$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: Q6v2jQfckZWsmrKiWRJ24yBcAkPTLCmj+1NdYmthAQQ= Subject key identifier: C4:73:A6:81:6A:AE:7A:BB:E6:DB:11:EE:DA:B7:B5:A7:78:AA:C2:D4 Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0B8D Signing time: Sat 18 May 2024 19:20:17 +0000 Manifest this update: Sat 18 May 2024 19:20:16 +0000 Manifest next update: Sat 25 May 2024 19:20:16 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: xgApx20Xm7yL7NMkqIds/se9MDfSAhSOjDvfSNmoMzw=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: B7bMfpiuog7j3lAIf3eVZ/sNLLPGCxV9ah/9SIc1VpA=) 3: 70E436A4155311EDB5B4C084C4F9AE02.roa (hash: 2KPGE6YOGXpDAntQqSYERNf3VFcgLXO23a7bItR4QIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: May 18 19:20:16 2024 GMT Not After : May 25 19:20:16 2024 GMT Subject: CN=6648ff71-ecd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:d8:2e:be:29:6c:7e:43:04:e4:bc:f6:7f: a6:b0:53:6f:de:24:50:11:e4:bf:c5:1d:ef:53:df: 25:70:7c:c6:6a:77:0e:6b:d3:8d:d8:42:40:b8:b7: 60:2b:25:36:d6:c5:b5:fc:d4:2a:ee:d7:ad:13:64: 8a:6c:9f:e3:37:98:36:e3:71:10:26:43:55:bc:62: 79:97:71:ee:64:23:7a:45:97:e8:80:88:4e:fd:54: ca:7c:6c:28:b2:df:e7:13:47:2c:ea:f5:de:91:b3: be:9c:5a:b2:7f:53:13:4f:31:cf:7e:57:36:0c:f0: 8e:34:96:e1:5c:3d:0b:64:fa:09:ad:32:f1:f4:8a: ee:b9:42:5c:b0:62:e1:2a:6d:de:ce:85:c0:81:1f: d6:df:40:7b:48:06:b4:a9:ed:d5:7c:81:98:ca:60: c7:60:12:fa:fa:be:f8:91:6d:b6:f8:42:68:63:95: ba:5f:e1:77:d8:ad:a5:b0:36:93:6b:24:36:fd:5d: 3d:35:82:ff:14:3a:0f:6a:59:a9:88:9f:2b:3c:50: 55:01:75:c2:27:26:00:79:a6:af:bd:3f:ce:a5:14: d2:1b:bf:4e:45:9d:4a:c5:70:d4:8a:e4:4d:41:36: d1:1e:c8:ed:aa:de:74:7b:ba:74:4b:8d:f2:cc:a0: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:73:A6:81:6A:AE:7A:BB:E6:DB:11:EE:DA:B7:B5:A7:78:AA:C2:D4 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:a5:2b:bf:5d:8b:3c:04:1e:29:d8:b4:33:ed:ac:fe:bd:38: fb:f9:4f:ff:4d:68:ad:19:32:6f:ce:7a:d0:8d:10:9d:ff:fa: 74:5f:77:52:9f:91:62:23:1f:3f:c4:d1:4b:a0:ec:31:49:87: 35:1d:52:54:f8:4a:2a:94:e3:28:9d:a2:49:30:77:d2:96:50: 47:06:ec:82:6e:a6:4e:9b:9c:09:9d:b3:08:5b:04:e8:72:e7: 34:a8:0e:81:4e:ea:dc:80:c6:e8:f8:76:9e:97:73:3c:f5:9e: 8b:a0:6d:b6:8b:3d:8a:6d:60:7d:f8:79:6c:e5:d6:a4:25:e2: 2e:0a:b0:d3:18:2a:54:cd:fe:3d:5b:87:99:73:c4:f7:d1:73: a6:0c:75:2d:5d:03:f2:8d:b5:a1:c9:c7:e2:5a:87:e5:29:e4: 45:49:8b:73:3a:96:15:5b:bb:d2:ec:72:9c:8b:43:ad:ca:0a: 31:23:c9:a0:a5:e7:28:0c:b0:34:82:45:2d:01:cf:28:74:69: 9d:a2:32:2e:97:af:ea:fa:c3:dc:4a:63:59:55:21:9c:cb:cb: 74:7b:00:e9:07:7c:5b:f3:b2:b5:f8:54:fe:fa:34:88:70:76: ec:38:f0:07:7a:b4:e3:e6:0d:e5:45:98:fd:9f:ba:03:22:31: 81:d7:8d:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjQwNTE4MTkyMDE2WhcNMjQwNTI1MTkyMDE2WjAYMRYwFAYD VQQDEw02NjQ4ZmY3MS1lY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGnYLr4pbH5DBOS89n+msFNv3iRQEeS/xR3vU98lcHzGancOa9ON2EJAuLdg KyU21sW1/NQq7tetE2SKbJ/jN5g243EQJkNVvGJ5l3HuZCN6RZfogIhO/VTKfGwo st/nE0cs6vXekbO+nFqyf1MTTzHPflc2DPCONJbhXD0LZPoJrTLx9IruuUJcsGLh Km3ezoXAgR/W30B7SAa0qe3VfIGYymDHYBL6+r74kW22+EJoY5W6X+F32K2lsDaT ayQ2/V09NYL/FDoPalmpiJ8rPFBVAXXCJyYAeaavvT/OpRTSG79ORZ1KxXDUiuRN QTbRHsjtqt50e7p0S43yzKBUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRzpoFq rnq75tsR7tq3tad4qsLUMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKpSu/XYs8BB4p2LQz7az+vTj7+U//TWitGTJvznrQjRCd//p0X3dS n5FiIx8/xNFLoOwxSYc1HVJU+EoqlOMonaJJMHfSllBHBuyCbqZOm5wJnbMIWwTo cuc0qA6BTurcgMbo+Hael3M89Z6LoG22iz2KbWB9+Hls5dakJeIuCrDTGCpUzf49 W4eZc8T30XOmDHUtXQPyjbWhycfiWoflKeRFSYtzOpYVW7vS7HKci0OtygoxI8mg pecoDLA0gkUtAc8odGmdojIul6/q+sPcSmNZVSGcy8t0ewDpB3xb87K1+FT++jSI cHbsOPAHerTj5g3lRZj9n7oDIjGB141a -----END CERTIFICATE-----Generated at Sat May 18 20:16:06 2024 by rpki-client on console-ams.rpki-client.org