:4b:0a:50:23:7b:00:57:87:61:55: ee:21:7f:e1:ad:fa:11:d6:05:92:45:51:15:2e:a0:9e:09:c4: 7d:95:77:72:8b:fc:18:3c:5a:d6:eb:6d:6f:23:ee:a6:39:50: 16:37:4e:19:41:d9:69:6a:cb:6e:fb:31:44:91:3d:21:fb:c9: 5c:e8:51:1f:71:f5:f8:d2:4f:ad:e6:9d:8d:d2:07:06:1d:10: 28:29:a3:5d:94:0d:68:2e:06:f5:86:6d:2a:69:d1:f4:ad:51: dc:a2:78:c3:ea:97:10:e2:6b:65:9c:44:3d:e1:c8:4c:6a:50: f1:c1:57:dd:27:4f:a4:b0:ab:6f:fd:3b:ce:9a:43:0f:c9:f9: 05:33:b0:92:ec:4a:c4:a3:f5:86:6a:70:26:a6:79:f0:25:dd: b8:cc:8f:78:18:4a:c6:99:ad:e3:5a:f5:1a:21:26:ea:0e:5c: 4f:c4:22:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjQwNTMxMDQwNDU0WhcNMjQwNjA3MDQwNDU0WjAYMRYwFAYD VQQDEw02NjU5NGM2Ni05ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GzUb+YzxeBugD13O+kvDUFEciYNAOZ/Kr593wzYEw0hfpLXfyTzcNaSEOyl sQtkR2DeZYBpwl5QW7cLqjZ34+7R+5FXTGZGqVnQu2Guol/GffzXOKJI01M4Ed5n 1XK8McaSZEMYjzDU9KlyukAF4tBoc+HZkYmDxLxX4VveQ1wIbvXcHrluqP8CLUDF +CbvaRe8UmYznMcOoBPxdjqwRGENMe+bAXWrhQhYmNRow3SzTRmr4/7Wuf+yjklh GqdZcWrX6XkoA1+sCI4YiVr+ZR36jr7u74KSHfOCOnI2IKR6kgXHK3iQz8+4y+XV y+qicVW7bqDkmFY+cnpUhjwpQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM7OtMA 6hJqtfUJlz0AH0qiFQ7RMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP92pCweHxYR/PZFq3t2HOrtoNCwKrVrmda0i11IOAWbMzYM9sfpjz GIN6zF72ok1lafu1FNueSumDMk0QXzCwanEU8Je54FUX1RAaZtoOYUsKUCN7AFeH YVXuIX/hrfoR1gWSRVEVLqCeCcR9lXdyi/wYPFrW621vI+6mOVAWN04ZQdlpastu +zFEkT0h+8lc6FEfcfX40k+t5p2N0gcGHRAoKaNdlA1oLgb1hm0qadH0rVHconjD 6pcQ4mtlnEQ94chMalDxwVfdJ0+ksKtv/TvOmkMPyfkFM7CS7ErEo/WGanAmpnnw Jd24zI94GErGma3jWvUaISbqDlxPxCJ+ -----END CERTIFICATE-----Generated at Fri May 31 06:49:08 2024 by rpki-client on console-ams.rpki-client.org