$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: Z6pf9sVNoTtHGNfkiEVaSnLKmhXA+XJz7k4Fe+rWQ/w= Subject key identifier: 26:F3:42:F6:53:B4:71:0B:E4:DB:E0:1F:FF:E1:6C:0B:32:6C:33:7F Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0A43 Signing time: Sat 18 May 2024 20:29:57 +0000 Manifest this update: Sat 18 May 2024 20:29:56 +0000 Manifest next update: Sat 25 May 2024 20:29:56 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: JkArqdxSszkxFnh1o3sPwj5iZAtSfXeFtuTtIQ89uIk=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: 4wuttNTcs2A1WMxfkljPXuhlrhcB6lESJJyM3JIzH0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: May 18 20:29:56 2024 GMT Not After : May 25 20:29:56 2024 GMT Subject: CN=66490fc5-66ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:a4:c4:0c:05:ec:0e:40:cc:e9:6d:21:b4: 13:bc:01:be:c3:e7:48:7c:f7:e9:30:16:b9:28:b7: 25:2f:1a:97:45:c2:b6:d0:7b:10:77:f8:fd:d9:ca: 82:77:5e:01:84:97:a5:5f:c0:51:f1:f9:ef:f8:77: d7:c0:a1:7e:f3:0a:5c:46:db:5c:90:43:bb:74:ff: 3f:2a:97:c8:07:17:71:5e:03:a5:dc:f3:e9:28:3e: 71:19:1e:cb:d2:c2:9f:06:57:d8:e8:2e:3a:71:97: a0:ea:7c:60:63:28:a1:14:dc:c9:41:21:04:71:90: a6:2d:f4:28:8a:8c:c6:36:8d:2c:e8:49:e4:36:fb: 1e:ed:d3:b8:2b:b3:d4:f4:d4:13:99:58:7f:4f:19: 98:bb:a5:e6:4c:25:f9:a0:a5:63:71:d8:26:e0:9b: a8:5f:d0:cd:fa:e4:4c:5f:91:aa:54:2e:60:f8:0b: fd:f8:2b:89:7e:35:89:f4:43:ee:db:f9:12:09:3d: d5:ad:a2:32:97:08:92:d4:05:0a:af:28:f5:b3:d6: be:39:0d:53:e4:a5:aa:95:a1:65:72:96:99:98:50: f6:13:57:8c:ea:96:a8:13:80:d6:39:88:79:13:bc: 1b:18:98:ab:dd:5f:c6:ec:4a:1a:fd:08:fe:36:26: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:42:F6:53:B4:71:0B:E4:DB:E0:1F:FF:E1:6C:0B:32:6C:33:7F X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:45:ea:8e:d1:6f:05:5a:c4:31:32:d7:fc:f8:90:92:51:63: 9c:5b:01:03:3d:9e:21:e8:4b:68:87:8e:6f:17:84:e8:c2:e3: 23:80:78:38:19:c1:83:52:06:0f:cd:0f:8e:d6:2d:be:84:0c: f4:7e:d4:33:36:3e:10:e2:7d:f9:eb:8a:61:98:0d:01:c8:9f: 02:00:1d:bf:de:ef:ee:ff:14:6c:01:7c:10:1c:99:a3:43:26: 8f:82:1d:a2:d0:76:87:96:fe:08:16:64:5f:bc:88:3e:84:a7: be:db:5e:2b:95:84:dc:15:59:57:60:0f:94:24:5e:12:52:93: 2e:a7:b9:f1:3b:36:b2:ce:3e:93:ac:d3:0e:43:85:df:b2:34: 32:4a:14:a9:35:be:68:bb:6f:49:9a:06:74:06:5e:83:e7:d5: 7b:ee:d6:94:ca:03:11:57:17:f4:20:99:3a:49:98:5e:64:41: 57:f0:d3:89:06:b9:97:36:4d:ac:0c:df:8d:fb:75:5d:14:33: 52:67:1d:5b:88:fe:df:ba:49:a8:0a:6a:4c:7c:c8:04:d7:1e: 75:93:76:ec:37:94:19:a1:79:08:9e:32:29:d3:ff:79:a1:5a: 0e:a8:f9:eb:fd:95:22:d4:4c:a0:76:14:f2:51:98:f7:a0:ac: 96:77:ea:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjQwNTE4MjAyOTU2WhcNMjQwNTI1MjAyOTU2WjAYMRYwFAYD VQQDEw02NjQ5MGZjNS02NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu2kxAwF7A5AzOltIbQTvAG+w+dIfPfpMBa5KLclLxqXRcK20HsQd/j92cqC d14BhJelX8BR8fnv+HfXwKF+8wpcRttckEO7dP8/KpfIBxdxXgOl3PPpKD5xGR7L 0sKfBlfY6C46cZeg6nxgYyihFNzJQSEEcZCmLfQoiozGNo0s6EnkNvse7dO4K7PU 9NQTmVh/TxmYu6XmTCX5oKVjcdgm4JuoX9DN+uRMX5GqVC5g+Av9+CuJfjWJ9EPu 2/kSCT3VraIylwiS1AUKryj1s9a+OQ1T5KWqlaFlcpaZmFD2E1eM6paoE4DWOYh5 E7wbGJir3V/G7Eoa/Qj+NibhnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbzQvZT tHEL5NvgH//hbAsybDN/MB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ReqO0W8FWsQxMtf8+JCSUWOcWwEDPZ4h6Etoh45vF4TowuMjgHg4 GcGDUgYPzQ+O1i2+hAz0ftQzNj4Q4n3564phmA0ByJ8CAB2/3u/u/xRsAXwQHJmj QyaPgh2i0HaHlv4IFmRfvIg+hKe+214rlYTcFVlXYA+UJF4SUpMup7nxOzayzj6T rNMOQ4XfsjQyShSpNb5ou29JmgZ0Bl6D59V77taUygMRVxf0IJk6SZheZEFX8NOJ BrmXNk2sDN+N+3VdFDNSZx1biP7fukmoCmpMfMgE1x51k3bsN5QZoXkInjIp0/95 oVoOqPnr/ZUi1EygdhTyUZj3oKyWd+qd -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org