$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: We74qfhKyh7SWAYmdYsODkeFrTOGgx3E1zyd2yURoPo= Subject key identifier: 84:3F:C9:19:23:29:72:DB:06:54:77:06:C5:8B:5B:40:A6:2C:FE:1B Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 0867 Signing time: Sat 18 May 2024 21:37:06 +0000 Manifest this update: Sat 18 May 2024 21:37:05 +0000 Manifest next update: Sat 25 May 2024 21:37:05 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: rVt7e7iOLyTr5NSBH9MvzAAQs4AzfSIj2hBtJb2EVqA=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: SV6wn1ONKGUETn7phh6Jtm/x58pYdRu9KHlc2SCIoEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: May 18 21:37:05 2024 GMT Not After : May 25 21:37:05 2024 GMT Subject: CN=66491f82-7d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:f8:53:f1:ed:fc:1b:e9:6f:8a:78:d7:3d: 4d:a3:f0:eb:1d:1e:b6:f8:e7:7c:6f:51:0a:d3:20: 4f:94:a0:4e:be:e9:f2:22:4e:a5:10:8e:a6:02:6d: 8e:f4:42:cd:04:cd:ac:13:04:74:69:a0:0f:6e:6a: 42:c7:6c:86:11:01:fb:e2:cc:10:2b:6c:a1:73:95: 12:c4:53:b8:bc:50:41:c4:57:31:aa:f1:8a:a8:20: 05:71:53:51:be:8d:06:b5:d4:e5:6b:2e:b9:da:fb: a9:01:8a:9b:f0:00:b4:eb:53:c4:0f:7a:29:4f:79: 26:51:6e:be:f1:90:30:52:1f:7a:08:3e:6a:4b:14: 29:26:a2:37:83:fa:c6:cd:a8:a2:9e:d4:aa:b1:56: ac:e2:f4:14:ab:0d:87:28:64:fa:9a:49:3d:8d:1f: a2:96:e8:47:e3:0c:68:3b:eb:0b:df:7a:66:46:da: 70:ae:ac:c7:45:0d:a7:1e:80:57:a9:fb:bb:73:1e: c1:6f:b1:e8:44:7c:fa:3b:be:73:1a:a4:22:c5:92: 9c:8d:1f:58:b0:b4:5e:b7:d5:01:0e:1d:f8:13:ae: 73:2d:d9:50:3b:6d:0a:b8:f8:c8:d2:3c:0e:34:03: 4b:72:92:f5:34:cf:bc:ac:87:5f:0c:2d:3c:00:7b: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3F:C9:19:23:29:72:DB:06:54:77:06:C5:8B:5B:40:A6:2C:FE:1B X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:2d:8d:0c:c8:27:c9:a8:c9:90:a9:ee:87:52:56:87:06:f5: 03:7c:66:f2:17:07:ee:9e:f9:90:c3:11:66:77:40:98:c1:84: b1:62:f6:9f:d2:18:51:90:83:97:21:12:d8:5a:a0:99:66:19: 60:2b:54:47:d9:4a:1f:7e:ed:a6:39:a7:c1:3d:2e:9f:12:0b: 54:b7:ac:65:84:b7:4c:8c:a7:28:2f:39:b3:a4:8d:73:b6:ad: 3e:89:62:71:e8:09:b2:aa:6f:81:f9:a9:79:a1:17:ec:38:37: 71:66:93:3f:eb:db:dd:85:5f:03:4e:82:67:0b:4a:f5:c7:97: ac:54:84:79:7b:03:d3:46:8b:d1:1a:9b:64:46:22:4c:f6:e7: a4:b5:2d:c3:5a:2e:55:50:dc:37:fc:d2:58:b5:a6:fb:21:5a: f4:b2:5b:e4:8b:7a:5e:e0:2a:e1:ec:5b:dc:38:25:d8:4b:bf: 4e:9c:04:d1:89:4c:82:4a:3e:36:42:f4:64:2c:17:fa:1a:d1: f0:48:40:8d:fb:2e:c9:46:fe:8f:71:13:aa:05:18:70:3c:aa: 55:e6:f2:1a:ec:96:60:30:23:a3:69:5d:c8:8c:6d:c4:9a:30: 2c:37:88:b1:6d:9b:da:d8:d0:87:43:10:8f:3d:1d:07:ad:6c: c8:f7:a5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjQwNTE4MjEzNzA1WhcNMjQwNTI1MjEzNzA1WjAYMRYwFAYD VQQDEw02NjQ5MWY4Mi03ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9n4U/Ht/Bvpb4p41z1No/DrHR62+Od8b1EK0yBPlKBOvunyIk6lEI6mAm2O 9ELNBM2sEwR0aaAPbmpCx2yGEQH74swQK2yhc5USxFO4vFBBxFcxqvGKqCAFcVNR vo0GtdTlay652vupAYqb8AC061PED3opT3kmUW6+8ZAwUh96CD5qSxQpJqI3g/rG zaiintSqsVas4vQUqw2HKGT6mkk9jR+iluhH4wxoO+sL33pmRtpwrqzHRQ2nHoBX qfu7cx7Bb7HoRHz6O75zGqQixZKcjR9YsLRet9UBDh34E65zLdlQO20KuPjI0jwO NANLcpL1NM+8rIdfDC08AHugXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ/yRkj KXLbBlR3BsWLW0CmLP4bMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8LY0MyCfJqMmQqe6HUlaHBvUDfGbyFwfunvmQwxFmd0CYwYSxYvaf 0hhRkIOXIRLYWqCZZhlgK1RH2Uoffu2mOafBPS6fEgtUt6xlhLdMjKcoLzmzpI1z tq0+iWJx6Amyqm+B+al5oRfsODdxZpM/69vdhV8DToJnC0r1x5esVIR5ewPTRovR GptkRiJM9uektS3DWi5VUNw3/NJYtab7IVr0slvki3pe4Crh7FvcOCXYS79OnATR iUyCSj42QvRkLBf6GtHwSECN+y7JRv6PcROqBRhwPKpV5vIa7JZgMCOjaV3IjG3E mjAsN4ixbZva2NCHQxCPPR0HrWzI96U7 -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org