$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: Ty9IBy3hvrS39/ic9mw0Bfe16FtRy/7L44fQTDx4XkI= Subject key identifier: C3:27:98:CC:4B:4D:C7:89:4E:43:AA:A6:0D:83:C0:D2:02:3A:68:87 Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 02D4 Signing time: Sun 19 May 2024 03:23:18 +0000 Manifest this update: Sun 19 May 2024 03:23:17 +0000 Manifest next update: Sun 26 May 2024 03:23:17 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: 6x1l0gyKUe9BF+cfC3cY90BT5nroD4EpcLB5fSQ1+J0=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: vpqcQmNYsSU8xv6Tdls1gDEsQZEBAwcUcBCWCw5IZLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: May 19 03:23:17 2024 GMT Not After : May 26 03:23:17 2024 GMT Subject: CN=664970a6-628d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:e8:29:26:a0:e4:79:98:68:5b:fb:a1:98: 14:af:13:5a:86:bf:a4:c6:80:f9:80:d7:6b:58:34: 77:1d:53:1b:be:31:95:99:72:d1:46:56:11:15:6d: 19:e2:82:e3:47:a4:4a:01:8d:4a:25:14:b4:dc:92: 4d:0f:09:67:36:58:fa:6e:5f:bd:fa:63:2c:81:38: c7:76:f7:f5:ff:10:85:ee:00:0a:48:8a:42:67:ec: e9:d9:8b:6c:73:31:dc:a6:4b:ba:24:b1:bf:da:8a: 26:bf:b9:1b:9e:3d:df:3f:79:57:fd:e4:94:c9:83: 86:de:4d:8e:ea:1d:06:54:49:fc:22:f2:0b:d0:37: 02:a6:69:b7:97:b1:ae:e2:70:28:60:c4:2c:e0:4d: 21:a8:2b:49:2d:11:57:c9:f4:20:bf:0b:8f:1b:d3: 1a:a8:dd:ca:c3:cd:3a:a9:1c:0d:39:4c:5b:13:8d: 42:e7:12:92:6d:77:b6:5b:9d:ef:7a:08:33:d3:5c: 25:90:18:9b:19:1c:07:80:eb:21:9c:6a:3b:03:60: 9c:7c:ef:52:0e:a8:15:50:b7:18:0d:3e:ad:a8:75: 35:b9:af:a1:a7:86:88:ae:c6:b5:9d:a9:8f:86:71: 1b:8d:aa:8d:db:0a:03:67:5b:98:f1:25:50:cf:8b: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:98:CC:4B:4D:C7:89:4E:43:AA:A6:0D:83:C0:D2:02:3A:68:87 X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b2:ba:01:b9:ef:f3:17:b4:db:81:f7:fb:5f:cf:5b:ba:10: 59:79:b5:5e:e6:ad:b7:90:8b:f2:39:a4:90:2f:44:c5:72:6a: 5f:c0:02:eb:d7:a2:08:f8:f4:54:e4:3b:f8:d5:91:fa:b2:3f: 9e:9b:89:a4:53:cf:90:10:5b:74:77:ce:e1:1e:0a:7e:63:d2: 9d:61:62:df:94:42:13:fe:f3:e6:71:18:7c:32:57:a8:0c:08: 0f:c8:db:e5:83:d2:95:ad:c4:28:47:b9:2f:a5:8d:7f:2f:c9: 65:2a:a6:d8:3d:6e:2d:16:43:3a:22:c0:fb:1d:e7:40:5a:51: 19:be:76:6c:4f:35:87:e0:e4:b7:7e:79:70:96:18:ca:4a:3e: 2d:ac:15:45:a2:d4:9e:56:b6:bc:71:63:3e:f2:97:0a:1f:46: 6f:46:bf:45:71:84:30:d9:6a:af:44:1f:a2:d9:46:ec:aa:87: cf:15:37:27:e5:93:e7:59:c1:4d:b9:2f:f3:8b:b9:b9:7d:b0: 6b:67:a4:b3:4c:e9:50:7a:b0:52:49:f9:39:74:76:d4:08:ca: 94:30:4b:94:80:05:f0:c8:b3:62:bb:e4:27:95:f3:db:92:f3: 5e:eb:6a:08:23:2c:9b:bb:eb:d5:37:1b:e9:28:72:74:e8:e7: 2d:9f:2d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjQwNTE5MDMyMzE3WhcNMjQwNTI2MDMyMzE3WjAYMRYwFAYD VQQDEw02NjQ5NzBhNi02MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z/oKSag5HmYaFv7oZgUrxNahr+kxoD5gNdrWDR3HVMbvjGVmXLRRlYRFW0Z 4oLjR6RKAY1KJRS03JJNDwlnNlj6bl+9+mMsgTjHdvf1/xCF7gAKSIpCZ+zp2Yts czHcpku6JLG/2oomv7kbnj3fP3lX/eSUyYOG3k2O6h0GVEn8IvIL0DcCpmm3l7Gu 4nAoYMQs4E0hqCtJLRFXyfQgvwuPG9MaqN3Kw806qRwNOUxbE41C5xKSbXe2W53v eggz01wlkBibGRwHgOshnGo7A2CcfO9SDqgVULcYDT6tqHU1ua+hp4aIrsa1namP hnEbjaqN2woDZ1uY8SVQz4vfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMnmMxL TceJTkOqpg2DwNICOmiHMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqsroBue/zF7Tbgff7X89buhBZebVe5q23kIvyOaSQL0TFcmpfwALr 16II+PRU5Dv41ZH6sj+em4mkU8+QEFt0d87hHgp+Y9KdYWLflEIT/vPmcRh8Mleo DAgPyNvlg9KVrcQoR7kvpY1/L8llKqbYPW4tFkM6IsD7HedAWlEZvnZsTzWH4OS3 fnlwlhjKSj4trBVFotSeVra8cWM+8pcKH0ZvRr9FcYQw2WqvRB+i2UbsqofPFTcn 5ZPnWcFNuS/zi7m5fbBrZ6SzTOlQerBSSfk5dHbUCMqUMEuUgAXwyLNiu+QnlfPb kvNe62oIIyybu+vVNxvpKHJ06Octny3D -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org