$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: Zl/YI5IbSqPzVtBCQJDzzZMqKSGHXsXtQ6OaMeG5nS0= Subject key identifier: FD:48:06:8F:09:80:2A:57:B8:7A:C3:5D:73:83:BC:54:D1:7B:C3:AE Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0DB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0DA5 Signing time: Mon 06 May 2024 18:35:56 +0000 Manifest this update: Mon 06 May 2024 18:35:56 +0000 Manifest next update: Mon 13 May 2024 18:35:56 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: lX7uJXjtU6cMWPeDR5IiRTZILcEOac1OhFkxEKmLc3g=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: H2LFByHCGl67eJSX+O7peLobB2Xyb4BQ81wW7F5Xst0=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: qsatTV0vWjCabMFshTZDBa4P4hU9immfTIRLePvacAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: May 6 18:35:56 2024 GMT Not After : May 13 18:35:56 2024 GMT Subject: CN=6639230c-4977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:d5:42:ac:94:6c:71:52:4a:44:18:3e:a0: cf:19:f3:3e:ce:25:ac:1a:86:79:1f:b5:b5:d3:e7: 10:39:88:ad:2f:ec:1a:d8:6b:db:fd:fe:1d:1f:a7: 95:bf:36:dc:66:98:00:24:e7:9c:f5:c7:e8:6b:71: c5:03:ad:01:6f:1b:ab:3b:45:ae:75:79:85:fd:0c: d4:d3:7a:3a:5c:08:e0:48:fd:86:52:35:e3:29:3b: 2f:ae:19:8c:07:82:77:bb:01:31:7e:3c:4c:c1:76: e7:a2:f5:18:d9:35:d8:97:c3:78:69:c9:d3:ec:09: 94:9d:70:e0:1d:00:20:57:72:44:2b:76:37:2e:60: bb:38:47:f5:92:5d:6e:a2:cc:d8:cf:fd:aa:7d:6b: af:96:44:3e:4d:5b:54:b0:ba:2d:7c:2b:5f:e1:e5: 11:c1:e7:ed:d1:1a:0d:5e:0d:d1:89:1c:fd:53:22: 7d:5c:5f:ac:f1:ca:ee:04:ac:d4:42:a1:81:bc:48: 2b:68:c8:a9:5c:5b:dd:9b:cd:13:d1:0a:c0:32:ae: 8b:94:6d:e6:f1:78:69:b4:24:60:ab:6b:95:c6:75: 12:89:07:17:97:a4:27:24:28:e6:29:a8:53:b1:f1: f3:9d:f2:fa:ce:75:bb:2c:b0:c3:64:a8:76:cd:61: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:06:8F:09:80:2A:57:B8:7A:C3:5D:73:83:BC:54:D1:7B:C3:AE X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f4:a7:48:da:e0:bd:b8:7f:5e:41:fe:07:1e:a4:fe:ce:af: ed:97:05:9f:d8:9f:b7:f1:81:55:aa:0c:08:c3:3e:1b:11:3c: 77:e6:af:bd:75:dd:0c:c0:37:95:c4:f0:50:35:20:53:90:81: 65:5e:c8:e9:fc:f6:9b:22:d5:36:72:c0:5c:48:e8:5d:50:ff: 6a:d7:2c:a6:cf:b9:44:b3:21:fe:f5:4d:79:1c:9e:1e:44:ff: de:1d:72:50:32:5b:08:11:95:5e:48:99:d5:85:4c:18:ca:94: b0:42:d6:f6:db:c6:c3:9c:18:98:f9:e6:6a:05:2b:b5:1f:19: 65:30:5b:46:77:5c:33:e5:f2:b7:1a:68:1e:49:40:ab:24:1e: 2a:ee:93:a8:26:18:d1:e7:c6:43:cd:80:99:ce:aa:3f:4a:96: ee:6a:f3:be:6e:31:6e:66:34:7a:d9:44:bd:10:a7:7e:6e:bb: 38:04:2d:46:13:e6:19:36:8d:af:53:4e:a0:93:96:e6:c0:21: 6e:54:f8:95:eb:4b:c8:7c:b0:e3:c1:e7:d5:0e:09:3e:37:4e: bc:da:13:6f:f2:9d:6c:90:c6:01:15:16:f4:b3:37:32:3e:6e: c1:a5:f7:6d:27:8b:ed:44:34:2c:02:35:ac:09:df:f6:17:2f: 7c:70:25:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjQwNTA2MTgzNTU2WhcNMjQwNTEzMTgzNTU2WjAYMRYwFAYD VQQDEw02NjM5MjMwYy00OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvXVQqyUbHFSSkQYPqDPGfM+ziWsGoZ5H7W10+cQOYitL+wa2Gvb/f4dH6eV vzbcZpgAJOec9cfoa3HFA60BbxurO0WudXmF/QzU03o6XAjgSP2GUjXjKTsvrhmM B4J3uwExfjxMwXbnovUY2TXYl8N4acnT7AmUnXDgHQAgV3JEK3Y3LmC7OEf1kl1u oszYz/2qfWuvlkQ+TVtUsLotfCtf4eURweft0RoNXg3RiRz9UyJ9XF+s8cruBKzU QqGBvEgraMipXFvdm80T0QrAMq6LlG3m8XhptCRgq2uVxnUSiQcXl6QnJCjmKahT sfHznfL6znW7LLDDZKh2zWHSvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1IBo8J gCpXuHrDXXODvFTRe8OuMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb9KdI2uC9uH9eQf4HHqT+zq/tlwWf2J+38YFVqgwIwz4bETx35q+9 dd0MwDeVxPBQNSBTkIFlXsjp/PabItU2csBcSOhdUP9q1yymz7lEsyH+9U15HJ4e RP/eHXJQMlsIEZVeSJnVhUwYypSwQtb228bDnBiY+eZqBSu1HxllMFtGd1wz5fK3 GmgeSUCrJB4q7pOoJhjR58ZDzYCZzqo/SpbuavO+bjFuZjR62US9EKd+brs4BC1G E+YZNo2vU06gk5bmwCFuVPiV60vIfLDjwefVDgk+N0682hNv8p1skMYBFRb0szcy Pm7BpfdtJ4vtRDQsAjWsCd/2Fy98cCW5 -----END CERTIFICATE-----Generated at Mon May 6 20:19:20 2024 by rpki-client on console-fra.rpki-client.org