$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: BmC6nv9hU94muyz4pmKnyPDpAUj2zmu6T0EgSl7eNNY= Subject key identifier: 16:91:3B:17:FC:4F:95:85:4D:17:E7:51:E9:2E:9D:BE:10:9E:EF:C5 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 025B Signing time: Fri 17 May 2024 04:06:52 +0000 Manifest this update: Fri 17 May 2024 04:06:52 +0000 Manifest next update: Fri 24 May 2024 04:06:52 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: TSQCwyORNv7XJ4/+/2GgUGGkZWmXvbC10m7idR46E8A=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: rYkj+cqdavEEEVOzm5zAB0UsViAMrUymh+0XUvHgo5s=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: FFbOtbUtzY70jFpEJx+aSnSulYpAqaZikKJwbxkQBOI=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: db5ff7Dt1fR6ffXyZIrYQLNs05IT1suyflEtlXf/9qk=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: QLeyWCOS0ejUmvqxNgtY00ABwaPF7nAJcwZO189a2Jo=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: rEkkTHQjDk0EzHxGUkJ4Muk2RuGpLidxyZCpD4NWrII=) 7: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: uzBKeRoyiUgWHze/XD0xAE0hmaAtPanLsp+CIutI86g=) 8: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: ihxLm6XIXBAjIObNodtGB1dJgX0H12HwTIUYBEc7+sU=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: bZ5ZRz8o78woSnKpPdy6Vc68CO6JhfuqCEdIDJIVHtc=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: Mgn5QIiSmPYPUH/aqbwxo5wCbtUrVUm3lRyLz4tcGeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: May 17 04:06:52 2024 GMT Not After : May 24 04:06:52 2024 GMT Subject: CN=6646d7dc-e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:59:2e:c0:07:86:91:dc:26:30:ea:af:5d: 6f:c2:07:0b:7c:8e:58:77:e1:bd:79:dd:19:94:83: d1:c8:61:37:65:d5:77:4c:35:2d:09:0e:7d:d6:cb: 00:2f:85:f4:7e:81:af:06:73:16:e4:81:a2:74:85: be:3b:89:d3:a6:d8:ba:44:9e:df:7c:6e:c3:4d:c8: fd:26:b8:8c:78:43:6c:f5:31:1d:85:3f:73:c0:7b: 40:e9:f0:4b:ff:b7:41:37:70:91:4d:59:10:cc:16: 90:52:9d:87:13:2f:6b:16:12:13:45:e1:ee:f5:03: e3:04:7f:6c:c4:df:de:c0:57:e9:d9:06:f9:8a:41: d1:a9:9b:6a:2e:e6:0b:75:f0:78:2d:c4:f2:e7:89: 4e:4f:2e:17:c7:3a:cb:a5:3a:41:d0:ac:ed:df:c1: 33:5e:80:18:01:7a:63:9f:85:bf:66:e5:0c:03:7f: 98:83:1e:af:b6:10:68:04:f3:23:1a:08:c1:20:5c: 33:30:bf:31:dd:65:c3:d5:f4:34:d4:a4:61:1c:74: f4:3c:b2:61:71:6e:91:59:42:9c:f3:57:29:b2:f8: 8a:25:94:2f:17:6d:ae:d2:5a:a0:b8:cd:c9:89:32: 94:43:a6:f6:e1:89:ce:46:39:48:6a:a2:99:6f:cf: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:3B:17:FC:4F:95:85:4D:17:E7:51:E9:2E:9D:BE:10:9E:EF:C5 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:07:91:0b:35:aa:ba:f1:f8:5f:6f:7f:96:0b:cf:dd:fb:be: c1:03:2f:f0:e2:1c:a2:8f:24:ec:81:13:56:75:8b:66:6b:24: 97:ae:7e:39:dc:8c:26:18:92:1f:97:34:40:70:78:ee:4e:68: ac:ca:2a:23:62:32:64:88:51:a8:b2:d9:a8:f9:93:2b:8f:75: d0:fa:20:68:ca:7c:43:d3:59:91:ef:95:db:55:bd:4c:df:5b: 98:f4:70:1c:4b:42:98:2f:0c:a5:b4:8a:d3:6c:70:ea:96:ce: 8b:97:c4:4e:7d:49:c2:2c:81:b0:f1:d9:18:ac:43:18:e7:63: 6d:92:02:73:48:15:cb:10:86:b2:66:e2:4b:ca:61:7e:85:5a: 10:d7:2f:e5:b3:8c:e6:f4:17:a4:13:4c:84:e6:64:a0:d9:a1: fa:81:21:be:1b:f5:37:9e:0a:28:00:09:0e:e0:b7:65:24:6e: fa:60:17:b6:c0:ad:fc:de:28:2b:aa:37:8f:38:f3:ba:1c:e0: 02:b9:d1:cb:4a:2c:98:a1:05:46:5a:21:83:16:50:7d:39:29: d3:3f:5d:99:98:51:f6:30:78:79:a0:3e:f4:d2:6c:f8:12:cb: 45:74:b1:a3:14:fa:65:8f:8a:48:1f:90:a5:ff:6e:7b:f9:19: 6a:05:c3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjQwNTE3MDQwNjUyWhcNMjQwNTI0MDQwNjUyWjAYMRYwFAYD VQQDEw02NjQ2ZDdkYy1lOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofVZLsAHhpHcJjDqr11vwgcLfI5Yd+G9ed0ZlIPRyGE3ZdV3TDUtCQ591ssA L4X0foGvBnMW5IGidIW+O4nTpti6RJ7ffG7DTcj9JriMeENs9TEdhT9zwHtA6fBL /7dBN3CRTVkQzBaQUp2HEy9rFhITReHu9QPjBH9sxN/ewFfp2Qb5ikHRqZtqLuYL dfB4LcTy54lOTy4XxzrLpTpB0Kzt38EzXoAYAXpjn4W/ZuUMA3+Ygx6vthBoBPMj GgjBIFwzML8x3WXD1fQ01KRhHHT0PLJhcW6RWUKc81cpsviKJZQvF22u0lqguM3J iTKUQ6b24YnORjlIaqKZb8/1FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaROxf8 T5WFTRfnUekunb4Qnu/FMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/B5ELNaq68fhfb3+WC8/d+77BAy/w4hyijyTsgRNWdYtmaySXrn45 3IwmGJIflzRAcHjuTmisyiojYjJkiFGostmo+ZMrj3XQ+iBoynxD01mR75XbVb1M 31uY9HAcS0KYLwyltIrTbHDqls6Ll8ROfUnCLIGw8dkYrEMY52NtkgJzSBXLEIay ZuJLymF+hVoQ1y/ls4zm9BekE0yE5mSg2aH6gSG+G/U3ngooAAkO4LdlJG76YBe2 wK383igrqjePOPO6HOACudHLSiyYoQVGWiGDFlB9OSnTP12ZmFH2MHh5oD700mz4 EstFdLGjFPplj4pIH5Cl/257+RlqBcMa -----END CERTIFICATE-----Generated at Fri May 17 06:18:11 2024 by rpki-client on console-fra.rpki-client.org