$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: gLegGEcZUNvx13e+9/H3xhPwGylJBWgqN7ShML9a2mM= Subject key identifier: E7:71:F9:90:24:06:F0:53:5C:24:29:D3:B5:BC:D8:91:2C:38:24:27 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 057D Signing time: Fri 31 May 2024 01:10:58 +0000 Manifest this update: Fri 31 May 2024 01:10:57 +0000 Manifest next update: Fri 07 Jun 2024 01:10:57 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: BKsWXRM29U/z9NN899039+smbBHyhDjffcRvlCs57P8=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: AEX55uTzhEx4d0qx/4X7r0Xodi2rpGE09Pn+0vsA3Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: May 31 01:10:57 2024 GMT Not After : Jun 7 01:10:57 2024 GMT Subject: CN=665923a1-2c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:de:32:10:b4:14:27:70:9a:4d:ec:5c:ca: e6:bb:ff:3b:4f:f6:3b:8c:76:5c:d4:d6:08:21:73: 5b:4a:03:a5:89:b0:dd:7c:ad:db:88:20:79:6c:1a: c1:a7:c6:da:fb:7c:89:77:cc:69:8c:45:6e:02:b0: 17:4c:36:13:75:d3:a2:95:08:69:4a:07:c0:5c:59: 41:ad:88:76:07:d0:bb:34:2c:98:ce:8d:a0:29:5c: 93:20:8e:55:1b:88:b8:af:1d:6c:93:06:f3:a4:81: c7:fd:12:a8:b1:8d:3a:92:c9:64:20:1b:6b:cd:c8: 2f:fb:37:72:50:21:21:55:1f:5a:06:83:66:8c:15: b7:9d:48:a3:a1:74:73:37:73:31:fe:44:77:82:f2: b3:1c:bd:3c:de:93:20:91:9d:2b:55:d4:92:b6:81: 4b:74:16:8e:ec:c7:f7:2a:8c:37:9b:a9:b2:7d:3a: bb:ea:50:96:96:cc:45:e7:0c:0a:f7:97:3a:b0:5f: ff:0f:81:43:38:a2:5b:88:6e:45:43:88:1d:4b:81: 7b:d8:cb:23:be:e5:e6:0e:73:31:1f:03:d6:df:d3: e6:5f:3f:09:c7:f9:1a:04:6b:dd:96:78:de:50:58: 9f:36:4e:c6:37:08:ce:c7:af:b2:c7:d4:2b:c7:7d: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:F9:90:24:06:F0:53:5C:24:29:D3:B5:BC:D8:91:2C:38:24:27 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d0:0f:80:8c:6c:1d:bd:3b:4a:cf:b7:2f:ea:00:51:9b:0b: 5e:32:4d:29:d7:90:8a:20:2c:2b:fd:26:a7:b5:4c:33:ef:20: 48:5f:b3:ae:58:bb:d2:cb:3d:a5:f2:34:72:5d:7c:e6:d3:a2: d8:3c:f0:1a:ce:ea:2f:4f:d7:f8:5a:8a:3a:13:7f:0b:f9:67: 08:d1:e5:83:12:63:d3:e1:ba:e3:00:29:0f:68:fc:24:87:5a: f1:39:3f:f0:a9:9b:68:7a:d3:63:90:90:9e:93:14:93:c9:32: 57:48:8e:78:14:fe:cb:f2:0c:e0:66:37:1f:5e:5f:b2:58:22: c5:16:c7:0d:6f:07:c5:38:d8:c1:97:07:84:01:ee:0b:9d:20: 47:91:0f:b5:28:4e:17:0f:1e:cb:e9:f9:00:1b:44:0e:f9:5c: 34:2e:24:3f:85:8b:30:50:92:2d:67:d8:c4:b9:5e:46:3b:a9: 0d:92:6a:90:79:47:ef:ec:84:ee:04:03:d1:d5:20:9f:ae:78: e3:04:b4:c8:09:9a:7e:50:f8:5d:c7:36:3c:6e:b4:8d:f8:80: 90:49:25:a3:4a:7f:86:bb:9b:6f:47:2a:f9:b8:61:93:43:d2: 1a:cd:46:bd:e4:cd:64:97:a5:65:23:61:25:36:e1:ca:b2:80: 84:fa:a8:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjQwNTMxMDExMDU3WhcNMjQwNjA3MDExMDU3WjAYMRYwFAYD VQQDEw02NjU5MjNhMS0yYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XfeMhC0FCdwmk3sXMrmu/87T/Y7jHZc1NYIIXNbSgOlibDdfK3biCB5bBrB p8ba+3yJd8xpjEVuArAXTDYTddOilQhpSgfAXFlBrYh2B9C7NCyYzo2gKVyTII5V G4i4rx1skwbzpIHH/RKosY06kslkIBtrzcgv+zdyUCEhVR9aBoNmjBW3nUijoXRz N3Mx/kR3gvKzHL083pMgkZ0rVdSStoFLdBaO7Mf3Kow3m6myfTq76lCWlsxF5wwK 95c6sF//D4FDOKJbiG5FQ4gdS4F72MsjvuXmDnMxHwPW39PmXz8Jx/kaBGvdlnje UFifNk7GNwjOx6+yx9Qrx33n0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdx+ZAk BvBTXCQp07W82JEsOCQnMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK0A+AjGwdvTtKz7cv6gBRmwteMk0p15CKICwr/SantUwz7yBIX7Ou WLvSyz2l8jRyXXzm06LYPPAazuovT9f4Woo6E38L+WcI0eWDEmPT4brjACkPaPwk h1rxOT/wqZtoetNjkJCekxSTyTJXSI54FP7L8gzgZjcfXl+yWCLFFscNbwfFONjB lweEAe4LnSBHkQ+1KE4XDx7L6fkAG0QO+Vw0LiQ/hYswUJItZ9jEuV5GO6kNkmqQ eUfv7ITuBAPR1SCfrnjjBLTICZp+UPhdxzY8brSN+ICQSSWjSn+Gu5tvRyr5uGGT Q9IazUa95M1kl6VlI2ElNuHKsoCE+qjP -----END CERTIFICATE-----Generated at Fri May 31 03:15:04 2024 by rpki-client on console-ams.rpki-client.org