$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft File: jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json) Hash identifier: CNQ77dip3RZp0vzzqDnY7KZjuEcewfAeolofgsKNgq4= Subject key identifier: 89:AC:F0:F1:B3:73:97:45:EF:4C:60:47:EF:D9:94:EF:AE:D9:43:A7 Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5 Certificate issuer: /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft Manifest number: 06C2 Signing time: Fri 31 May 2024 23:52:48 +0000 Manifest this update: Fri 31 May 2024 23:52:47 +0000 Manifest next update: Fri 07 Jun 2024 23:52:47 +0000 Files and hashes: 1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: xHXlr9I90CVTjOMOFYCkihxjaYBH/uN/oDESrhcg3b8=) 2: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: 88OmkvSf8WXdmrHzHjVFBd+Ni+YekQV533NGHrFIPX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5 Validity Not Before: May 31 23:52:47 2024 GMT Not After : Jun 7 23:52:47 2024 GMT Subject: CN=665a62cf-6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:42:3f:ba:56:41:82:81:6a:e7:2b:63:5c: 17:d1:b6:1a:dd:54:42:8c:21:39:90:f5:5d:9d:b3: 4c:ab:73:f8:28:b4:47:be:ba:43:03:d5:c3:15:f2: 61:45:a4:24:80:51:f6:e8:64:bd:e5:be:66:d2:85: df:ba:b6:c2:b3:d2:b9:82:ba:2b:dd:71:52:82:f7: c6:bf:44:f4:76:1a:df:f8:8b:e4:ef:08:0d:5d:8f: a9:2f:6b:b5:a1:33:3e:8d:ce:c9:81:00:90:a2:55: 90:f2:1a:9a:80:5d:f4:21:bb:76:4e:26:26:b2:7e: 11:45:18:cb:36:72:a3:6b:1d:94:53:78:dd:9d:9e: 26:ee:e4:64:61:f7:2d:50:99:a3:7a:2b:1b:76:4d: 35:89:db:b1:f1:9f:6f:cc:bd:c4:d2:32:11:92:42: 55:c3:6b:a1:37:4a:e8:08:e0:21:6c:74:cd:46:8d: 9b:4d:c6:f4:be:b6:6b:b1:29:44:49:e2:8e:11:ec: 4f:6d:e6:42:73:9a:fc:44:42:17:cd:87:84:56:0e: 55:6b:35:77:e5:e2:96:39:be:fb:dd:e3:02:58:c5: 05:bf:ca:6a:b1:57:81:20:b8:f8:69:ea:e0:17:fa: a9:2f:2e:23:8e:2f:d9:3b:2d:a3:bf:f1:f5:dd:ab: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AC:F0:F1:B3:73:97:45:EF:4C:60:47:EF:D9:94:EF:AE:D9:43:A7 X509v3 Authority Key Identifier: keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:0e:fd:c6:3b:1e:0c:f2:a7:df:59:94:dd:f5:22:9e:30: df:4b:ec:81:cb:a1:e6:c7:68:4d:06:ba:cb:00:85:a5:49:eb: 68:f5:c7:65:ba:fb:d6:c0:11:f6:08:44:23:73:de:42:b7:d1: 04:ea:86:ef:97:4c:17:9b:a3:41:b0:6c:c5:22:2e:1f:cd:61: 23:c2:a6:4d:73:45:7c:90:9d:56:d6:34:ec:13:b5:7e:8c:c9: 25:21:ec:91:4e:59:8e:04:dc:14:f2:c1:4a:eb:fe:ab:c7:31: 95:de:cb:b6:75:55:66:54:fb:10:3d:21:33:c9:1a:ed:b3:21: 39:87:4c:0e:83:60:ec:35:0f:c6:5f:57:ec:bb:48:68:3c:a0: 45:1c:c7:4a:f0:69:40:bb:69:e5:57:d2:ee:fd:2e:cc:d6:f5: 43:6c:a6:ab:ce:95:0b:30:69:dd:e4:1d:46:8c:3d:e2:f0:4d: a6:6b:08:22:82:6e:f3:aa:07:5a:a9:02:21:61:5c:7e:1c:bc: de:0e:9b:d9:06:b4:0c:5d:0d:84:41:d2:08:43:d7:c6:db:61: 89:c2:00:86:17:f1:de:a1:08:71:b0:a3:35:57:40:56:e7:72: bd:d6:e9:1e:2e:75:32:65:73:71:22:89:4c:98:3b:ab:ed:5f: 25:92:87:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTIxMTAvBgNVBAUTKDhDOTk2OEEwOTQwMEYzMjJGNDk1OThFMjc1MTFGQ0Ux QjhGODhCRjUwHhcNMjQwNTMxMjM1MjQ3WhcNMjQwNjA3MjM1MjQ3WjAYMRYwFAYD VQQDEw02NjVhNjJjZi02MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwihCP7pWQYKBaucrY1wX0bYa3VRCjCE5kPVdnbNMq3P4KLRHvrpDA9XDFfJh RaQkgFH26GS95b5m0oXfurbCs9K5gror3XFSgvfGv0T0dhrf+Ivk7wgNXY+pL2u1 oTM+jc7JgQCQolWQ8hqagF30Ibt2TiYmsn4RRRjLNnKjax2UU3jdnZ4m7uRkYfct UJmjeisbdk01idux8Z9vzL3E0jIRkkJVw2uhN0roCOAhbHTNRo2bTcb0vrZrsSlE SeKOEexPbeZCc5r8REIXzYeEVg5VazV35eKWOb773eMCWMUFv8pqsVeBILj4aerg F/qpLy4jji/ZOy2jv/H13auoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIms8PGz c5dF70xgR+/ZlO+u2UOnMB8GA1UdIwQYMBaAFIyZaKCUAPMi9JWY4nUR/OG4+Iv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFMi85ODc5MjQyNjEy QTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5TDBsWmppZFJIODRiajRp X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKbG9vSlFBOHlMMGxaamlkUkg4NGJqNGlfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFMi85ODc5MjQyNjEyQTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5 TDBsWmppZFJIODRiajRpX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhg79xjseDPKn31mU3fUinjDfS+yBy6Hmx2hNBrrLAIWlSeto9cdl uvvWwBH2CEQjc95Ct9EE6obvl0wXm6NBsGzFIi4fzWEjwqZNc0V8kJ1W1jTsE7V+ jMklIeyRTlmOBNwU8sFK6/6rxzGV3su2dVVmVPsQPSEzyRrtsyE5h0wOg2DsNQ/G X1fsu0hoPKBFHMdK8GlAu2nlV9Lu/S7M1vVDbKarzpULMGnd5B1GjD3i8E2mawgi gm7zqgdaqQIhYVx+HLzeDpvZBrQMXQ2EQdIIQ9fG22GJwgCGF/HeoQhxsKM1V0BW 53K91ukeLnUyZXNxIolMmDur7V8lkodH -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:16 2024 by rpki-client on console-ams.rpki-client.org