$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: o9mL7SBYgjPsuFV+8ptQciYHjbYwamRKwmSX6AZUz88= Subject key identifier: D1:AC:02:A5:21:2D:2E:48:F9:EA:8A:AD:E1:29:BE:B2:32:C2:2F:FF Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 02F0 Signing time: Sun 19 May 2024 03:18:01 +0000 Manifest this update: Sun 19 May 2024 03:18:00 +0000 Manifest next update: Sun 26 May 2024 03:18:00 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: 8bFiwd/+Ku53BdC6fGHttJks0SkBYm7tebfS494A/R0=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: CLX/342a3JMAuWhx7hI0idArAqPxfekE5e1Orgg5wlY=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: YIJ5sYo3DcOoEoVS1EI3sWkB/OrMpwPc6liB+UnlFhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: May 19 03:18:00 2024 GMT Not After : May 26 03:18:00 2024 GMT Subject: CN=66496f69-2cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:b5:47:26:1e:ad:05:45:4d:ea:30:82:d0: 8c:58:ec:d2:9b:af:0a:c9:bf:d9:4a:1b:d8:23:4e: 59:5f:14:d8:0f:11:2d:17:65:48:a3:eb:76:ce:31: 22:70:85:1b:01:a6:f4:6e:bd:f9:d5:d7:74:9b:fa: da:61:f0:21:7a:29:24:72:f5:17:f4:08:db:3f:d9: 95:dd:82:a5:e2:c3:82:60:25:97:bb:39:95:05:f5: 7d:99:bc:7d:d9:eb:cf:d2:e4:79:87:16:4f:54:21: 88:67:a2:34:c1:dc:20:d2:54:81:10:62:6d:ad:bb: a7:90:4f:25:2c:29:bc:de:4a:c0:02:8d:59:fc:e1: a7:f2:2e:4a:b1:63:72:d9:01:57:88:6a:9b:0e:c0: 98:47:9b:6d:cd:fc:5c:68:b0:3a:b8:f1:7b:1e:cf: a5:23:e5:19:b5:1a:04:98:5f:c1:74:c1:e9:1c:f0: d7:c2:be:87:c3:b5:f1:cf:d5:e3:70:c8:88:f5:81: b7:de:99:95:05:ea:f3:ba:ce:06:6c:24:01:d5:05: e9:27:22:df:61:6b:0c:b3:93:28:3a:c1:43:dc:7b: ff:4c:51:44:bd:8c:b1:98:6c:a6:4d:43:fa:2d:d2: 9a:8a:f8:b0:f8:ce:6a:68:e2:70:81:a6:f8:3a:2d: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AC:02:A5:21:2D:2E:48:F9:EA:8A:AD:E1:29:BE:B2:32:C2:2F:FF X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:ad:34:1d:b2:21:2d:85:7c:f9:bc:31:b3:75:1d:78:02: 9a:eb:d4:b8:58:04:0c:4b:de:7c:77:50:e2:5f:20:a9:d0:b2: d0:f1:4c:4f:fc:a8:12:72:10:5c:0d:ef:f3:fc:32:c5:8f:1c: da:a9:dc:ab:e7:c0:46:54:28:f5:7b:7b:62:47:6c:f3:47:c9: 7f:0e:d2:b3:d1:49:6a:75:ff:31:ea:6d:10:ba:55:e4:1f:90: 02:95:b4:7e:08:33:89:8c:d6:c1:1c:a7:24:95:b3:dc:b0:45: ad:2e:87:95:f4:80:5e:ca:2c:7c:4b:82:c6:30:17:80:b2:1b: c0:92:de:b1:3d:01:e3:5e:66:bc:cb:73:dd:f0:a4:ac:7e:e0: 20:9b:9f:03:19:91:a1:bc:38:40:fe:4f:d4:6e:f9:fd:7e:0a: a7:2b:86:31:b4:d0:5a:65:e2:34:b4:62:d9:ef:46:65:08:9c: 74:b8:01:eb:2a:06:51:bd:83:a8:da:84:bd:e1:e1:cd:b1:bc: ad:2c:d4:d3:9d:33:73:e4:bb:cc:61:35:a9:77:d6:82:d0:d0: 0d:70:e8:fb:d5:26:a5:a3:f8:89:69:bd:2c:cc:21:20:0a:e3: 61:ae:de:b6:b5:be:40:2a:c2:c7:0c:cb:de:3e:f9:6f:27:5b: a0:ce:22:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjQwNTE5MDMxODAwWhcNMjQwNTI2MDMxODAwWjAYMRYwFAYD VQQDEw02NjQ5NmY2OS0yY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopm1RyYerQVFTeowgtCMWOzSm68Kyb/ZShvYI05ZXxTYDxEtF2VIo+t2zjEi cIUbAab0br351dd0m/raYfAheikkcvUX9AjbP9mV3YKl4sOCYCWXuzmVBfV9mbx9 2evP0uR5hxZPVCGIZ6I0wdwg0lSBEGJtrbunkE8lLCm83krAAo1Z/OGn8i5KsWNy 2QFXiGqbDsCYR5ttzfxcaLA6uPF7Hs+lI+UZtRoEmF/BdMHpHPDXwr6Hw7Xxz9Xj cMiI9YG33pmVBerzus4GbCQB1QXpJyLfYWsMs5MoOsFD3Hv/TFFEvYyxmGymTUP6 LdKaiviw+M5qaOJwgab4Oi0xQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGsAqUh LS5I+eqKreEpvrIywi//MB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUK00HbIhLYV8+bwxs3UdeAKa69S4WAQMS958d1DiXyCp0LLQ8UxP /KgSchBcDe/z/DLFjxzaqdyr58BGVCj1e3tiR2zzR8l/DtKz0Ulqdf8x6m0QulXk H5AClbR+CDOJjNbBHKcklbPcsEWtLoeV9IBeyix8S4LGMBeAshvAkt6xPQHjXma8 y3Pd8KSsfuAgm58DGZGhvDhA/k/Ubvn9fgqnK4YxtNBaZeI0tGLZ70ZlCJx0uAHr KgZRvYOo2oS94eHNsbytLNTTnTNz5LvMYTWpd9aC0NANcOj71Salo/iJab0szCEg CuNhrt62tb5AKsLHDMvePvlvJ1ugziKJ -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org