$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: okEpIg8yymT5i7eFd4hKkAmuGfCWRdSIS/VyI+m7Mfs= Subject key identifier: 6D:C7:1C:CB:38:2E:6E:F0:74:70:0E:60:3B:4C:DD:7B:59:8D:A3:E3 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 33FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 33E1 Signing time: Fri 31 May 2024 15:35:05 +0000 Manifest this update: Fri 31 May 2024 15:35:05 +0000 Manifest next update: Fri 07 Jun 2024 15:35:05 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: 9Fe28YXha1wiJVyfrxHoqe2rYmTEUEUrVhZf5bV3/bU=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: bLqfp6BmlTrHoAHcIjzpZV18YO7xoznRW8Pc6N89DMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13309 (0x33fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: May 31 15:35:05 2024 GMT Not After : Jun 7 15:35:05 2024 GMT Subject: CN=6659ee29-0876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:25:7b:32:e9:c1:f4:17:90:aa:61:04:42: b5:4f:43:6d:f2:c9:19:a1:73:d0:2e:97:d5:97:49: b6:67:39:b7:5e:0d:16:16:fc:c1:cd:24:21:ff:ee: 7f:fa:af:f0:2a:fe:b6:1f:7d:54:b7:9f:c1:0c:c0: 4e:da:7b:00:a7:9e:5e:4a:b6:bb:06:27:11:c4:5e: fc:93:10:7f:7f:d9:b1:5b:c6:f7:51:32:1a:f9:a0: 11:cd:30:97:94:08:93:dd:ed:23:2a:64:1b:75:0d: a7:e8:38:98:23:44:35:af:71:bc:75:ae:f0:f6:79: d6:6a:61:2a:68:7e:6e:00:6b:90:78:1c:3f:7a:7e: e1:a3:7b:4f:10:cb:d5:71:aa:38:2c:21:94:4a:59: 2d:33:e1:66:fb:dc:b6:45:54:b1:d0:3e:8e:e3:83: eb:32:8f:64:a4:fc:33:ae:94:33:4f:9d:64:f6:8f: 5c:aa:05:0e:a8:36:ef:46:28:5a:20:09:d5:44:87: e0:9d:77:61:b0:2f:d9:07:d3:76:01:10:ea:37:64: 7c:ee:0c:b5:89:e1:1e:37:1a:18:3f:e0:2d:8c:21: 44:ca:c0:05:25:51:f8:4d:d0:b9:06:51:1b:3f:c7: 26:f2:4e:0a:d7:20:4b:37:85:bb:24:59:90:1e:35: 1c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C7:1C:CB:38:2E:6E:F0:74:70:0E:60:3B:4C:DD:7B:59:8D:A3:E3 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e5:4a:b8:6e:74:2c:f1:a0:b2:71:c0:74:9a:ed:13:15:b3: 59:09:e9:15:26:7f:2d:e2:9c:0a:26:e1:93:2a:68:a3:1b:0e: 57:bc:27:ec:dd:ee:c7:7e:08:d3:2f:2c:d6:75:d1:1e:37:c8: 96:1a:c0:01:35:a7:7f:a1:15:88:c8:0f:81:bb:7d:a6:c0:a2: 74:27:3f:ec:6b:65:87:05:6b:b7:45:3d:f2:d1:b8:80:51:c2: 9b:fa:34:3e:a0:3f:b8:ca:ea:a2:af:d2:9e:83:23:f8:a4:91: 64:e7:f9:2f:8d:19:42:21:d8:4a:0c:7d:65:09:4a:46:b8:7f: 62:8d:9c:b5:6a:c0:2e:f0:6b:d9:db:df:eb:f5:91:d6:10:f5: ad:28:4f:63:56:56:8f:5b:c0:2f:b2:a6:e6:66:47:8e:c3:1f: 8c:84:c6:f0:2d:c7:86:02:a1:d3:73:5c:fe:ec:e0:dd:23:4c: b4:01:4a:45:d1:f1:0f:6f:1d:8e:cc:89:cb:96:25:bd:91:ec: 3c:ac:b4:80:81:c5:54:47:ae:0d:52:34:62:18:0c:63:73:a6: 97:68:fc:77:bf:ee:88:ef:a8:da:4f:38:da:69:1c:66:b9:37: fa:f9:64:81:5d:f2:bf:6d:5c:33:b6:58:42:58:b9:3d:00:49: 43:6f:98:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjQwNTMxMTUzNTA1WhcNMjQwNjA3MTUzNTA1WjAYMRYwFAYD VQQDEw02NjU5ZWUyOS0wODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG4lezLpwfQXkKphBEK1T0Nt8skZoXPQLpfVl0m2Zzm3Xg0WFvzBzSQh/+5/ +q/wKv62H31Ut5/BDMBO2nsAp55eSra7BicRxF78kxB/f9mxW8b3UTIa+aARzTCX lAiT3e0jKmQbdQ2n6DiYI0Q1r3G8da7w9nnWamEqaH5uAGuQeBw/en7ho3tPEMvV cao4LCGUSlktM+Fm+9y2RVSx0D6O44PrMo9kpPwzrpQzT51k9o9cqgUOqDbvRiha IAnVRIfgnXdhsC/ZB9N2ARDqN2R87gy1ieEeNxoYP+AtjCFEysAFJVH4TdC5BlEb P8cm8k4K1yBLN4W7JFmQHjUcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3HHMs4 Lm7wdHAOYDtM3XtZjaPjMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5Uq4bnQs8aCyccB0mu0TFbNZCekVJn8t4pwKJuGTKmijGw5XvCfs 3e7HfgjTLyzWddEeN8iWGsABNad/oRWIyA+Bu32mwKJ0Jz/sa2WHBWu3RT3y0biA UcKb+jQ+oD+4yuqir9KegyP4pJFk5/kvjRlCIdhKDH1lCUpGuH9ijZy1asAu8GvZ 29/r9ZHWEPWtKE9jVlaPW8AvsqbmZkeOwx+MhMbwLceGAqHTc1z+7ODdI0y0AUpF 0fEPbx2OzInLliW9kew8rLSAgcVUR64NUjRiGAxjc6aXaPx3v+6I76jaTzjaaRxm uTf6+WSBXfK/bVwztlhCWLk9AElDb5hE -----END CERTIFICATE-----Generated at Fri May 31 16:41:45 2024 by rpki-client on console-ams.rpki-client.org