$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: nUpB/yRls8+MCoOmGai3draTG+Yam7dErFANgZUBJUg= Subject key identifier: 6A:61:F1:01:27:BA:49:D1:62:5E:EC:A7:E6:6E:CD:E3:6A:18:47:37 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0B6D Signing time: Fri 31 May 2024 20:14:18 +0000 Manifest this update: Fri 31 May 2024 20:14:18 +0000 Manifest next update: Fri 07 Jun 2024 20:14:18 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: 1J/lepm7ofFjuoatLn+1OUvDfmSMTZy48za2OZdWBaQ=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: May 31 20:14:18 2024 GMT Not After : Jun 7 20:14:18 2024 GMT Subject: CN=665a2f9a-06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:0d:34:7f:4a:0f:62:f9:f5:04:4b:2f:44: 42:48:80:26:8f:b4:ee:1d:28:c0:85:89:e0:c8:e2: dd:69:c4:44:d5:23:29:86:f0:e2:a2:f7:a2:4c:4b: 1e:8c:87:09:a6:79:65:63:d0:ae:02:fe:d6:98:70: b8:79:56:bb:3a:f0:64:cb:eb:8e:47:01:f9:ed:ea: 37:30:03:12:4d:16:ed:19:7e:a1:20:e1:a9:a8:b0: e9:d4:5c:4f:16:d9:37:5e:34:73:8f:70:ed:e3:36: 26:18:bf:b0:7c:77:40:d8:4a:f9:aa:53:13:45:58: b8:47:36:0c:6e:bb:0f:99:83:6e:6c:5e:f6:95:24: b9:66:74:65:ce:f1:4a:b4:cb:3c:9b:b5:0d:ff:47: 36:51:dc:c4:1b:4e:d4:65:36:91:b9:5c:2d:ed:d6: bc:04:fe:b8:6e:d5:3f:e1:13:02:be:fc:cf:24:6c: 63:8b:2a:1b:06:b4:a3:bf:30:1c:88:50:c8:a8:2b: 38:92:81:d4:48:47:67:bb:c1:a6:bc:e9:6e:3d:7e: 9e:e1:42:ef:74:b2:f7:3a:cc:be:71:45:73:f8:c4: 23:76:5b:ab:a9:6c:f5:6d:e0:b4:27:49:33:fc:2d: 66:40:d1:aa:8e:1c:c2:5c:31:33:d0:96:21:06:83: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:F1:01:27:BA:49:D1:62:5E:EC:A7:E6:6E:CD:E3:6A:18:47:37 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:3e:d5:1b:49:e3:88:ae:1b:15:69:6c:ff:30:a9:70:18: 6d:1f:b3:5b:b0:57:e6:5a:fa:d0:c6:64:f4:3a:09:c4:e8:45: 42:71:4e:cc:7d:ce:c4:b8:19:b9:ab:b0:18:a8:94:18:7c:af: 7c:39:17:aa:68:c2:14:28:e1:b2:d7:e8:e3:35:86:11:f5:e3: e5:54:35:bb:9a:d7:bd:ea:36:81:e1:de:8d:b9:e2:32:60:cd: a1:f3:64:a1:04:78:8b:51:fd:d9:7b:4e:53:c1:9b:9c:21:2d: 8b:44:c9:e9:c2:56:11:99:61:cb:28:2f:94:78:b8:95:16:57: b1:cf:1d:c5:21:b1:e7:db:4e:0f:ff:06:cc:5f:f6:10:6c:a2: 1e:f8:9b:38:c0:8e:11:0d:0f:e4:ef:90:e4:a8:fc:b5:31:98: 27:d0:89:62:6f:42:a7:23:f8:8e:98:58:6f:c9:04:fc:c5:50: 6a:cb:45:de:0e:ce:e9:d6:e2:9b:5c:17:d8:b4:b0:b6:6a:15: 13:6c:91:08:7f:fc:24:e0:79:d0:2f:ca:76:de:90:7a:42:81: ff:12:63:65:a5:74:4f:af:e8:84:a0:1c:51:dd:73:27:cd:b4: b9:e4:c2:98:b5:5b:94:64:12:9a:26:6c:b2:6a:85:d3:30:da: d6:e6:04:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjQwNTMxMjAxNDE4WhcNMjQwNjA3MjAxNDE4WjAYMRYwFAYD VQQDEw02NjVhMmY5YS0wNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCUNNH9KD2L59QRLL0RCSIAmj7TuHSjAhYngyOLdacRE1SMphvDioveiTEse jIcJpnllY9CuAv7WmHC4eVa7OvBky+uORwH57eo3MAMSTRbtGX6hIOGpqLDp1FxP Ftk3XjRzj3Dt4zYmGL+wfHdA2Er5qlMTRVi4RzYMbrsPmYNubF72lSS5ZnRlzvFK tMs8m7UN/0c2UdzEG07UZTaRuVwt7da8BP64btU/4RMCvvzPJGxjiyobBrSjvzAc iFDIqCs4koHUSEdnu8GmvOluPX6e4ULvdLL3Osy+cUVz+MQjdlurqWz1beC0J0kz /C1mQNGqjhzCXDEz0JYhBoOdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGph8QEn uknRYl7sp+ZuzeNqGEc3MB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhj7VG0njiK4bFWls/zCpcBhtH7NbsFfmWvrQxmT0OgnE6EVCcU7M fc7EuBm5q7AYqJQYfK98OReqaMIUKOGy1+jjNYYR9ePlVDW7mte96jaB4d6NueIy YM2h82ShBHiLUf3Ze05TwZucIS2LRMnpwlYRmWHLKC+UeLiVFlexzx3FIbHn204P /wbMX/YQbKIe+Js4wI4RDQ/k75DkqPy1MZgn0Ilib0KnI/iOmFhvyQT8xVBqy0Xe Ds7p1uKbXBfYtLC2ahUTbJEIf/wk4HnQL8p23pB6QoH/EmNlpXRPr+iEoBxR3XMn zbS55MKYtVuUZBKaJmyyaoXTMNrW5gRq -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:11 2024 by rpki-client on console-ams.rpki-client.org