$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: QH+TRxSxNKBX3zwBPvEUsR9Nof0O4O9WZZYQ068tcnw= Subject key identifier: C8:7D:2F:96:97:DC:5B:9E:35:3C:8C:30:4B:8A:99:1A:AE:EC:EB:E1 Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2E51 Signing time: Fri 31 May 2024 15:49:38 +0000 Manifest this update: Fri 31 May 2024 15:49:38 +0000 Manifest next update: Fri 07 Jun 2024 15:49:38 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: +6ryZHTG00ZX/SNfZ4Nz8vI1WqlUJ26FmM08od6QATQ=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: 9+XllQCwnWA8kHK0XFOl98KK3RLYOi3finy1cm0lLFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11875 (0x2e63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: May 31 15:49:38 2024 GMT Not After : Jun 7 15:49:38 2024 GMT Subject: CN=6659f192-ec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:96:7f:d9:3d:82:8c:77:e3:53:4f:7e:db: 12:90:ad:46:dc:6c:d7:bd:65:5e:1a:1f:d9:b9:ba: 16:57:fd:d2:e3:c8:75:89:97:d8:39:83:61:82:6f: 06:a9:af:d1:42:bf:f1:55:00:67:3b:f4:ac:97:d4: ed:1e:e5:66:2c:0f:dd:d2:3d:c6:98:a2:ee:4f:05: 84:d3:0d:00:b3:ab:f2:1f:27:1d:e6:2b:b6:03:a3: 9a:1a:23:79:3f:c1:ee:68:6f:f4:ad:d2:47:34:82: 72:e6:4e:85:52:1e:40:98:01:74:21:66:4f:3b:3d: 5a:a9:00:87:23:41:6b:27:e6:06:44:16:db:5f:c9: a2:c2:63:4c:ee:20:5c:c5:f9:a3:d4:c2:4f:57:84: 4d:ab:a1:8a:3f:d0:6f:be:35:4a:43:46:94:25:28: 73:2e:9e:b5:42:a5:00:40:c6:25:fa:80:a0:8d:b4: 74:4b:33:07:c5:75:a3:ce:23:43:2d:60:76:72:8b: 06:da:bb:0f:8e:4d:26:43:fa:4d:2d:bf:39:99:56: 9c:5b:df:53:9e:08:ec:35:b3:e1:bd:1a:d4:d8:53: 18:13:6e:73:fb:ac:80:23:1e:d6:50:a8:ba:02:83: d0:a1:4c:a7:14:08:b6:ab:8f:3c:1a:12:b9:a8:6a: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:2F:96:97:DC:5B:9E:35:3C:8C:30:4B:8A:99:1A:AE:EC:EB:E1 X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:38:36:39:97:9e:d0:f9:63:b7:91:8b:05:c3:d1:88:f8:8d: 2b:04:bf:f5:26:85:c7:5f:ec:fe:eb:0a:6f:b0:97:d4:1b:0c: 5e:9c:7f:c9:04:75:19:27:86:69:70:74:8b:7e:d7:4f:71:df: 34:e8:19:39:50:08:00:b9:b6:e6:2c:b0:f3:c3:b3:6f:b3:c2: c1:c0:19:23:0e:31:d8:8b:61:bf:99:9c:19:62:b6:22:17:0a: 1d:74:33:12:1e:a4:1f:c3:8a:44:52:12:22:59:56:50:88:71: df:e8:6c:76:c2:39:37:83:55:e2:f2:83:8b:00:72:36:6d:48: 52:1d:97:a3:8b:68:45:10:4d:d3:57:73:92:91:43:36:33:fe: fe:70:95:ad:a8:ca:40:d4:e6:36:75:06:ff:94:c8:e3:31:2f: e0:28:f7:8e:ec:6e:e6:8a:0b:c6:45:f2:7e:3a:5b:2a:a7:67: 52:02:72:d4:7d:c8:4c:0e:f7:36:bf:cb:07:63:b1:56:d7:b0: 75:39:25:35:b9:ca:d7:c6:1e:d7:4e:e9:cc:61:a8:4b:eb:63: 6b:a5:b0:ab:32:a2:37:df:6d:cd:59:53:ba:52:f1:11:b5:88: da:66:9e:03:14:f3:ca:bf:00:df:08:81:76:c7:d3:0f:ad:67: e5:c3:6b:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjQwNTMxMTU0OTM4WhcNMjQwNjA3MTU0OTM4WjAYMRYwFAYD VQQDEw02NjU5ZjE5Mi1lYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z2Wf9k9gox341NPftsSkK1G3GzXvWVeGh/ZuboWV/3S48h1iZfYOYNhgm8G qa/RQr/xVQBnO/Ssl9TtHuVmLA/d0j3GmKLuTwWE0w0As6vyHycd5iu2A6OaGiN5 P8HuaG/0rdJHNIJy5k6FUh5AmAF0IWZPOz1aqQCHI0FrJ+YGRBbbX8miwmNM7iBc xfmj1MJPV4RNq6GKP9BvvjVKQ0aUJShzLp61QqUAQMYl+oCgjbR0SzMHxXWjziND LWB2cosG2rsPjk0mQ/pNLb85mVacW99TngjsNbPhvRrU2FMYE25z+6yAIx7WUKi6 AoPQoUynFAi2q488GhK5qGqX6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh9L5aX 3FueNTyMMEuKmRqu7OvhMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMODY5l57Q+WO3kYsFw9GI+I0rBL/1JoXHX+z+6wpvsJfUGwxenH/J BHUZJ4ZpcHSLftdPcd806Bk5UAgAubbmLLDzw7Nvs8LBwBkjDjHYi2G/mZwZYrYi FwoddDMSHqQfw4pEUhIiWVZQiHHf6Gx2wjk3g1Xi8oOLAHI2bUhSHZeji2hFEE3T V3OSkUM2M/7+cJWtqMpA1OY2dQb/lMjjMS/gKPeO7G7migvGRfJ+Olsqp2dSAnLU fchMDvc2v8sHY7FW17B1OSU1ucrXxh7XTunMYahL62NrpbCrMqI3323NWVO6UvER tYjaZp4DFPPKvwDfCIF2x9MPrWflw2s5 -----END CERTIFICATE-----Generated at Fri May 31 16:41:45 2024 by rpki-client on console-ams.rpki-client.org