$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: eGdIFUXDA/bK5+GNzJMkNJK3ruhmFnRICHo8v/RVHog= Subject key identifier: 73:51:D7:E8:5F:66:2E:C3:C3:C3:E9:24:2C:E7:DD:7B:36:78:7D:19 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 81 Signing time: Sun 19 May 2024 07:10:42 +0000 Manifest this update: Sun 19 May 2024 07:10:42 +0000 Manifest next update: Sun 26 May 2024 07:10:42 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: JDCMK9yusPVwFSJqqooqySDc+NGKVBp9L0dDyM0DrPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: May 19 07:10:42 2024 GMT Not After : May 26 07:10:42 2024 GMT Subject: CN=6649a5f2-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:04:36:9b:7f:3f:1f:36:cb:e3:0d:44:33: 92:ed:4a:df:73:bc:30:5d:ea:ce:49:a2:5d:79:00: 1a:a8:52:6a:78:14:cf:51:5d:73:3f:27:40:34:0d: c7:78:69:7d:d8:6d:4f:f4:35:75:f4:41:71:97:90: 08:ea:85:25:d5:33:1d:0c:36:0b:b3:48:ec:89:c6: e9:d0:2a:f4:04:7b:2e:2f:08:ea:66:b7:23:66:69: cc:20:40:7a:f3:f4:fb:a4:f0:02:e4:35:f4:ab:20: 92:c1:1c:9f:d0:c0:ef:b3:d1:e5:b5:fc:39:fe:b6: ce:1d:86:f1:d0:3e:c8:5f:4c:5a:15:aa:08:25:10: a7:d7:20:d1:82:fc:b6:43:6c:59:35:f2:33:d3:54: 04:05:c3:f8:b5:3f:c8:63:26:78:8c:dc:61:4f:b2: 5c:21:92:04:4a:8d:19:ec:46:fb:77:30:a9:5d:41: fc:14:b7:29:8d:13:fa:8d:77:a9:79:65:a6:f5:a5: 6b:ff:5b:32:d8:3d:c0:6e:f6:e8:c7:17:68:8e:ec: 8b:5a:c5:77:34:54:d4:fb:d7:98:86:64:35:3f:f1: af:99:59:66:1f:f3:6b:79:72:4e:55:af:79:d0:a1: 79:ea:90:b5:b5:37:2b:5f:89:bd:64:4d:57:1e:8c: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:51:D7:E8:5F:66:2E:C3:C3:C3:E9:24:2C:E7:DD:7B:36:78:7D:19 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fd:e6:1b:79:e1:87:69:4c:6f:56:ff:d5:61:2f:9b:95:dd: 72:5e:36:04:c9:3b:d2:7c:7d:15:de:2c:e9:2c:51:cc:aa:56: 12:14:a3:b6:7c:e9:a2:91:3c:9e:6f:57:68:66:49:6a:f2:38: ae:83:6d:a2:40:2b:95:34:20:29:1b:be:8a:2b:33:28:28:cc: 49:3e:08:39:e0:05:a1:fa:f0:e0:f0:d3:c7:d5:64:46:20:36: 94:b4:79:aa:0c:63:c3:fb:29:b5:56:7b:b7:e9:b3:b6:82:da: fa:8a:5d:63:31:82:fd:83:9a:a8:82:2b:59:a7:28:c1:71:94: d0:b7:28:86:b2:29:f2:ba:5c:40:c3:d5:52:9c:f6:09:33:34: 7b:fd:06:25:39:b2:ca:34:a4:2c:38:90:ec:a3:2f:ee:e6:c3: c5:83:f1:e4:9d:e7:be:78:32:a6:77:83:af:ba:18:de:f3:9e: a9:25:65:85:ce:4e:86:1f:f3:6d:bf:cc:7f:ef:32:01:9a:81: 9e:de:e2:bd:0f:a9:09:9c:e4:84:ad:82:a6:f6:7b:8c:ce:31: 8d:27:0a:63:6b:eb:1b:86:13:0c:d4:a1:10:87:d0:0a:7f:6a: 5d:b7:4f:48:85:5b:93:74:67:00:82:8e:7e:77:9b:35:83:dd: 72:33:80:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjQwNTE5MDcxMDQyWhcNMjQwNTI2MDcxMDQyWjAYMRYwFAYD VQQDEw02NjQ5YTVmMi1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfwENpt/Px82y+MNRDOS7Urfc7wwXerOSaJdeQAaqFJqeBTPUV1zPydANA3H eGl92G1P9DV19EFxl5AI6oUl1TMdDDYLs0jsicbp0Cr0BHsuLwjqZrcjZmnMIEB6 8/T7pPAC5DX0qyCSwRyf0MDvs9Hltfw5/rbOHYbx0D7IX0xaFaoIJRCn1yDRgvy2 Q2xZNfIz01QEBcP4tT/IYyZ4jNxhT7JcIZIESo0Z7Eb7dzCpXUH8FLcpjRP6jXep eWWm9aVr/1sy2D3AbvboxxdojuyLWsV3NFTU+9eYhmQ1P/GvmVlmH/NreXJOVa95 0KF56pC1tTcrX4m9ZE1XHozemwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNR1+hf Zi7Dw8PpJCzn3Xs2eH0ZMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw/eYbeeGHaUxvVv/VYS+bld1yXjYEyTvSfH0V3izpLFHMqlYSFKO2 fOmikTyeb1doZklq8jiug22iQCuVNCApG76KKzMoKMxJPgg54AWh+vDg8NPH1WRG IDaUtHmqDGPD+ym1Vnu36bO2gtr6il1jMYL9g5qogitZpyjBcZTQtyiGsinyulxA w9VSnPYJMzR7/QYlObLKNKQsOJDsoy/u5sPFg/Hknee+eDKmd4Ovuhje856pJWWF zk6GH/Ntv8x/7zIBmoGe3uK9D6kJnOSErYKm9nuMzjGNJwpja+sbhhMM1KEQh9AK f2pdt09IhVuTdGcAgo5+d5s1g91yM4D5 -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org