$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: 2iiiq4xy6IfHQ1N9lowZUZJ7ipBqqsvZiN4JRs5H+P4= Subject key identifier: 2F:7F:E2:81:99:93:57:82:D0:81:B6:0A:08:52:52:07:A9:1C:DC:ED Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 33D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 33CF Signing time: Sat 18 May 2024 14:23:53 +0000 Manifest this update: Sat 18 May 2024 14:23:53 +0000 Manifest next update: Sat 25 May 2024 14:23:53 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: vPIJyJOuDRlydd08kQeDIlD8FklJLker/svlY92tpYg=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: Wqc/SiNa8ZHU/O93vts9GhN1tQDb/+XfcqbCY3PBSMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13269 (0x33d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: May 18 14:23:53 2024 GMT Not After : May 25 14:23:53 2024 GMT Subject: CN=6648b9f9-4d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:07:73:dd:10:e5:6a:7a:7c:98:85:d8:0b: 18:7b:67:ed:c4:99:27:22:56:a6:05:3c:39:af:1d: b7:69:84:bf:75:5d:97:29:c5:62:56:ca:52:22:e6: b3:82:c6:7d:9b:9c:93:dd:52:63:58:2c:a7:05:d7: 74:0f:3f:33:b3:67:76:88:42:83:20:ec:a9:69:fb: cd:bb:22:f8:22:50:6e:0d:f2:fa:3b:c4:05:0d:84: 88:56:1f:df:61:80:69:0f:f1:51:e0:c1:1a:8a:f1: a3:87:03:d3:19:49:c7:97:b3:a1:74:ba:90:44:cc: de:31:fc:10:e1:a7:48:6d:92:06:47:fa:a1:c4:31: 71:68:ce:13:15:2f:26:40:e8:b4:3c:83:ee:e3:50: c6:2f:05:8f:8e:3e:e7:2f:7c:26:f3:aa:73:f0:e0: 50:cd:a1:bd:38:cf:23:30:30:1d:c3:ef:27:9c:d1: b7:a3:91:ee:1b:08:3f:78:cd:e0:73:f7:60:d6:e5: e7:a5:cd:77:2b:2b:87:ed:5b:95:52:a9:fe:2c:50: 28:7d:a5:f2:7e:36:f4:69:f1:a5:dc:55:9d:07:35: 96:09:a8:d9:22:61:d6:c1:d8:28:f3:b0:31:d9:2d: a7:a4:f7:b1:91:25:5a:ee:9b:6c:be:42:61:22:6b: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7F:E2:81:99:93:57:82:D0:81:B6:0A:08:52:52:07:A9:1C:DC:ED X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4b:b1:ef:49:23:71:84:9a:aa:fe:07:04:72:3f:fa:da:67: f1:29:bb:34:81:98:a1:b9:73:58:27:a9:5f:13:c0:06:9b:a1: 61:3f:d5:97:fb:42:67:02:53:1e:8f:2b:b0:41:c1:b3:70:3d: 09:a5:47:91:27:b2:88:94:55:fb:ea:56:77:50:38:db:4c:3b: 14:01:27:8f:1b:fe:ed:25:45:ec:15:ed:60:09:e6:c2:a2:ce: 2e:1b:d6:ca:ab:de:cf:fe:8d:5a:bf:df:f5:94:24:4d:5b:4c: a7:f3:c6:95:4c:fe:01:f6:52:8e:ad:9b:79:46:94:d3:2a:21: eb:f3:e0:10:3d:82:a5:18:4c:be:21:21:1f:4c:cc:e3:fb:e2: 15:27:f6:90:09:f1:9d:65:67:53:df:b4:b7:d9:2a:d9:91:c5: b8:0a:be:84:97:d7:d2:90:1d:f8:46:7e:46:6f:17:17:39:d7: 94:86:99:62:56:c0:aa:a3:61:87:eb:6c:7e:a3:51:80:7c:56: cb:d9:1e:b7:70:d8:52:74:d6:02:eb:a1:64:1c:52:0c:10:d1: e6:03:2d:56:77:3b:a3:56:13:bf:75:8d:ca:d1:b3:51:ad:15: c5:2e:dd:12:12:01:23:a2:1b:d8:b1:65:20:45:ac:32:0c:45: f4:64:0e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjQwNTE4MTQyMzUzWhcNMjQwNTI1MTQyMzUzWjAYMRYwFAYD VQQDEw02NjQ4YjlmOS00ZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvoHc90Q5Wp6fJiF2AsYe2ftxJknIlamBTw5rx23aYS/dV2XKcViVspSIuaz gsZ9m5yT3VJjWCynBdd0Dz8zs2d2iEKDIOypafvNuyL4IlBuDfL6O8QFDYSIVh/f YYBpD/FR4MEaivGjhwPTGUnHl7OhdLqQRMzeMfwQ4adIbZIGR/qhxDFxaM4TFS8m QOi0PIPu41DGLwWPjj7nL3wm86pz8OBQzaG9OM8jMDAdw+8nnNG3o5HuGwg/eM3g c/dg1uXnpc13KyuH7VuVUqn+LFAofaXyfjb0afGl3FWdBzWWCajZImHWwdgo87Ax 2S2npPexkSVa7ptsvkJhImvDLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9/4oGZ k1eC0IG2CghSUgepHNztMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnS7HvSSNxhJqq/gcEcj/62mfxKbs0gZihuXNYJ6lfE8AGm6FhP9WX +0JnAlMejyuwQcGzcD0JpUeRJ7KIlFX76lZ3UDjbTDsUASePG/7tJUXsFe1gCebC os4uG9bKq97P/o1av9/1lCRNW0yn88aVTP4B9lKOrZt5RpTTKiHr8+AQPYKlGEy+ ISEfTMzj++IVJ/aQCfGdZWdT37S32SrZkcW4Cr6El9fSkB34Rn5GbxcXOdeUhpli VsCqo2GH62x+o1GAfFbL2R63cNhSdNYC66FkHFIMENHmAy1WdzujVhO/dY3K0bNR rRXFLt0SEgEjohvYsWUgRawyDEX0ZA5T -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org