$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: JZWfYteMAsZVK2lA37hgNlpLrgZEsFOtrUhRkM+vJAs= Subject key identifier: A9:4D:A3:32:82:4C:1B:AF:8D:86:7D:A5:BF:23:2B:6B:05:CF:A0:D4 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 01C5 Signing time: Sun 19 May 2024 04:26:51 +0000 Manifest this update: Sun 19 May 2024 04:26:50 +0000 Manifest next update: Sun 26 May 2024 04:26:50 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: O8XTByxFy3YumYKQiALgmRQecG1V+DEIL7gntjzX/+w=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: 1SJS3OgAo09/8vAdWL5x4wUO1lH3CwJnSkHXsZPYMuE=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: K6aCG080Auj5n1Lez4pjb5rS1LZn1x49HEYDtfCdMMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: May 19 04:26:50 2024 GMT Not After : May 26 04:26:50 2024 GMT Subject: CN=66497f8b-64e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:63:9f:c2:17:ef:dc:76:48:82:69:e5:c2:b8: bd:10:6a:c0:71:c5:e8:3a:23:dd:55:34:ec:fd:a5: e9:74:f9:15:eb:65:e6:40:54:67:d0:45:55:24:eb: 6a:ea:34:78:f0:3e:bc:7a:c3:d8:3b:8c:e2:6a:f7: fc:0c:1b:63:16:2a:e5:fa:50:4c:a4:27:3a:68:a9: d0:7c:79:d1:eb:1b:54:f4:a4:2b:db:e7:07:d0:23: e4:c8:ff:d1:d7:da:14:cb:15:25:64:1d:fb:51:0b: 46:16:41:44:af:4d:11:b9:67:32:ab:87:d5:b9:9f: f5:d5:8a:f9:83:b5:f0:6b:8e:65:fd:66:8b:0a:fd: ec:96:31:4c:ed:5a:df:33:0b:a4:6b:57:63:54:3f: 01:fc:d2:40:01:93:e8:3a:f0:9c:ed:6f:fa:9b:da: 23:ff:0e:7c:e2:1f:e9:eb:c5:21:59:f0:bf:14:9d: d8:06:4d:94:dc:f9:2d:ad:a1:48:78:4f:25:46:59: fe:87:9a:85:0e:c1:9a:32:85:b4:3f:09:f7:26:b7: a0:8e:38:d0:f1:15:0f:9c:12:cd:6d:bc:b2:d3:90: 47:b6:0f:26:1e:78:53:d2:6c:f8:28:59:27:ef:74: 71:ec:ec:01:c7:d1:54:71:40:ab:bb:b1:e0:93:09: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:A3:32:82:4C:1B:AF:8D:86:7D:A5:BF:23:2B:6B:05:CF:A0:D4 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:95:0f:b0:3d:c2:9b:87:3c:39:2f:6f:8f:d3:1c:4e:77:a6: b2:0e:88:0a:1e:ea:9f:71:2b:98:b2:86:17:92:d6:11:49:b9: 5d:81:97:2b:4f:c5:08:1d:ea:99:13:6e:09:f1:a2:2c:67:91: d6:fa:8e:49:99:f2:0f:d7:6b:fc:2d:d4:32:16:df:8d:8b:0c: ef:78:1c:70:e4:2d:eb:e5:04:78:c0:77:e9:de:3d:c0:59:47: dc:ae:32:7f:34:56:91:ec:f1:0b:72:09:f8:a5:30:ff:cc:1f: cd:1f:8b:90:e4:24:35:89:46:2d:6b:81:94:f6:df:30:bb:1e: a3:f3:c1:2a:05:cb:9a:94:33:77:d6:53:fa:d3:44:87:03:46: df:26:9a:5f:d8:98:b7:3f:71:ce:58:4a:1d:3b:2a:e2:59:64: 91:dc:f1:5e:05:d5:23:48:6a:8f:69:67:af:7c:2f:08:42:29: ee:62:04:4a:8d:8a:1d:0f:1d:e1:d7:b5:18:7e:dd:31:b0:d6: 62:b7:2f:ae:86:ad:97:88:0e:51:7e:05:b9:0f:ee:47:19:96: d4:b6:7a:70:60:84:1f:1a:c5:17:3d:cd:13:56:54:71:42:b2: 9a:e4:ea:6d:7a:7b:30:cc:e3:09:de:f5:2e:99:ab:34:88:f3: 2b:9a:a9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjQwNTE5MDQyNjUwWhcNMjQwNTI2MDQyNjUwWjAYMRYwFAYD VQQDEw02NjQ5N2Y4Yi02NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9GOfwhfv3HZIgmnlwri9EGrAccXoOiPdVTTs/aXpdPkV62XmQFRn0EVVJOtq 6jR48D68esPYO4ziavf8DBtjFirl+lBMpCc6aKnQfHnR6xtU9KQr2+cH0CPkyP/R 19oUyxUlZB37UQtGFkFEr00RuWcyq4fVuZ/11Yr5g7Xwa45l/WaLCv3sljFM7Vrf Mwuka1djVD8B/NJAAZPoOvCc7W/6m9oj/w584h/p68UhWfC/FJ3YBk2U3PktraFI eE8lRln+h5qFDsGaMoW0Pwn3JregjjjQ8RUPnBLNbbyy05BHtg8mHnhT0mz4KFkn 73Rx7OwBx9FUcUCru7HgkwmygwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlNozKC TBuvjYZ9pb8jK2sFz6DUMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZlQ+wPcKbhzw5L2+P0xxOd6ayDogKHuqfcSuYsoYXktYRSbldgZcr T8UIHeqZE24J8aIsZ5HW+o5JmfIP12v8LdQyFt+NiwzveBxw5C3r5QR4wHfp3j3A WUfcrjJ/NFaR7PELcgn4pTD/zB/NH4uQ5CQ1iUYta4GU9t8wux6j88EqBcualDN3 1lP600SHA0bfJppf2Ji3P3HOWEodOyriWWSR3PFeBdUjSGqPaWevfC8IQinuYgRK jYodDx3h17UYft0xsNZity+uhq2XiA5RfgW5D+5HGZbUtnpwYIQfGsUXPc0TVlRx QrKa5OptenswzOMJ3vUumas0iPMrmqk7 -----END CERTIFICATE-----Generated at Sun May 19 04:56:56 2024 by rpki-client on console-fra.rpki-client.org