$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: gnK8TFZtLsiRhQTP/skWkAGdz6CIa1YJ1WnD0N08f6o= Subject key identifier: E3:98:E4:8F:97:13:CF:C9:DF:68:27:6E:AE:F7:62:5C:CB:1A:75:DB Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 0104 Signing time: Sat 01 Jun 2024 06:51:38 +0000 Manifest this update: Sat 01 Jun 2024 06:51:38 +0000 Manifest next update: Sat 08 Jun 2024 06:51:38 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: 6iGxRzrk41i8bqx8KAN5pqTz+Cj4+Pngu+766GXjs0M=) 2: 5CBBCAEA90B211EDB7A3471FC4F9AE02.roa (hash: 3QVoPynRLM5/JWYrC/nr9ZnhrZhvaYNCtt2d4cwNET0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 06:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Jun 1 06:51:38 2024 GMT Not After : Jun 8 06:51:38 2024 GMT Subject: CN=665ac4fa-6c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:42:fa:1a:e5:b2:51:43:b2:d5:0c:42:cd: f5:f0:ab:e2:3f:b8:89:ca:4a:87:2a:bb:ff:21:1d: 42:ce:f6:fc:5b:91:9d:a5:92:47:ac:50:e2:35:44: 2e:3d:d2:c9:03:07:af:f3:1d:59:aa:79:6b:6c:b4: 6c:8f:e0:79:3a:9d:e6:93:ce:be:f6:50:c3:cd:fe: 19:eb:28:61:5d:42:b6:e9:b4:fd:b9:ff:4e:e1:3f: b0:ea:5e:fa:64:cd:f0:01:7f:6f:f3:7c:00:d3:03: 0e:a0:de:9a:ad:5a:5d:dc:35:51:d0:1f:92:d6:b8: a6:72:ef:17:e7:22:88:3a:eb:c6:eb:6f:4e:6c:06: 5b:0f:2d:ca:9f:65:34:b8:c4:5c:2d:07:36:41:0b: fd:71:f3:08:48:b6:04:a6:d4:44:f7:b8:19:3a:0c: b6:8f:4e:ec:3f:9c:59:79:3e:41:5f:99:25:7a:ce: cb:ca:e2:5c:46:5b:5a:79:7f:4b:1c:06:24:ab:53: 0c:db:0e:ce:22:d6:2b:69:9b:49:4e:78:09:ea:a4: 09:59:c0:48:e0:38:ab:bd:0a:e6:ca:94:d1:1a:61: 5b:a3:7e:07:e1:72:ce:d4:a8:31:c4:f3:73:27:08: 32:77:67:f9:19:48:38:9e:b8:0a:f2:98:99:6d:e2: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:E4:8F:97:13:CF:C9:DF:68:27:6E:AE:F7:62:5C:CB:1A:75:DB X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e0:07:92:14:4b:40:c4:20:67:b4:c7:de:05:ba:0e:bb:14: 28:f5:87:d0:c2:b2:a7:1c:42:dd:f4:ea:af:87:f8:a7:ba:42: d8:73:26:1d:e8:53:62:ab:b4:74:95:c0:41:c3:57:f0:08:3f: d5:c6:2c:e1:98:e7:8b:09:f0:2d:ca:58:39:5d:a1:00:b7:1f: 65:40:2f:5a:0c:24:47:89:d2:70:f5:f3:69:cf:3f:c4:6c:e3: 2a:13:ee:91:d1:53:9b:b6:ba:b2:10:43:ec:65:a3:66:88:18: 18:c1:26:cd:9b:5b:08:fb:fe:8f:7d:f1:79:3d:60:8d:20:ad: e5:13:16:89:d3:d1:98:64:01:65:7d:0f:45:63:b6:40:ed:4e: 6e:20:29:c1:53:28:94:6b:cf:32:77:88:3f:ce:ca:01:09:df: 4c:98:bf:4f:73:9a:a3:5b:d4:15:37:9c:e2:f7:07:e5:90:b4: 2a:7b:59:cb:93:b2:50:13:44:c9:30:60:74:1c:2f:99:13:e7: 24:de:84:fd:83:b6:18:11:56:5d:92:fb:33:d9:a5:b1:8e:aa: c1:d2:f8:ee:91:69:87:61:85:63:ac:c1:b5:c1:f9:83:6f:14: cb:2f:a0:c1:55:bf:b1:98:d8:76:9f:85:08:f4:a4:dd:09:c3: 2b:52:ef:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjQwNjAxMDY1MTM4WhcNMjQwNjA4MDY1MTM4WjAYMRYwFAYD VQQDEw02NjVhYzRmYS02Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvdC+hrlslFDstUMQs318KviP7iJykqHKrv/IR1Czvb8W5GdpZJHrFDiNUQu PdLJAwev8x1ZqnlrbLRsj+B5Op3mk86+9lDDzf4Z6yhhXUK26bT9uf9O4T+w6l76 ZM3wAX9v83wA0wMOoN6arVpd3DVR0B+S1rimcu8X5yKIOuvG629ObAZbDy3Kn2U0 uMRcLQc2QQv9cfMISLYEptRE97gZOgy2j07sP5xZeT5BX5kles7LyuJcRltaeX9L HAYkq1MM2w7OItYraZtJTngJ6qQJWcBI4DirvQrmypTRGmFbo34H4XLO1KgxxPNz Jwgyd2f5GUg4nrgK8piZbeIhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOY5I+X E8/J32gnbq73YlzLGnXbMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn4AeSFEtAxCBntMfeBboOuxQo9YfQwrKnHELd9Oqvh/inukLYcyYd 6FNiq7R0lcBBw1fwCD/VxizhmOeLCfAtylg5XaEAtx9lQC9aDCRHidJw9fNpzz/E bOMqE+6R0VObtrqyEEPsZaNmiBgYwSbNm1sI+/6PffF5PWCNIK3lExaJ09GYZAFl fQ9FY7ZA7U5uICnBUyiUa88yd4g/zsoBCd9MmL9Pc5qjW9QVN5zi9wflkLQqe1nL k7JQE0TJMGB0HC+ZE+ck3oT9g7YYEVZdkvsz2aWxjqrB0vjukWmHYYVjrMG1wfmD bxTLL6DBVb+xmNh2n4UI9KTdCcMrUu+w -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:37 2024 by rpki-client on console-fra.rpki-client.org