$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: EQW9dvqdGZVLumSjc2sOITnNvOd9u5L7vycfl97RNFo= Subject key identifier: 79:AA:C1:FB:5B:22:D3:E3:F3:CC:40:25:B0:F7:92:6A:66:CA:91:71 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 33EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 33DA Signing time: Fri 31 May 2024 14:42:14 +0000 Manifest this update: Fri 31 May 2024 14:42:14 +0000 Manifest next update: Fri 07 Jun 2024 14:42:14 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: 3y+RHztCH5f983JSx30MnX24noYcGsMbJgjd2Ckt57c=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: BhE/Jm0W953o6GqpVqGr68PRcM13aAwM+4wkckGBTTk=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: agsLtp5kqnZauUNHWHhsf5K29FDtzFJsgxVV1mP2HEI=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: lP5NMv3I1CJOsA7UOND+xbg0rBaa2Avz8htJs1Lu9+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13292 (0x33ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: May 31 14:42:14 2024 GMT Not After : Jun 7 14:42:14 2024 GMT Subject: CN=6659e1c6-c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:16:a7:77:a6:6a:b9:34:c6:3d:f2:cd:4b: e8:bd:19:2a:d5:ba:4c:a1:14:c0:30:ae:4c:63:e1: f3:c4:c2:c6:24:1d:65:b8:61:d2:04:cb:69:67:85: 00:a5:76:15:e9:9a:21:05:d8:87:0a:d6:82:b0:a1: 6b:46:4c:95:f4:c0:99:65:ef:42:de:56:cd:93:de: f4:76:ca:40:a4:c9:3c:c6:9d:a7:23:72:69:b3:23: ce:5c:e2:16:8d:f1:4e:b6:91:f7:f1:ac:f8:bf:97: 23:cd:49:18:9c:b2:b4:11:ec:a6:24:7a:14:04:78: d9:e9:69:e1:eb:7e:bb:bb:4c:24:4a:45:7d:5f:53: 81:e7:3a:1c:36:f1:c0:c3:06:08:ad:ab:d5:9c:52: 9a:18:1f:4a:da:e2:3f:2e:e0:da:3f:da:19:6f:0b: 4e:97:55:f0:61:31:33:15:53:1b:09:16:c9:0d:d1: e9:64:41:2a:2a:69:84:1c:5a:38:b6:77:74:60:25: 7d:57:78:13:9d:d8:e7:4e:93:04:22:5c:34:93:59: 84:e2:fe:9d:6d:bf:21:be:c3:14:31:35:6a:e5:8c: f7:84:8d:a9:0d:fb:34:73:2f:35:89:82:e3:ac:d7: 57:3a:19:77:37:18:b6:1b:76:ee:dd:26:6a:ee:c3: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AA:C1:FB:5B:22:D3:E3:F3:CC:40:25:B0:F7:92:6A:66:CA:91:71 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:d8:00:60:41:06:0d:ef:3a:e5:f2:ab:ff:a6:3f:4d:62: 57:2c:5c:a0:d4:91:6c:79:ba:4a:e5:9b:36:9d:92:ff:fa:87: 52:87:b7:bf:90:45:7e:29:c2:0a:c9:e1:34:3b:ef:ab:ff:91: 3f:a7:17:71:7f:e3:f7:b9:c9:7a:ec:1c:19:08:ab:44:e8:c0: 21:70:5b:7b:f0:3e:a6:a7:70:17:c9:cb:01:0e:da:c2:2b:42: 20:27:b1:5b:a1:5d:45:48:dc:ec:41:f3:84:df:45:36:81:2b: 67:41:d5:09:41:3b:a2:03:7b:9a:8a:89:2b:f2:68:93:bc:14: 4c:4e:ed:4e:e0:d1:de:55:3c:dd:d0:ee:b8:e0:c9:ee:f8:c3: 0d:29:41:5f:1d:65:97:70:69:df:a8:94:2b:14:a7:02:6c:93: 3e:f1:cf:bf:0e:1b:e0:d2:34:3a:53:d7:e1:c3:f6:41:fc:1b: c7:bc:cf:4b:ae:67:eb:f6:9d:04:a1:bb:ba:e8:1e:39:5f:c4: 2b:a5:69:24:94:9a:c1:0c:ce:c8:0b:b7:62:aa:25:cc:e3:b8: 22:22:1b:5e:d9:76:ae:f9:35:bf:8c:a3:c3:bc:cf:b3:04:ca: a9:bb:ea:45:91:25:f7:0d:39:c8:5d:01:e8:48:fd:e0:05:d9: 22:8e:e7:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjQwNTMxMTQ0MjE0WhcNMjQwNjA3MTQ0MjE0WjAYMRYwFAYD VQQDEw02NjU5ZTFjNi1jNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjYWp3emark0xj3yzUvovRkq1bpMoRTAMK5MY+HzxMLGJB1luGHSBMtpZ4UA pXYV6ZohBdiHCtaCsKFrRkyV9MCZZe9C3lbNk970dspApMk8xp2nI3JpsyPOXOIW jfFOtpH38az4v5cjzUkYnLK0EeymJHoUBHjZ6Wnh6367u0wkSkV9X1OB5zocNvHA wwYIravVnFKaGB9K2uI/LuDaP9oZbwtOl1XwYTEzFVMbCRbJDdHpZEEqKmmEHFo4 tnd0YCV9V3gTndjnTpMEIlw0k1mE4v6dbb8hvsMUMTVq5Yz3hI2pDfs0cy81iYLj rNdXOhl3Nxi2G3bu3SZq7sPilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmqwftb ItPj88xAJbD3kmpmypFxMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmHtgAYEEGDe865fKr/6Y/TWJXLFyg1JFsebpK5Zs2nZL/+odSh7e/ kEV+KcIKyeE0O++r/5E/pxdxf+P3ucl67BwZCKtE6MAhcFt78D6mp3AXycsBDtrC K0IgJ7FboV1FSNzsQfOE30U2gStnQdUJQTuiA3uaiokr8miTvBRMTu1O4NHeVTzd 0O644Mnu+MMNKUFfHWWXcGnfqJQrFKcCbJM+8c+/Dhvg0jQ6U9fhw/ZB/BvHvM9L rmfr9p0Eobu66B45X8QrpWkklJrBDM7IC7diqiXM47giIhte2Xau+TW/jKPDvM+z BMqpu+pFkSX3DTnIXQHoSP3gBdkijuev -----END CERTIFICATE-----Generated at Fri May 31 17:44:50 2024 by rpki-client on console-fra.rpki-client.org