$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft File: JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json) Hash identifier: u4i2+0JAewADJT4dg6Y6XeEVK9kyuKlCXONtgnkuUYc= Subject key identifier: 45:A1:90:C7:7C:C0:A3:95:77:B8:A2:B4:8B:D8:CE:65:1B:1A:EF:BB Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft Manifest number: 066E Signing time: Sat 01 Jun 2024 00:21:38 +0000 Manifest this update: Sat 01 Jun 2024 00:21:37 +0000 Manifest next update: Sat 08 Jun 2024 00:21:37 +0000 Files and hashes: 1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: CAoSTPuzpkb2lvwWWNgjuFuo2PCxLKtZt4pVXzIrNnk=) 2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: +ohKtoCBfIbgFHsK5YXm9GEY/uc//r9I6KtkOSJPqeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Validity Not Before: Jun 1 00:21:37 2024 GMT Not After : Jun 8 00:21:37 2024 GMT Subject: CN=665a6991-ba21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:6c:38:47:cd:00:8c:b7:95:c7:c9:df:98: 06:65:00:a5:5e:ea:7e:f1:9f:37:0e:f0:2d:83:fd: e9:89:a0:2c:d1:e0:96:3d:e7:81:d0:cd:07:75:25: 3b:e9:0c:5f:94:39:6b:f1:92:05:bb:d6:2a:54:4f: bb:3b:ff:cc:35:9a:06:c3:0d:17:f0:49:54:c4:33: 01:43:e2:74:25:57:05:44:c3:a2:d3:d9:74:1e:5b: ba:f9:f8:8f:56:09:cb:04:7b:6e:15:c2:31:d4:14: e8:8a:48:5d:3d:13:7f:d2:2c:10:51:c9:c7:17:80: a9:e2:24:95:9b:40:bd:23:73:a2:fc:8b:78:e3:40: dd:47:76:6d:85:22:dd:9f:94:16:19:eb:9b:ae:84: a0:cb:b5:8e:20:17:fc:c6:7b:df:1c:b0:d4:40:ed: 80:44:a9:9b:87:a8:39:28:04:86:8d:82:ed:04:69: 25:4f:36:08:cf:78:5e:c2:63:54:55:b1:bc:b5:be: 0f:5e:ef:c2:dc:9c:1d:17:09:5b:41:d5:ba:ca:33: 85:b5:f3:0a:5c:64:a5:5b:3f:ed:91:0e:9d:37:95: 97:0f:15:c3:04:32:3f:82:46:50:42:6e:ad:7c:8f: dc:5d:e6:eb:4b:ef:2a:26:f2:fc:31:1c:22:63:29: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:90:C7:7C:C0:A3:95:77:B8:A2:B4:8B:D8:CE:65:1B:1A:EF:BB X509v3 Authority Key Identifier: keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:09:ec:c8:db:e1:4a:e0:86:21:19:ea:e3:de:28:6f:b0:36: ba:0f:17:03:1f:07:7e:af:1a:70:ba:7c:d4:ef:fa:2c:21:cd: 9a:d9:e2:5c:fb:fd:e5:fc:53:92:93:f1:83:9f:f9:d8:da:8d: 6b:66:8e:7f:23:a7:41:c1:a9:75:8a:75:ed:4b:2a:72:d7:e4: be:3b:b4:a8:21:7e:00:80:23:01:35:a6:3c:3a:6b:11:6f:93: 7b:bd:3f:13:a3:91:11:a2:f3:26:c9:b4:81:28:37:66:9e:fb: 8e:84:d6:4c:b4:4f:e7:12:36:05:64:bb:0a:70:12:43:8f:1d: ed:cc:a7:1c:70:53:af:2a:c7:cb:6a:35:1e:1d:14:3a:b3:d7: 64:2a:25:2f:a8:cb:12:f2:5f:0a:fc:22:13:05:52:97:d4:cc: be:0d:4d:c6:67:bf:b8:dc:cb:35:c6:80:71:c9:a6:28:19:fa: 53:52:3a:b3:bd:71:a1:61:d1:af:96:f8:57:a4:a2:a5:ae:70: 2b:97:b3:bb:a7:d7:e4:57:e2:01:d8:74:4c:cc:72:2b:0d:30: 80:95:00:47:48:dd:90:77:21:88:f3:c7:a7:e8:51:ba:45:c2: dd:24:f2:00:c4:10:d4:2f:4a:ad:19:e0:f0:18:f5:a7:e3:2c: 51:af:9f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4 NkFDOUE5NjkwHhcNMjQwNjAxMDAyMTM3WhcNMjQwNjA4MDAyMTM3WjAYMRYwFAYD VQQDEw02NjVhNjk5MS1iYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8tsOEfNAIy3lcfJ35gGZQClXup+8Z83DvAtg/3piaAs0eCWPeeB0M0HdSU7 6QxflDlr8ZIFu9YqVE+7O//MNZoGww0X8ElUxDMBQ+J0JVcFRMOi09l0Hlu6+fiP VgnLBHtuFcIx1BToikhdPRN/0iwQUcnHF4Cp4iSVm0C9I3Oi/It440DdR3ZthSLd n5QWGeubroSgy7WOIBf8xnvfHLDUQO2ARKmbh6g5KASGjYLtBGklTzYIz3hewmNU VbG8tb4PXu/C3JwdFwlbQdW6yjOFtfMKXGSlWz/tkQ6dN5WXDxXDBDI/gkZQQm6t fI/cXebrS+8qJvL8MRwiYynOYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWhkMd8 wKOVd7iitIvYzmUbGu+7MB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL aUNPMThjb2dEbkNHckpxV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+CezI2+FK4IYhGerj3ihvsDa6DxcDHwd+rxpwunzU7/osIc2a2eJc +/3l/FOSk/GDn/nY2o1rZo5/I6dBwal1inXtSypy1+S+O7SoIX4AgCMBNaY8OmsR b5N7vT8To5ERovMmybSBKDdmnvuOhNZMtE/nEjYFZLsKcBJDjx3tzKcccFOvKsfL ajUeHRQ6s9dkKiUvqMsS8l8K/CITBVKX1My+DU3GZ7+43Ms1xoBxyaYoGfpTUjqz vXGhYdGvlvhXpKKlrnArl7O7p9fkV+IB2HRMzHIrDTCAlQBHSN2QdyGI88en6FG6 RcLdJPIAxBDUL0qtGeDwGPWn4yxRr5+q -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:45 2024 by rpki-client on console-fra.rpki-client.org