$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: LsLyG+W6YNKGApgEILK5Ar5jORpwIJeORjsU4yuZGZ4= Subject key identifier: CC:F9:E7:CE:81:DC:85:35:B2:2F:2A:D4:30:6C:8E:ED:69:C0:47:70 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 74 Signing time: Fri 31 May 2024 08:19:51 +0000 Manifest this update: Fri 31 May 2024 08:19:51 +0000 Manifest next update: Fri 07 Jun 2024 08:19:51 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: /xYlXsa3yNFSwCXc2PE9hLMJSjNMM9ykmirqmiC4lV4=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: Rzehxr0+uq4wGOaC52117Iqt090HmyAUS/NU7NUpmFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: May 31 08:19:51 2024 GMT Not After : Jun 7 08:19:51 2024 GMT Subject: CN=66598827-4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:e9:14:33:a2:0e:2a:5f:44:1f:47:07:d0: 4c:68:3f:db:71:2e:87:48:75:12:50:b6:2f:dd:38: 45:f0:67:0b:9f:63:8c:ce:89:22:00:fb:87:10:67: 4b:21:10:61:dd:f0:94:ea:d4:f7:6f:2c:72:90:f0: 8f:83:f4:d2:72:6c:65:98:4c:6c:6e:a6:4e:01:38: c3:9a:8b:49:f5:21:f9:66:f8:44:b7:76:a5:ca:fb: b0:9b:7d:13:8f:f6:78:6d:cf:12:bf:3d:92:19:cf: 70:b5:b8:85:77:be:45:13:cf:73:f0:7f:28:61:4a: d7:10:9f:92:b3:66:1c:04:a8:04:df:9f:d0:df:a3: a4:19:77:60:36:e9:6c:1b:9f:5e:f2:b9:b3:8a:b6: 9a:8a:71:2d:cb:ff:99:6c:50:81:50:0e:df:d0:e7: 51:d7:6f:c4:25:3e:1c:8c:49:e0:c0:0b:1d:69:ff: 4e:49:24:eb:23:26:66:6d:3f:91:69:8a:3c:38:e8: 0b:c9:bc:47:ac:4f:98:6d:d8:14:5e:36:5f:a2:28: f3:be:18:dd:c8:eb:73:e1:b3:8e:f8:da:2b:15:ad: 5e:6e:95:7c:d5:80:64:a6:54:2e:c0:e2:38:01:d7: 34:34:e8:4b:46:14:ac:ac:49:5f:6e:9e:e8:7c:af: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F9:E7:CE:81:DC:85:35:B2:2F:2A:D4:30:6C:8E:ED:69:C0:47:70 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3d:21:3f:47:19:de:ab:75:05:0a:db:ea:94:1f:d4:14:e5: 80:c4:2c:18:ec:15:81:a4:77:8b:ef:2d:25:3d:bc:34:33:59: 84:d1:7d:ac:b6:9d:77:42:8e:e4:2a:ea:82:6e:48:d1:d1:2b: 90:a7:31:57:7e:55:8f:d4:81:5d:cf:1a:d0:01:f9:0e:7c:05: a4:6c:f3:2c:8d:58:c8:4e:7e:a5:5a:65:ce:14:b9:26:82:6a: 8a:8e:c8:83:f7:f2:06:bb:17:22:4b:72:bf:f0:4b:4b:98:55: c8:85:7f:3c:59:60:ac:9a:6e:9d:57:fb:40:19:eb:de:61:b2: 8f:ee:6a:df:3e:f6:13:0a:53:75:fe:1a:d5:e1:8c:d9:02:85: 9d:fc:a7:c9:4a:c8:d4:67:b2:84:1d:fc:8c:a6:b1:5f:55:1d: 2f:46:18:f9:a0:4e:90:8f:4b:1f:6a:bf:4d:90:6b:57:14:6a: d6:25:7a:c0:5b:af:b3:ce:6c:27:9f:85:a2:78:46:f9:78:06: 1a:8d:50:02:2d:5d:03:43:bf:aa:07:22:a9:49:a5:9a:7c:1f: 8d:ea:0c:51:b3:c4:44:1d:62:e0:c8:73:b0:0d:69:02:d7:b2: f6:12:71:96:b3:21:c1:04:13:fb:e5:06:cb:2e:a0:71:5d:33: f3:44:d2:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE M0Y3OTExMC8GA1UEBRMoMjVGOURCNjAwN0FERjZGNTdFQzRFRkY3QTYyQkY0RDQy REE3NUVDNTAeFw0yNDA1MzEwODE5NTFaFw0yNDA2MDcwODE5NTFaMBgxFjAUBgNV BAMTDTY2NTk4ODI3LTRmYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOGukUM6IOKl9EH0cH0ExoP9txLodIdRJQti/dOEXwZwufY4zOiSIA+4cQZ0sh EGHd8JTq1PdvLHKQ8I+D9NJybGWYTGxupk4BOMOai0n1Iflm+ES3dqXK+7CbfROP 9nhtzxK/PZIZz3C1uIV3vkUTz3PwfyhhStcQn5KzZhwEqATfn9Dfo6QZd2A26Wwb n17yubOKtpqKcS3L/5lsUIFQDt/Q51HXb8QlPhyMSeDACx1p/05JJOsjJmZtP5Fp ijw46AvJvEesT5ht2BReNl+iKPO+GN3I63Phs4742isVrV5ulXzVgGSmVC7A4jgB 1zQ06EtGFKysSV9unuh8r6iVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzPnnzoHc hTWyLyrUMGyO7WnAR3AwHwYDVR0jBBgwFoAUJfnbYAet9vV+xO/3piv01C2nXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzRjc5L0ZBMzFBMkIyNkYx QTExRUU4RDMyRTA2NEM0RjlBRTAyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmZuYllBZXQ5dlYteE9fM3BpdjAxQzJuWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz Rjc5L0ZBMzFBMkIyNkYxQTExRUU4RDMyRTA2NEM0RjlBRTAyL0pmbmJZQWV0OXZW LXhPXzNwaXYwMUMyblhzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJA9IT9HGd6rdQUK2+qUH9QU5YDELBjsFYGkd4vvLSU9vDQzWYTRfay2 nXdCjuQq6oJuSNHRK5CnMVd+VY/UgV3PGtAB+Q58BaRs8yyNWMhOfqVaZc4UuSaC aoqOyIP38ga7FyJLcr/wS0uYVciFfzxZYKyabp1X+0AZ695hso/uat8+9hMKU3X+ GtXhjNkChZ38p8lKyNRnsoQd/IymsV9VHS9GGPmgTpCPSx9qv02Qa1cUatYlesBb r7PObCefhaJ4Rvl4BhqNUAItXQNDv6oHIqlJpZp8H43qDFGzxEQdYuDIc7ANaQLX svYScZazIcEEE/vlBssuoHFdM/NE0uE= -----END CERTIFICATE-----Generated at Fri May 31 10:02:44 2024 by rpki-client on console-ams.rpki-client.org