$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: HdTVewWjPdvJNr1pkKuiTPQEPLGvPSNqQi9Olr5MeiU= Subject key identifier: E7:7A:A8:1D:47:D7:90:57:49:22:D1:50:32:7F:C2:02:5B:4E:D8:98 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0697 Signing time: Tue 30 Apr 2024 23:41:25 +0000 Manifest this update: Tue 30 Apr 2024 23:41:24 +0000 Manifest next update: Tue 07 May 2024 23:41:24 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: znc4BGN1P0oi32UHJQQTDRlbid2oiiioadeb5vn8zi8=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: 2l1eVuoxjTPa9u7eApyzjSXUZzUiJuMBRNrcChq+mhs=) 3: F780347C0AED11EC9FECB684C4F9AE02.roa (hash: zJN3acv9ayXjwClXN+TFdLgFpvS8eJBhB0ozDn6n5tM=) 4: A1258398391F11EBAD1E3A2CC4F9AE02.roa (hash: Da5NIAHcmdMgp5JxJkO45xluMyV/GqRZnPfn2LZAkWg=) 5: 5549A1DA0ADD11EC8109AE1EC4F9AE02.roa (hash: flG8zs3dLdSwmFvocfReYcth3vDewp3z9e3HTP6Ga88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Apr 30 23:41:24 2024 GMT Not After : May 7 23:41:24 2024 GMT Subject: CN=663181a4-978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d3:f5:c1:c7:8c:c3:20:6f:03:0c:b1:c0:b8: 6d:67:86:36:81:d3:14:c3:59:c6:95:38:60:0e:f9: fc:58:30:1a:86:b8:c2:6c:8d:d9:9d:0e:7f:52:f3: a8:85:5f:dc:3b:05:ea:59:7f:98:19:30:22:12:09: b8:2f:06:ab:6e:12:f0:d2:20:e3:17:a0:9c:38:4e: 53:09:a2:9c:8e:88:eb:59:79:db:1a:84:a3:5b:9d: fa:56:0b:a7:ad:17:db:e8:23:f7:de:53:4c:c4:52: 1a:aa:d1:99:1e:ca:62:30:5d:38:d7:b8:46:7e:80: 00:87:94:a3:b5:d8:64:c9:91:9d:e6:d1:34:df:b6: 80:c0:f0:71:d8:bf:a4:6c:e3:90:d9:69:fe:65:c1: d2:63:9b:47:9f:de:4c:47:3e:02:b8:1c:0e:f9:8a: c0:7b:46:ac:40:4b:91:1f:3e:f5:b7:2d:cc:3e:f3: 74:bb:89:f3:51:9a:76:54:a7:14:8a:69:c7:45:34: 1b:87:91:41:89:cd:44:53:dd:96:72:5e:95:b9:3d: b8:ee:a1:f6:78:ee:ab:b4:30:de:5f:2c:03:e1:83: e5:d5:5f:88:b3:32:da:2f:bf:16:c4:a1:ed:d5:f9: 9a:69:5e:e3:3f:7c:1f:70:7d:8c:ec:a9:8d:80:6b: 48:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7A:A8:1D:47:D7:90:57:49:22:D1:50:32:7F:C2:02:5B:4E:D8:98 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:49:a4:e9:e2:a7:12:bc:b6:ca:6d:49:9e:de:2e:e9:f7:0a: 21:f9:92:2f:76:44:a9:6b:0f:9b:fc:25:a7:6d:c8:43:f6:06: 77:12:88:ff:c8:b5:ea:52:bb:4b:2a:47:1f:0c:e4:72:07:e9: 92:1a:7e:c6:04:7c:57:3b:48:37:4e:a6:80:e4:bf:1d:8d:b1: 54:af:e5:b7:56:c2:fe:33:3e:67:7b:4b:07:bb:84:ce:d9:07: ce:6e:9e:6c:10:d2:bd:13:83:bd:31:b1:9d:da:26:5e:ad:47: 18:56:ef:cd:bd:49:a9:03:25:8f:6c:56:e5:7d:8b:ad:74:93: a3:33:90:72:c9:07:3d:ec:a4:00:30:33:a9:42:86:81:55:10: e3:77:61:1d:43:e0:a3:fb:5a:7b:16:c8:cf:92:7f:21:94:df: 82:d3:00:28:93:bc:e7:86:f6:84:e1:63:b4:c2:93:a2:f2:d6: 92:f6:93:95:00:da:8a:3f:eb:99:48:74:ce:9c:81:eb:98:7a: e6:ed:ad:24:92:d7:3c:a7:8e:de:34:fb:bb:67:8a:e8:a7:18: ef:37:7b:e5:e6:ef:58:0a:35:ff:18:24:6c:5f:37:e7:09:49: b5:34:ad:97:4a:5b:60:e8:63:ce:fc:ab:c2:ee:b6:fb:8e:d7: 5e:80:00:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjQwNDMwMjM0MTI0WhcNMjQwNTA3MjM0MTI0WjAYMRYwFAYD VQQDEw02NjMxODFhNC05NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NP1wceMwyBvAwyxwLhtZ4Y2gdMUw1nGlThgDvn8WDAahrjCbI3ZnQ5/UvOo hV/cOwXqWX+YGTAiEgm4LwarbhLw0iDjF6CcOE5TCaKcjojrWXnbGoSjW536Vgun rRfb6CP33lNMxFIaqtGZHspiMF0417hGfoAAh5SjtdhkyZGd5tE037aAwPBx2L+k bOOQ2Wn+ZcHSY5tHn95MRz4CuBwO+YrAe0asQEuRHz71ty3MPvN0u4nzUZp2VKcU imnHRTQbh5FBic1EU92Wcl6VuT247qH2eO6rtDDeXywD4YPl1V+IszLaL78WxKHt 1fmaaV7jP3wfcH2M7KmNgGtIBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd6qB1H 15BXSSLRUDJ/wgJbTtiYMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSaTp4qcSvLbKbUme3i7p9woh+ZIvdkSpaw+b/CWnbchD9gZ3Eoj/ yLXqUrtLKkcfDORyB+mSGn7GBHxXO0g3TqaA5L8djbFUr+W3VsL+Mz5ne0sHu4TO 2QfObp5sENK9E4O9MbGd2iZerUcYVu/NvUmpAyWPbFblfYutdJOjM5ByyQc97KQA MDOpQoaBVRDjd2EdQ+Cj+1p7FsjPkn8hlN+C0wAok7znhvaE4WO0wpOi8taS9pOV ANqKP+uZSHTOnIHrmHrm7a0kktc8p47eNPu7Z4ropxjvN3vl5u9YCjX/GCRsXzfn CUm1NK2XSltg6GPO/KvC7rb7jtdegABW -----END CERTIFICATE-----Generated at Wed May 1 00:35:51 2024 by rpki-client on console-ams.rpki-client.org