$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft File: JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json) Hash identifier: aj9zIsIDJp7MA7Q9Uo8Zb8OxUJe+9fiRLM5+VNR5nJ4= Subject key identifier: AF:30:30:AA:D3:D0:8C:4B:38:24:61:3A:A0:2C:F5:16:77:ED:AE:B8 Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 Certificate issuer: /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft Manifest number: 88 Signing time: Fri 31 May 2024 07:59:35 +0000 Manifest this update: Fri 31 May 2024 07:59:34 +0000 Manifest next update: Fri 07 Jun 2024 07:59:34 +0000 Files and hashes: 1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: 8EHCJ8bvYkJ0LI/B7SZHjc0LyA34wJZp9QqOeX5qHo0=) 2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: F/DshtttloAsTSEwTHyyn5d7CKsxPZf91YvYHyrHYGc=) 3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: Y8aYATMgyv4+pPlr9qAtMhr2jnfx+UC3VtFrfI9Q/TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394 Validity Not Before: May 31 07:59:34 2024 GMT Not After : Jun 7 07:59:34 2024 GMT Subject: CN=66598366-e6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:74:e7:2e:36:26:1a:d8:48:75:53:d1:55: 6a:7f:43:2c:97:32:09:b8:16:3a:fe:0f:ef:b4:69: d7:46:75:f2:c1:dc:b2:8a:e8:d3:bf:5d:e3:bd:61: 40:4b:bc:38:a3:26:cd:6a:67:17:d4:5e:35:fa:59: 9e:f7:0e:6e:09:be:a3:22:36:04:a0:a2:f7:ac:4e: 31:82:6c:f2:c9:7f:17:f0:96:73:4e:4f:bd:dd:04: e1:33:90:70:0b:fa:db:a7:aa:f7:3c:61:88:e1:ca: 3b:43:79:0c:fc:dc:b8:41:aa:23:50:72:f2:a3:d2: 5c:34:62:97:56:43:aa:b4:12:78:cb:07:76:b2:61: ad:fb:4d:53:78:1e:e1:75:42:c6:d6:3b:bb:59:05: 17:b0:c4:46:59:82:fa:f2:74:d7:3a:41:d8:85:f2: 2f:f1:b5:72:8f:74:50:4e:d4:7c:43:b3:fd:c0:34: f3:9b:f8:6e:69:d5:c0:34:92:68:8d:05:3f:bb:54: 9e:75:c5:0f:d9:19:7c:d9:bf:5b:cd:4f:2e:ed:81: c9:74:db:11:3d:11:f2:a9:63:ea:02:04:b6:46:de: 30:89:60:84:54:43:30:d5:60:95:e0:79:d0:98:72: 43:6f:e3:4e:71:5d:7c:20:34:52:53:29:f7:fa:e0: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:30:30:AA:D3:D0:8C:4B:38:24:61:3A:A0:2C:F5:16:77:ED:AE:B8 X509v3 Authority Key Identifier: keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:e1:7f:d9:a7:6f:64:1f:5d:7e:44:a9:bc:15:02:67:47: 4b:62:95:fe:74:78:ea:5f:07:d6:0c:cd:99:d4:9b:14:4b:a0: c4:eb:e3:81:b2:f3:1f:cb:47:9c:fa:78:5b:0c:65:f8:ba:64: 74:cc:4e:d1:ef:f4:d5:58:b0:5c:12:c6:30:d4:68:40:cb:ad: 18:a5:da:56:ec:55:88:97:3a:b8:74:37:36:69:9f:92:07:8e: ed:db:2c:2e:6d:fa:c7:6b:e0:ad:8d:55:dc:5e:d8:da:68:aa: 29:47:1f:12:64:b7:7c:b1:31:f4:97:e6:8a:34:0f:58:d3:c7: 8d:ca:76:db:5a:bf:fc:5b:53:fa:8c:e1:d6:40:70:bb:27:51: e3:bd:ec:5b:e4:4c:35:62:9b:a2:a8:20:f6:95:bf:2b:5c:95: e2:f2:06:db:e9:44:be:0f:38:19:6b:14:4b:f5:f9:b0:bd:a4: 40:cd:3c:25:d6:fd:59:37:2b:f5:60:1e:d8:f8:ef:05:f7:ea: 79:cd:1d:b7:54:d5:de:d8:7c:a0:5d:39:6e:dc:8b:a3:4f:50: ff:a5:5c:55:a6:ee:23:f4:d0:70:71:01:c5:95:59:66:e5:e1: d5:c4:ff:97:94:55:2d:58:6b:70:bb:a4:c5:e7:c2:8d:7c:26: c1:41:00:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD MEExOEYzOTQwHhcNMjQwNTMxMDc1OTM0WhcNMjQwNjA3MDc1OTM0WjAYMRYwFAYD VQQDEw02NjU5ODM2Ni1lNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfJ05y42JhrYSHVT0VVqf0MslzIJuBY6/g/vtGnXRnXywdyyiujTv13jvWFA S7w4oybNamcX1F41+lme9w5uCb6jIjYEoKL3rE4xgmzyyX8X8JZzTk+93QThM5Bw C/rbp6r3PGGI4co7Q3kM/Ny4QaojUHLyo9JcNGKXVkOqtBJ4ywd2smGt+01TeB7h dULG1ju7WQUXsMRGWYL68nTXOkHYhfIv8bVyj3RQTtR8Q7P9wDTzm/huadXANJJo jQU/u1SedcUP2Rl82b9bzU8u7YHJdNsRPRHyqWPqAgS2Rt4wiWCEVEMw1WCV4HnQ mHJDb+NOcV18IDRSUyn3+uC5IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8wMKrT 0IxLOCRhOqAs9RZ37a64MB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrOF/2advZB9dfkSpvBUCZ0dLYpX+dHjqXwfWDM2Z1JsUS6DE6+OB svMfy0ec+nhbDGX4umR0zE7R7/TVWLBcEsYw1GhAy60YpdpW7FWIlzq4dDc2aZ+S B47t2ywubfrHa+CtjVXcXtjaaKopRx8SZLd8sTH0l+aKNA9Y08eNynbbWr/8W1P6 jOHWQHC7J1Hjvexb5Ew1YpuiqCD2lb8rXJXi8gbb6US+DzgZaxRL9fmwvaRAzTwl 1v1ZNyv1YB7Y+O8F9+p5zR23VNXe2HygXTlu3IujT1D/pVxVpu4j9NBwcQHFlVlm 5eHVxP+XlFUtWGtwu6TF58KNfCbBQQCC -----END CERTIFICATE-----Generated at Fri May 31 08:38:59 2024 by rpki-client on console-fra.rpki-client.org