$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: RWoqFFxd8WG/fLjQ9MF9fFXNrXTsKYhruZAdfWnZ0dk= Subject key identifier: 0E:21:FC:B3:26:1F:2A:DD:1C:31:B9:00:C0:93:1F:1C:02:7D:E4:51 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0889 Signing time: Sat 18 May 2024 21:34:40 +0000 Manifest this update: Sat 18 May 2024 21:34:39 +0000 Manifest next update: Sat 25 May 2024 21:34:39 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: lJPTYe/MGyFCV3QvngBY7ANnDOm9fCgJpclM50B/WRs=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: /ALNmUUfkan7o10t4zkUbM7wqYiKdOA6D1/Q9Xsm8/U=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AQ3o+GfHhVU06Z566pSWoHu8x3nSgyx8mCy+hQvqGEc=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: xQqoae/tPKWvzjrxyk3lVCq70Z56Y74w86x5I0sSs00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: May 18 21:34:39 2024 GMT Not After : May 25 21:34:39 2024 GMT Subject: CN=66491eef-804e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:74:b7:f2:ec:7c:a8:9e:8c:8e:07:65:6c: 6c:4d:c6:a5:dc:d9:5d:c4:a0:09:8d:54:94:c2:d8: 6f:ca:2a:6d:27:0d:6d:06:37:ec:9d:f8:bf:01:92: e5:c8:ac:8c:0a:40:a7:b6:e9:d0:ae:0c:c9:10:9a: 52:df:d2:42:ab:60:23:e3:61:de:e1:fe:81:93:81: e8:c6:25:2d:58:d3:49:66:b5:6a:dd:bf:e4:f0:5f: 37:8d:59:8d:d5:b3:39:f6:bf:61:cc:54:c2:1b:9b: 7a:e8:b2:c7:1b:ae:28:23:f8:12:bb:25:5a:0f:a0: 47:17:70:8e:65:f1:9e:3a:de:8b:f9:90:4a:14:86: 8e:13:d6:0d:19:6f:86:e1:ba:40:dd:87:c9:69:5f: 26:58:33:4e:ac:cf:62:98:06:70:2b:86:21:23:ad: 25:be:b9:29:35:6c:04:8b:0a:27:23:06:61:c3:83: c7:32:44:37:f5:96:d2:6c:36:89:b6:e2:67:bf:c0: a4:c8:07:6d:34:1c:43:10:b4:35:6c:de:b5:60:f1: 59:4a:2b:d1:8c:68:c9:05:bc:9e:c1:00:ba:d9:d9: b1:05:f5:a4:d8:0f:5f:fc:24:04:e5:c0:1a:62:32: b6:31:1f:68:b1:db:90:bb:2f:32:24:d2:62:61:bd: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:21:FC:B3:26:1F:2A:DD:1C:31:B9:00:C0:93:1F:1C:02:7D:E4:51 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8f:37:44:e9:52:56:6e:91:3a:22:35:2a:f8:b3:4c:25:b2: 12:ff:fb:b3:7d:87:01:f6:8f:46:21:46:b7:2b:98:50:a0:b8: 73:d0:68:b7:ba:36:23:dc:f4:32:45:9b:2b:0c:1f:c4:7b:c5: 4b:55:ca:75:a6:89:3a:34:09:08:ed:81:d2:e6:3d:80:c1:b4: e7:09:71:f0:ae:67:f3:c1:ec:d0:44:f1:0a:fb:99:3d:fc:ce: 1d:42:40:6b:c4:6e:d4:56:31:16:56:a8:20:6e:26:5a:fa:35: db:03:3a:1e:97:14:56:91:74:44:7a:c0:f3:63:39:ab:0b:10: c7:55:3a:20:00:12:b8:6b:4e:ab:2e:72:0e:e0:35:f5:4c:3b: 6b:b6:da:f7:d2:ed:33:fe:55:3d:53:ad:55:51:a0:7d:44:57: 3c:3b:f5:b4:67:24:8c:dd:c2:46:2d:fd:dd:77:5f:d7:af:9e: c8:16:54:d0:25:14:af:2d:68:91:94:86:f0:d3:a7:a0:3f:e2: 9f:c2:d6:3a:d9:0d:ca:d4:b0:6a:bd:ba:3b:6f:bb:58:f4:44: fc:76:a6:8a:7a:b9:40:7c:a4:37:5e:92:8f:33:94:62:43:f2: e2:ba:a1:f8:b9:ff:0f:46:17:31:00:7f:96:61:d3:dd:24:61: e9:fd:67:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjQwNTE4MjEzNDM5WhcNMjQwNTI1MjEzNDM5WjAYMRYwFAYD VQQDEw02NjQ5MWVlZi04MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWl0t/LsfKiejI4HZWxsTcal3NldxKAJjVSUwthvyiptJw1tBjfsnfi/AZLl yKyMCkCntunQrgzJEJpS39JCq2Aj42He4f6Bk4HoxiUtWNNJZrVq3b/k8F83jVmN 1bM59r9hzFTCG5t66LLHG64oI/gSuyVaD6BHF3COZfGeOt6L+ZBKFIaOE9YNGW+G 4bpA3YfJaV8mWDNOrM9imAZwK4YhI60lvrkpNWwEiwonIwZhw4PHMkQ39ZbSbDaJ tuJnv8CkyAdtNBxDELQ1bN61YPFZSivRjGjJBbyewQC62dmxBfWk2A9f/CQE5cAa YjK2MR9osduQuy8yJNJiYb1nmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4h/LMm HyrdHDG5AMCTHxwCfeRRMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxjzdE6VJWbpE6IjUq+LNMJbIS//uzfYcB9o9GIUa3K5hQoLhz0Gi3 ujYj3PQyRZsrDB/Ee8VLVcp1pok6NAkI7YHS5j2AwbTnCXHwrmfzwezQRPEK+5k9 /M4dQkBrxG7UVjEWVqggbiZa+jXbAzoelxRWkXREesDzYzmrCxDHVTogABK4a06r LnIO4DX1TDtrttr30u0z/lU9U61VUaB9RFc8O/W0ZySM3cJGLf3dd1/Xr57IFlTQ JRSvLWiRlIbw06egP+KfwtY62Q3K1LBqvbo7b7tY9ET8dqaKerlAfKQ3XpKPM5Ri Q/LiuqH4uf8PRhcxAH+WYdPdJGHp/WdI -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org