$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: qEIED5k8B76RwHe0ZmDVE3h0LUJM31vZviI2sePfcHs= Subject key identifier: E6:CD:FC:E9:97:55:72:4A:B1:FF:2A:96:C5:FC:5A:D2:3C:3C:87:A3 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 03D9 Signing time: Sun 19 May 2024 02:20:32 +0000 Manifest this update: Sun 19 May 2024 02:20:32 +0000 Manifest next update: Sun 26 May 2024 02:20:32 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: CHMGbMkZIMzB1qwzhnYUK/CNLNLYf3i1JQ4AgUBg6U4=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: I/EUtcnIOgWuSMRX1/ctogprNtew+jz+1ODHN5r7tpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: May 19 02:20:32 2024 GMT Not After : May 26 02:20:32 2024 GMT Subject: CN=664961f0-5fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:95:da:43:05:6d:65:9f:ea:fc:f8:ea:0d: 20:85:d8:05:ca:6c:28:6b:a7:8a:d0:28:fa:de:e7: af:2f:9e:04:de:0c:15:f0:cf:3d:33:6c:9c:13:bf: fa:23:5c:93:66:5f:c2:12:cf:ff:70:90:0a:87:46: 46:2a:4c:1b:24:68:ca:6c:59:d0:f6:ee:12:0a:02: 38:4e:07:ee:40:c8:b4:cc:01:b5:95:8d:a3:38:f3: 99:a5:d2:c8:59:03:d5:4f:45:80:ac:d7:91:2b:ee: 37:38:95:6e:65:e1:ec:9c:6e:12:44:b9:1e:c9:81: d6:cb:b9:9a:3c:7b:11:4f:74:30:7b:95:e5:11:44: 72:2b:f0:cd:e4:60:3a:b6:95:7c:5b:79:89:15:a7: a1:17:43:9b:b3:0d:8d:91:be:3c:c1:b2:5b:eb:3a: d8:0e:37:37:1b:d5:68:8b:63:60:4e:77:0e:14:5d: a9:64:87:bc:08:39:02:3d:29:ad:3b:f7:89:30:3f: 3f:3d:98:35:74:51:cd:07:9a:aa:35:80:56:f6:f9: 63:da:d2:d6:72:13:07:50:8e:d8:c6:5c:19:44:5a: 46:3e:8e:db:fb:3e:d1:c2:f2:2f:d9:46:94:0d:98: ca:f9:9e:1f:f3:a5:3c:98:10:0c:14:2c:b9:5e:14: c0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:FC:E9:97:55:72:4A:B1:FF:2A:96:C5:FC:5A:D2:3C:3C:87:A3 X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:47:40:09:78:49:d5:d6:cb:79:a8:e6:cd:b1:e7:e9:46:0e: f4:d0:4f:3d:1c:ee:b1:e7:a2:9d:be:5c:71:e4:b7:62:c4:d5: 6a:22:d6:51:cb:31:57:f3:09:af:fc:6f:b8:48:a1:fd:34:d4: 3b:47:1d:38:36:5e:54:41:86:d5:92:3b:9a:80:7c:2b:36:bb: ad:74:22:6c:cd:f0:b4:1c:e7:d9:4c:a1:14:7d:5b:98:e5:43: 0a:f2:f6:7c:5e:30:81:2d:44:8e:67:9f:7e:f0:fa:a0:28:ac: 2e:3e:7a:a2:a5:30:a9:e0:fa:96:19:da:f7:f6:8c:16:f6:03: 06:6e:44:99:75:38:92:fd:7c:5c:98:c6:31:df:d1:16:16:57: 32:b7:42:aa:4e:63:7b:7f:14:40:5e:08:81:ba:8d:00:bc:91: 7b:8c:1c:26:24:11:38:a4:2b:0e:e0:3a:8a:9b:88:a1:1f:72: b0:0d:cc:60:aa:39:55:88:22:84:f1:88:37:24:d1:7b:80:5f: d3:07:78:7a:5f:38:da:05:bc:c0:17:64:bf:16:b4:8f:e8:0c: ac:45:a3:40:af:11:b8:49:f3:ff:bb:60:21:1c:90:bd:51:ae: 3f:b4:f6:35:ab:44:81:21:7d:65:12:38:4e:f2:e9:c3:dc:8f: f0:bd:ca:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjQwNTE5MDIyMDMyWhcNMjQwNTI2MDIyMDMyWjAYMRYwFAYD VQQDEw02NjQ5NjFmMC01ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOWV2kMFbWWf6vz46g0ghdgFymwoa6eK0Cj63uevL54E3gwV8M89M2ycE7/6 I1yTZl/CEs//cJAKh0ZGKkwbJGjKbFnQ9u4SCgI4TgfuQMi0zAG1lY2jOPOZpdLI WQPVT0WArNeRK+43OJVuZeHsnG4SRLkeyYHWy7maPHsRT3Qwe5XlEURyK/DN5GA6 tpV8W3mJFaehF0Obsw2Nkb48wbJb6zrYDjc3G9Voi2NgTncOFF2pZIe8CDkCPSmt O/eJMD8/PZg1dFHNB5qqNYBW9vlj2tLWchMHUI7YxlwZRFpGPo7b+z7RwvIv2UaU DZjK+Z4f86U8mBAMFCy5XhTANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObN/OmX VXJKsf8qlsX8WtI8PIejMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPR0AJeEnV1st5qObNsefpRg700E89HO6x56Kdvlxx5LdixNVqItZR yzFX8wmv/G+4SKH9NNQ7Rx04Nl5UQYbVkjuagHwrNrutdCJszfC0HOfZTKEUfVuY 5UMK8vZ8XjCBLUSOZ59+8PqgKKwuPnqipTCp4PqWGdr39owW9gMGbkSZdTiS/Xxc mMYx39EWFlcyt0KqTmN7fxRAXgiBuo0AvJF7jBwmJBE4pCsO4DqKm4ihH3KwDcxg qjlViCKE8Yg3JNF7gF/TB3h6XzjaBbzAF2S/FrSP6AysRaNArxG4SfP/u2AhHJC9 Ua4/tPY1q0SBIX1lEjhO8unD3I/wvcol -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org