$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: aG1VPQQEUoxUeFH9EPquq/EymXdIfT5lVzOX2iR3GR0= Subject key identifier: 83:B9:7E:F4:8E:B3:E4:CC:F8:E7:91:D4:68:F4:CE:14:54:E7:75:91 Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0AA2 Signing time: Sat 18 May 2024 20:11:14 +0000 Manifest this update: Sat 18 May 2024 20:11:13 +0000 Manifest next update: Sat 25 May 2024 20:11:13 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 2w7ymw+BasDvdVw7I3Oe7h1MTP3wuz8pTw7vfxt1hMw=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: 8XS5neYx9p+UU07eXX8+RNfmtxbleVY94+kDi4HT678=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: May 18 20:11:13 2024 GMT Not After : May 25 20:11:13 2024 GMT Subject: CN=66490b62-9deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:3d:c1:b4:f9:ac:13:86:2a:ae:f2:67:69: 12:6c:0b:c7:fe:67:6e:5c:d1:65:49:38:b0:09:88: 97:d8:06:70:94:81:ec:9c:e4:b4:c9:cb:43:cc:17: 1f:f2:3d:bf:c7:d7:7a:77:fd:09:0d:d0:30:81:21: c5:01:24:b5:26:a5:91:55:fb:75:d3:11:d8:b9:81: 5d:8d:a4:d3:1a:8d:3c:d7:5a:91:d4:95:7f:eb:e8: fb:27:e8:a8:70:a8:bb:31:3c:a6:7a:66:1d:af:e5: ee:6c:58:01:f7:70:c7:2f:ff:ae:24:35:01:e6:2f: 88:74:55:e3:10:2a:cf:26:6e:61:ab:ac:2a:de:b2: 6f:56:e7:e0:5d:e3:51:61:55:b7:75:0b:51:e6:8b: 67:6d:7a:72:b6:9b:43:76:96:ab:76:be:a5:0a:d9: 22:f3:54:32:73:32:ee:1a:5e:0e:e8:ea:54:f6:87: 56:74:3c:7c:1d:aa:0b:9f:7e:b6:11:bd:0b:e8:88: 8d:e7:bd:3e:cb:8c:f8:72:d4:fb:c3:8a:6e:af:9d: b5:f8:83:95:50:6c:71:7f:40:d1:ad:b4:8a:fc:92: 99:51:70:6c:ed:0f:dc:56:db:1f:a2:1e:c2:89:54: 63:75:44:e4:3c:f8:28:59:12:4e:3e:c6:95:93:3f: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B9:7E:F4:8E:B3:E4:CC:F8:E7:91:D4:68:F4:CE:14:54:E7:75:91 X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a5:70:bc:ad:0f:4e:01:d0:2c:23:8b:a4:87:f3:45:f2:43: 74:7a:39:1e:a2:8b:aa:8b:e2:6b:70:4d:a2:7f:1e:a5:8b:3a: db:47:d0:b6:36:39:1b:c4:31:fe:46:83:81:93:22:5d:17:90: 14:da:31:2f:9c:a7:01:1d:c5:54:5d:45:00:31:55:e2:5f:74: 3b:64:24:37:bd:b9:0d:12:8d:c9:50:a3:ca:f9:ad:17:05:92: 1e:b3:9f:0c:d5:d7:cd:1e:c5:7d:e8:49:2e:48:c7:b8:a2:a4: 13:06:8e:c0:1e:d2:d2:b1:54:73:cf:47:b7:bb:7d:f4:87:39: 11:74:18:07:27:71:51:3b:ca:18:bf:d0:a9:c7:7c:b6:81:34: 06:44:f4:98:a1:8f:4f:f1:32:c3:18:68:6c:fe:47:31:7a:91: f2:12:a1:38:dc:30:00:9d:e5:6a:05:06:b8:33:e9:b4:ee:d2: 9e:81:2d:91:e9:6f:1b:0e:f2:04:e0:54:25:ee:14:53:e7:bd: 1a:a2:20:9d:72:20:24:93:01:ff:3e:bc:cc:4f:e7:e3:9c:0c: ee:ab:23:fe:a3:56:86:56:33:33:ae:db:0d:9e:1b:9e:ff:77: d9:30:90:3e:56:31:b0:f0:07:57:4e:90:2d:bf:7c:e6:95:ca: 84:96:e4:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjQwNTE4MjAxMTEzWhcNMjQwNTI1MjAxMTEzWjAYMRYwFAYD VQQDEw02NjQ5MGI2Mi05ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxk9wbT5rBOGKq7yZ2kSbAvH/mduXNFlSTiwCYiX2AZwlIHsnOS0yctDzBcf 8j2/x9d6d/0JDdAwgSHFASS1JqWRVft10xHYuYFdjaTTGo0811qR1JV/6+j7J+io cKi7MTymemYdr+XubFgB93DHL/+uJDUB5i+IdFXjECrPJm5hq6wq3rJvVufgXeNR YVW3dQtR5otnbXpytptDdpardr6lCtki81QyczLuGl4O6OpU9odWdDx8HaoLn362 Eb0L6IiN570+y4z4ctT7w4pur521+IOVUGxxf0DRrbSK/JKZUXBs7Q/cVtsfoh7C iVRjdUTkPPgoWRJOPsaVkz8A0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO5fvSO s+TM+OeR1Gj0zhRU53WRMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFpXC8rQ9OAdAsI4ukh/NF8kN0ejkeoouqi+JrcE2ifx6lizrbR9C2 NjkbxDH+RoOBkyJdF5AU2jEvnKcBHcVUXUUAMVXiX3Q7ZCQ3vbkNEo3JUKPK+a0X BZIes58M1dfNHsV96EkuSMe4oqQTBo7AHtLSsVRzz0e3u330hzkRdBgHJ3FRO8oY v9Cpx3y2gTQGRPSYoY9P8TLDGGhs/kcxepHyEqE43DAAneVqBQa4M+m07tKegS2R 6W8bDvIE4FQl7hRT570aoiCdciAkkwH/PrzMT+fjnAzuqyP+o1aGVjMzrtsNnhue /3fZMJA+VjGw8AdXTpAtv3zmlcqEluTV -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org