$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: RubJfrnVSU/vm7VimFcCYz8DNIV0oX4NtMHx406l5Sk= Subject key identifier: 89:D8:4D:79:A2:B6:F5:A8:38:D8:E9:76:F9:F0:75:CD:6B:52:D9:64 Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 74 Signing time: Sat 01 Jun 2024 08:53:07 +0000 Manifest this update: Sat 01 Jun 2024 08:53:06 +0000 Manifest next update: Sat 08 Jun 2024 08:53:06 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: 0AoOVOVsqhAdwGvcSElcPxMQL9yr2cDHf5nnbhZS+dE=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: ZOlf5FmvOes5uKhdeM+O94cN1es+0UEkyVz4sRLGhzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: Jun 1 08:53:06 2024 GMT Not After : Jun 8 08:53:06 2024 GMT Subject: CN=665ae173-68f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:06:98:de:d0:0f:61:97:26:3f:6d:bb:e9:4e: e7:d1:63:97:3c:6f:56:c9:be:88:ff:9c:45:cc:6c: 5e:be:09:6a:21:69:d2:6d:fb:30:5b:35:6b:e6:ab: 4c:77:99:d7:7f:10:85:b8:49:18:36:7f:91:34:9d: 12:1e:37:e9:21:25:95:82:48:89:50:ea:78:c2:c7: 31:c5:df:ca:f7:26:3f:8d:a2:20:3e:f7:29:61:3c: 4e:95:c1:7f:ca:df:c7:fe:f5:e3:61:5f:b9:02:f6: f3:89:91:c7:ec:5f:5c:46:01:ad:7d:63:9c:51:e6: 2c:42:69:73:9e:33:ba:3b:fd:50:89:60:54:eb:53: 19:ab:95:b9:62:ea:be:75:4a:d7:36:05:0c:14:16: f9:45:70:26:5c:d3:ee:5f:a5:ac:8a:ea:e5:86:39: 5b:96:2c:7c:f0:9d:f9:44:9a:4d:87:b0:c0:93:a6: 7f:e5:77:32:02:a5:92:17:fa:63:8c:31:4f:90:02: cb:d3:e1:e4:a4:36:b3:bb:29:86:79:dc:d2:3e:1b: 37:9f:d7:ff:9e:4c:03:8f:7d:8c:bd:7f:ae:98:8c: 3a:9d:bc:95:bb:b5:6a:c6:81:ba:44:7f:fe:bb:58: 2c:6e:0b:9e:87:f7:40:57:33:b7:5b:87:6f:3a:6e: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:4D:79:A2:B6:F5:A8:38:D8:E9:76:F9:F0:75:CD:6B:52:D9:64 X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0f:ec:2e:9a:16:0e:0d:28:cd:8d:dd:f5:c1:36:a4:99:d0: ed:5d:29:66:24:3c:81:f8:ba:87:b9:1b:9a:c9:a9:aa:49:17: 77:c6:23:c0:5f:30:b5:31:83:58:fe:d7:47:c5:8f:3c:92:1d: 0c:4b:fc:71:3b:f2:a9:a6:5a:5a:cd:4b:b9:fd:d8:b2:a3:45: 53:95:b1:7a:8d:8f:1b:5c:25:f0:f5:4b:6d:5c:0a:e8:f2:3e: 3d:63:c6:85:2f:93:70:c2:0d:66:1f:d0:d2:4c:c1:73:76:be: 45:38:1d:4f:c0:79:da:32:20:9c:31:2f:33:18:fd:d6:d3:7f: a1:54:03:44:e8:e5:ba:43:f3:13:a2:6a:aa:1a:a1:30:de:82: e0:d2:99:75:e1:b6:86:2a:69:a7:2c:9c:0d:a4:82:38:f4:18: 2e:39:77:69:57:02:c1:11:f6:d3:f2:2f:67:d1:05:73:a5:99: ed:b3:d6:7d:52:74:43:b1:77:c0:f0:4e:b2:fc:14:de:57:58: 91:8b:14:d2:a6:b0:b4:c5:9d:0c:e6:3e:96:0a:1c:24:68:6d: 84:c7:cb:2d:f5:e7:ff:5e:57:2c:ca:8b:3d:cb:fe:c6:ea:58: 49:48:9a:41:5b:50:65:25:b0:66:87:b8:b0:55:13:e4:bc:87: f9:8e:0f:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkM0ODExMC8GA1UEBRMoMjYxNTk2QjU1NkU5MkMxMkQyRUJDOEREOEIyNUNGQjg3 NThFMDc4QzAeFw0yNDA2MDEwODUzMDZaFw0yNDA2MDgwODUzMDZaMBgxFjAUBgNV BAMTDTY2NWFlMTczLTY4ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSBpje0A9hlyY/bbvpTufRY5c8b1bJvoj/nEXMbF6+CWohadJt+zBbNWvmq0x3 mdd/EIW4SRg2f5E0nRIeN+khJZWCSIlQ6njCxzHF38r3Jj+NoiA+9ylhPE6VwX/K 38f+9eNhX7kC9vOJkcfsX1xGAa19Y5xR5ixCaXOeM7o7/VCJYFTrUxmrlbli6r51 Stc2BQwUFvlFcCZc0+5fpayK6uWGOVuWLHzwnflEmk2HsMCTpn/ldzICpZIX+mOM MU+QAsvT4eSkNrO7KYZ53NI+Gzef1/+eTAOPfYy9f66YjDqdvJW7tWrGgbpEf/67 WCxuC56H90BXM7dbh286bjWdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUidhNeaK2 9ag42Ol2+fB1zWtS2WQwHwYDVR0jBBgwFoAUJhWWtVbpLBLS68jdiyXPuHWOB4ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQzQ4L0RCQkQ4MUZFNzUz QTExRUVCRjQ5RTUzNEM0RjlBRTAyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmhXV3RWYnBMQkxTNjhqZGl5WFB1SFdPQjR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QzQ4L0RCQkQ4MUZFNzUzQTExRUVCRjQ5RTUzNEM0RjlBRTAyL0poV1d0VmJwTEJM UzY4amRpeVhQdUhXT0I0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcP7C6aFg4NKM2N3fXBNqSZ0O1dKWYkPIH4uoe5G5rJqapJF3fGI8Bf MLUxg1j+10fFjzySHQxL/HE78qmmWlrNS7n92LKjRVOVsXqNjxtcJfD1S21cCujy Pj1jxoUvk3DCDWYf0NJMwXN2vkU4HU/AedoyIJwxLzMY/dbTf6FUA0To5bpD8xOi aqoaoTDeguDSmXXhtoYqaacsnA2kgjj0GC45d2lXAsER9tPyL2fRBXOlme2z1n1S dEOxd8DwTrL8FN5XWJGLFNKmsLTFnQzmPpYKHCRobYTHyy315/9eVyzKiz3L/sbq WElImkFbUGUlsGaHuLBVE+S8h/mOD74= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:30 2024 by rpki-client on console-ams.rpki-client.org