$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: +eniy7ZtFJkvYQOt7wCxsG4wbrQ10DL/74VnJ+YHcU4= Subject key identifier: 6E:B9:50:57:B9:78:A2:59:2C:FD:A5:8C:3D:A3:81:5E:8B:D6:C6:5F Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1B0D Signing time: Fri 31 May 2024 16:51:23 +0000 Manifest this update: Fri 31 May 2024 16:51:22 +0000 Manifest next update: Fri 07 Jun 2024 16:51:22 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: oir6r+Yh16+BtgijRs82lMYR9/MLALRfXn8XA055kIA=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: di+Rm4OQP/ZGrPFK8dfRh21RT9iKabOLa+2mOyoNZOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6934 (0x1b16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: May 31 16:51:22 2024 GMT Not After : Jun 7 16:51:22 2024 GMT Subject: CN=665a000a-3ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:fc:34:1b:cb:c7:d2:2b:8f:25:c6:c9:58: ed:9a:85:53:e1:13:5f:f8:66:89:c3:dc:22:37:e4: 82:da:6a:f0:73:97:b0:ff:5f:03:66:33:22:69:7d: 8f:bf:fc:69:4d:9f:0b:73:71:75:58:ec:f7:8e:22: a0:b9:f4:76:62:e2:c7:87:50:03:07:9b:c6:92:72: bb:28:ff:d9:1c:80:27:1a:cd:82:8e:38:53:b5:80: 70:54:39:84:de:0a:ed:d6:27:27:bd:a0:a5:4d:e5: e3:f7:f1:59:59:4b:1f:bd:8b:d1:c7:e0:f7:19:73: cf:ff:4c:b2:e0:24:47:f2:1c:01:7a:15:97:40:cd: f9:9e:44:4c:ac:f1:f4:ae:6d:55:05:c5:7f:9e:0a: 75:42:c4:ed:82:f1:c1:e8:ec:75:ea:c6:c5:6a:47: 73:48:24:28:3e:b2:38:1e:78:b0:cd:99:89:cd:0f: d3:7b:32:78:ca:82:f4:f3:c0:c0:53:ff:81:cc:d0: 2e:86:ad:ad:3d:b3:20:aa:3a:37:a6:d7:bf:c2:ff: 62:dd:1f:48:45:18:87:82:16:05:b2:0c:43:e1:8d: 42:2c:ce:e3:3a:25:44:79:b5:96:e3:46:73:34:1e: 7f:c4:98:ed:a4:94:73:be:a1:6e:48:11:61:cd:66: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B9:50:57:B9:78:A2:59:2C:FD:A5:8C:3D:A3:81:5E:8B:D6:C6:5F X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:81:c7:21:ea:76:7e:bd:8a:7e:19:ca:13:b2:d1:b2:ea:bf: f7:46:e8:75:ea:57:d2:24:4f:34:95:c1:e5:e1:b5:20:92:9f: 57:bb:d6:7f:57:7e:8a:a0:e5:3d:54:41:45:4b:da:18:c7:d6: 70:39:a0:54:de:90:6f:b5:71:36:ea:54:92:11:d6:38:fd:de: 92:ba:a8:d7:5b:0b:13:cf:b1:64:28:1d:ce:2b:79:ec:e4:cd: 3e:7e:1a:c3:0e:ee:2d:97:03:62:db:84:0d:0b:59:cb:75:c1: 6f:6d:16:c5:f7:3c:bc:16:e2:02:6f:aa:db:65:37:25:aa:99: 31:25:88:dc:b1:98:87:7e:45:93:73:54:03:f7:fc:d2:25:32: 77:53:fe:6a:6b:44:99:5f:a7:3f:05:a3:5c:21:47:a2:76:1f: f7:37:cb:57:f7:df:2a:6a:b6:34:9b:cc:3a:30:d3:bb:7d:f1: af:5f:74:46:bc:86:11:d2:75:f6:26:67:11:d0:bf:4a:2a:fd: d2:4a:a5:96:62:3d:31:e6:34:a0:aa:ba:f7:f4:91:5d:92:03: 7c:85:92:86:40:e5:0b:e9:7e:8d:99:f7:e8:26:90:4e:e8:3a: 17:c4:cb:fe:31:bd:33:b4:55:9b:1d:c1:17:cd:b2:10:94:0b: 0c:aa:04:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjQwNTMxMTY1MTIyWhcNMjQwNjA3MTY1MTIyWjAYMRYwFAYD VQQDEw02NjVhMDAwYS0zYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcz8NBvLx9IrjyXGyVjtmoVT4RNf+GaJw9wiN+SC2mrwc5ew/18DZjMiaX2P v/xpTZ8Lc3F1WOz3jiKgufR2YuLHh1ADB5vGknK7KP/ZHIAnGs2CjjhTtYBwVDmE 3grt1icnvaClTeXj9/FZWUsfvYvRx+D3GXPP/0yy4CRH8hwBehWXQM35nkRMrPH0 rm1VBcV/ngp1QsTtgvHB6Ox16sbFakdzSCQoPrI4HniwzZmJzQ/TezJ4yoL088DA U/+BzNAuhq2tPbMgqjo3pte/wv9i3R9IRRiHghYFsgxD4Y1CLM7jOiVEebWW40Zz NB5/xJjtpJRzvqFuSBFhzWYGmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG65UFe5 eKJZLP2ljD2jgV6L1sZfMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWgcch6nZ+vYp+GcoTstGy6r/3Ruh16lfSJE80lcHl4bUgkp9Xu9Z/ V36KoOU9VEFFS9oYx9ZwOaBU3pBvtXE26lSSEdY4/d6SuqjXWwsTz7FkKB3OK3ns 5M0+fhrDDu4tlwNi24QNC1nLdcFvbRbF9zy8FuICb6rbZTclqpkxJYjcsZiHfkWT c1QD9/zSJTJ3U/5qa0SZX6c/BaNcIUeidh/3N8tX998qarY0m8w6MNO7ffGvX3RG vIYR0nX2JmcR0L9KKv3SSqWWYj0x5jSgqrr39JFdkgN8hZKGQOUL6X6NmffoJpBO 6DoXxMv+Mb0ztFWbHcEXzbIQlAsMqgRW -----END CERTIFICATE-----Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org