$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: vNyrjrGTAf/+LYFyDfV+gNsQI086tgjsKvi37CDPHSI= Subject key identifier: 23:86:BD:C1:71:BD:96:39:C4:75:30:3C:DC:75:DF:B0:D5:50:45:EB Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0B9B Signing time: Sat 18 May 2024 19:13:33 +0000 Manifest this update: Sat 18 May 2024 19:13:33 +0000 Manifest next update: Sat 25 May 2024 19:13:33 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: O4t3gBsBJ9K8QiHHTh6jfl+8dqTLQkinXqEZ1hhwux4=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: heoR7cbCAdRuieyY3U1k5gd6HHX/KbWqrL6G/wYFWbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: May 18 19:13:33 2024 GMT Not After : May 25 19:13:33 2024 GMT Subject: CN=6648fddd-78d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:66:09:33:83:e0:04:0a:8c:02:6b:35:f0: 2b:48:6b:14:cf:9d:7d:e2:34:15:bc:6a:21:35:ab: a0:5e:91:b8:55:70:31:27:ac:2a:10:15:09:ab:85: 8c:6e:71:16:b8:2e:01:0b:ad:5b:07:35:0e:f9:de: 93:22:62:98:0e:c8:67:47:37:be:d3:84:4e:6f:ac: 95:de:82:3f:d9:ec:b2:e3:c6:14:51:c4:36:22:13: c4:84:0b:05:82:25:77:fa:92:8a:2f:09:d0:9b:18: 62:74:34:8e:5d:7c:93:98:e2:e4:e1:fb:62:30:7a: 9f:44:f6:a4:72:76:b8:df:70:05:f6:bb:07:c3:9b: 82:dc:a7:d8:6a:3a:d7:c9:77:2b:53:1c:90:87:c6: 6f:a6:dc:87:ae:7d:82:cc:37:c4:80:69:c3:cf:07: 00:8c:17:18:77:5b:8e:b2:62:61:14:a7:9e:6a:db: 4b:43:66:06:d4:68:86:74:00:a0:f6:49:66:c7:c0: ab:59:c7:5d:c4:6f:f6:2b:ca:18:2e:aa:77:59:9a: e9:63:1f:74:87:f0:69:09:d9:24:97:69:32:00:71: 25:cd:be:0c:ff:1f:eb:07:a7:98:37:e6:7d:e8:4b: 09:a4:c8:e4:62:1f:9b:bc:98:a6:88:7e:10:47:6b: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:86:BD:C1:71:BD:96:39:C4:75:30:3C:DC:75:DF:B0:D5:50:45:EB X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7a:1f:93:f1:22:29:06:4e:c1:73:8d:ca:aa:74:14:4b:2d: fb:39:3f:e5:27:4f:e5:c3:ce:ac:f6:cc:46:8c:75:94:79:bc: c7:a3:b7:05:f3:db:98:20:f9:d8:b3:b4:d4:0d:73:90:b4:35: 96:1e:6c:51:6f:e2:6b:d6:ec:76:41:6d:68:d7:5f:8e:5e:18: 00:0c:21:9d:81:bf:d6:da:a7:29:f3:83:89:57:67:fc:a2:bc: 86:b8:48:c6:2b:90:4f:4b:08:17:50:51:4b:90:e7:73:1b:99: cf:09:a1:55:67:78:1e:11:9c:20:24:5c:f1:10:c7:77:7c:14: 54:0f:f2:fe:6b:ee:21:4c:44:16:f7:cf:81:9a:7b:a5:f0:10: d9:64:5d:9c:d0:64:6c:1d:b4:a7:d8:e1:97:64:9a:68:a6:6a: ed:ac:b4:4f:b6:c3:02:dd:a7:ab:6a:0c:1c:c5:26:f4:ff:63: ae:c9:dd:49:0d:a2:b0:16:86:35:3c:ca:9a:a4:ea:c2:97:a6: a6:c2:d2:2a:ef:83:c6:02:01:42:b0:98:67:e0:a5:f8:3c:b0: d7:11:56:6f:d3:23:09:8d:2a:91:cd:a4:01:da:5a:a6:80:ef: 8c:ea:ad:70:b3:56:ea:6e:9d:d9:07:12:44:ba:54:c8:1a:bc: 95:4d:d8:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjQwNTE4MTkxMzMzWhcNMjQwNTI1MTkxMzMzWjAYMRYwFAYD VQQDEw02NjQ4ZmRkZC03OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscBmCTOD4AQKjAJrNfArSGsUz5194jQVvGohNaugXpG4VXAxJ6wqEBUJq4WM bnEWuC4BC61bBzUO+d6TImKYDshnRze+04ROb6yV3oI/2eyy48YUUcQ2IhPEhAsF giV3+pKKLwnQmxhidDSOXXyTmOLk4ftiMHqfRPakcna433AF9rsHw5uC3KfYajrX yXcrUxyQh8ZvptyHrn2CzDfEgGnDzwcAjBcYd1uOsmJhFKeeattLQ2YG1GiGdACg 9klmx8CrWcddxG/2K8oYLqp3WZrpYx90h/BpCdkkl2kyAHElzb4M/x/rB6eYN+Z9 6EsJpMjkYh+bvJimiH4QR2t+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOGvcFx vZY5xHUwPNx137DVUEXrMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBeh+T8SIpBk7Bc43KqnQUSy37OT/lJ0/lw86s9sxGjHWUebzHo7cF 89uYIPnYs7TUDXOQtDWWHmxRb+Jr1ux2QW1o11+OXhgADCGdgb/W2qcp84OJV2f8 oryGuEjGK5BPSwgXUFFLkOdzG5nPCaFVZ3geEZwgJFzxEMd3fBRUD/L+a+4hTEQW 98+Bmnul8BDZZF2c0GRsHbSn2OGXZJpopmrtrLRPtsMC3aeragwcxSb0/2Ouyd1J DaKwFoY1PMqapOrCl6amwtIq74PGAgFCsJhn4KX4PLDXEVZv0yMJjSqRzaQB2lqm gO+M6q1ws1bqbp3ZBxJEulTIGryVTdgC -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org