$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: qFZan75tDtefRl9EFoZEr53wzLIfrvIp4ITKBLofWyE= Subject key identifier: 6C:FA:C9:35:EB:AD:82:1C:9B:BA:AA:43:F8:15:DF:D4:63:A1:FF:2E Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0989 Signing time: Sat 18 May 2024 20:55:49 +0000 Manifest this update: Sat 18 May 2024 20:55:48 +0000 Manifest next update: Sat 25 May 2024 20:55:48 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: b93eyTA/84/hbkiW+hwnzoSsX0X3vOQIVzDjtiEoSBQ=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: 00c1bphYKtqZbl/TfGxBoosN44LZMdQGJktDgNbF5qc=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: 9FCfdKvNLcSKyTSViBJbRJWp46FWAAUntOF0TSiO39Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: May 18 20:55:48 2024 GMT Not After : May 25 20:55:48 2024 GMT Subject: CN=664915d5-3feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:0f:77:6e:cd:fd:3a:8a:8b:1e:75:66:51: 7a:3b:f7:05:1a:ae:a1:6f:ec:06:08:b8:85:f4:f4: f7:2f:4a:7d:3f:61:fe:ad:87:b6:f8:ab:97:9a:43: be:d6:b2:27:d8:cf:e8:dd:07:66:b9:fe:7d:ff:c9: 0f:75:3c:e6:e8:0a:b7:30:a8:f1:0a:80:4c:52:4a: 17:70:2a:14:14:93:56:ee:7e:c2:4f:35:e0:7e:d4: ac:89:83:b9:0c:a6:a1:ee:af:56:07:f0:14:3b:c7: 77:16:9f:84:0b:7b:8f:1e:8c:52:6d:ca:62:55:01: 2f:6e:13:51:8a:df:3d:49:74:5e:52:c9:d3:75:7c: 7f:6b:81:28:c6:1f:b4:2c:c1:25:57:5c:19:f5:f2: d1:68:3e:c7:14:0c:10:d3:4f:0a:a3:bf:d0:3b:b8: 73:dc:2e:3f:89:14:8a:4f:d8:94:4d:46:1d:12:42: 17:3f:67:83:dd:71:34:3b:3f:cb:8e:42:5f:f6:a4: af:b4:6d:ef:52:c4:a5:80:b3:0e:18:96:0c:63:f3: ef:09:60:78:5e:ce:91:55:cc:c0:bf:a4:41:49:1f: 44:e5:d0:25:a9:51:97:d4:9e:ac:94:30:6b:ab:5f: 27:8c:0c:7c:bd:0c:fe:ff:fb:0e:88:ed:92:bd:da: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:C9:35:EB:AD:82:1C:9B:BA:AA:43:F8:15:DF:D4:63:A1:FF:2E X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5b:09:f1:3c:98:85:6f:ff:db:63:42:e9:56:06:7f:ff:61: 77:e3:e9:13:d8:60:23:40:2c:96:b2:c4:7d:5f:31:4a:4d:1d: 21:92:2e:2c:f6:2f:40:9e:c2:3c:41:06:8a:6f:b0:f4:c5:d5: f9:27:b1:1a:69:3f:d9:01:57:90:41:2a:b9:7f:e9:eb:02:a7: e3:07:25:15:42:fa:22:f4:3b:14:d4:ad:d0:b2:98:97:2c:a9: f7:9d:33:40:dc:97:eb:a4:c5:97:53:2a:2b:2c:0a:7a:d7:cc: 1f:49:8d:89:91:c8:3e:81:27:2f:09:6b:be:e0:57:29:c3:f5: 9b:9d:84:a9:3c:52:2e:de:72:e8:e4:de:58:f8:a2:3a:d7:54: 2e:ac:37:f1:f4:4a:73:7b:68:c6:e2:d4:3f:e1:52:85:27:8d: d8:71:da:27:37:4c:24:43:4e:7f:55:d3:1f:0a:41:fa:ee:6d: e3:c0:83:a6:28:16:33:0b:2d:15:5f:88:dc:2d:96:a9:12:15: 5d:d0:d8:80:6c:81:ee:29:fe:90:fa:b8:a5:d7:3a:39:5b:b0: f6:1c:cb:b6:c5:da:a5:b5:7e:75:0d:7a:f1:8a:a7:51:3c:86: 64:61:28:dd:88:c2:86:e7:a7:fc:6e:8a:cc:93:99:65:36:78: 45:b7:47:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjQwNTE4MjA1NTQ4WhcNMjQwNTI1MjA1NTQ4WjAYMRYwFAYD VQQDEw02NjQ5MTVkNS0zZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vkPd27N/TqKix51ZlF6O/cFGq6hb+wGCLiF9PT3L0p9P2H+rYe2+KuXmkO+ 1rIn2M/o3Qdmuf59/8kPdTzm6Aq3MKjxCoBMUkoXcCoUFJNW7n7CTzXgftSsiYO5 DKah7q9WB/AUO8d3Fp+EC3uPHoxSbcpiVQEvbhNRit89SXReUsnTdXx/a4Eoxh+0 LMElV1wZ9fLRaD7HFAwQ008Ko7/QO7hz3C4/iRSKT9iUTUYdEkIXP2eD3XE0Oz/L jkJf9qSvtG3vUsSlgLMOGJYMY/PvCWB4Xs6RVczAv6RBSR9E5dAlqVGX1J6slDBr q18njAx8vQz+//sOiO2SvdoINQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGz6yTXr rYIcm7qqQ/gV39Rjof8uMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXWwnxPJiFb//bY0LpVgZ//2F34+kT2GAjQCyWssR9XzFKTR0hki4s 9i9AnsI8QQaKb7D0xdX5J7EaaT/ZAVeQQSq5f+nrAqfjByUVQvoi9DsU1K3QspiX LKn3nTNA3JfrpMWXUyorLAp618wfSY2Jkcg+gScvCWu+4Fcpw/WbnYSpPFIu3nLo 5N5Y+KI611QurDfx9Epze2jG4tQ/4VKFJ43YcdonN0wkQ05/VdMfCkH67m3jwIOm KBYzCy0VX4jcLZapEhVd0NiAbIHuKf6Q+ril1zo5W7D2HMu2xdqltX51DXrxiqdR PIZkYSjdiMKG56f8borMk5llNnhFt0dd -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org