$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: 0gDYhONAewkjTtxHlqlYgn1m98U7hB+fqObZY05Rp6A= Subject key identifier: CC:DC:60:BC:C4:45:A2:DD:B4:F6:C0:30:DC:CF:12:8A:64:F5:C9:F4 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 091F Signing time: Sat 04 May 2024 21:22:32 +0000 Manifest this update: Sat 04 May 2024 21:22:31 +0000 Manifest next update: Sat 11 May 2024 21:22:31 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: 0B3gS/qhIA5T7QEWmbY8vSbbBjYgT6xJmbHfPw3A6Sw=) 2: 1101AA0A7BBD11EA8356C986C4F9AE02.roa (hash: 98MEm2HyK4Hb9plqCE+xEehx0hLxsjA6sujCW9nUDnQ=) 3: 6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa (hash: rBeMqqjcvlnKQuScHXOpRNTNypbrNSlcAeD3UhfyPAI=) 4: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: cOvIb1PqggIER+IfmoGTkc0GPzDixU9cc0Ur8Ius0YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: May 4 21:22:31 2024 GMT Not After : May 11 21:22:31 2024 GMT Subject: CN=6636a717-efd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:47:6a:25:0a:46:75:d5:7e:5a:ff:c4:24: 7c:d8:12:86:8e:8a:21:fd:31:df:65:7c:d6:dd:68: e6:9b:c8:42:b4:00:5f:94:9a:de:90:5f:41:87:a5: c7:17:f3:e2:41:48:da:1c:bd:b0:a4:d1:8f:11:d4: 1d:76:93:ab:63:cb:94:a8:6a:08:11:65:8e:01:79: 4d:f0:88:ad:25:83:37:cc:ef:d7:ed:8f:21:4a:25: 90:11:a6:f7:6a:81:58:09:02:65:5f:ee:1f:ea:3e: f2:6c:b2:de:bb:97:73:27:dd:3b:d2:2c:66:d9:a5: 65:84:b8:4b:c8:2a:2d:38:fe:fd:87:95:3c:c2:c7: ca:e6:eb:53:57:a7:53:5f:db:4c:4c:7d:01:7c:e8: c0:82:4c:6f:0c:98:1e:2d:6f:02:65:65:3b:18:19: 68:78:16:3b:4d:74:32:50:2c:31:d0:03:32:66:41: e7:b1:d9:e8:00:f6:f4:c4:e6:8a:01:28:d0:f4:36: 6d:3e:29:4b:6f:c3:83:05:a6:45:86:9c:1e:75:f1: fe:49:8b:27:ba:37:9c:ab:62:7a:12:28:45:f8:67: b8:85:15:91:a2:40:dc:be:16:bb:b7:e6:5f:16:11: ef:af:fc:1d:75:d6:aa:a9:cb:b4:d3:d9:62:8b:d2: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:60:BC:C4:45:A2:DD:B4:F6:C0:30:DC:CF:12:8A:64:F5:C9:F4 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:1a:b7:72:9b:b6:e0:d1:e8:19:9e:d0:8b:fd:91:51:c6: 43:f3:b6:a7:e7:6e:30:e3:e8:c0:ae:b1:fe:bd:80:bd:84:c4: fc:26:f1:25:8d:a5:ee:45:e6:65:54:75:29:d2:84:d7:20:3e: a4:64:2f:72:85:6f:24:08:db:13:47:4c:f7:06:e0:35:da:27: 67:89:01:53:0e:5e:0a:67:60:7f:e3:31:9a:86:9a:7c:66:b4: 62:e5:9e:9b:ea:ec:77:6f:54:b1:cd:6e:b4:0e:7f:04:d2:ed: 4c:27:ec:93:48:aa:9f:1e:0d:d4:12:8c:be:93:96:ff:dc:0c: 95:06:2a:f0:e0:3d:41:0e:58:60:08:11:60:ea:8f:31:c7:b5: 4f:9b:a9:32:85:90:0d:01:e1:46:1c:d2:ef:9b:88:2e:d1:a4: 9b:53:a3:86:13:05:54:55:b0:7a:90:9c:c2:ef:72:9d:b3:47: c7:66:43:98:04:44:54:1a:d4:7b:e3:ef:f1:1c:37:68:a7:63: ae:63:a4:d3:30:93:b3:8a:8d:01:ad:e9:10:2f:c0:c8:03:0d: a9:1c:a0:df:86:6c:19:e4:21:ec:37:4e:d0:5a:32:03:6f:78: ca:8a:e9:67:ff:e8:34:2c:59:db:86:eb:af:c0:cd:18:32:05: 3f:d5:45:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjQwNTA0MjEyMjMxWhcNMjQwNTExMjEyMjMxWjAYMRYwFAYD VQQDEw02NjM2YTcxNy1lZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA405HaiUKRnXVflr/xCR82BKGjooh/THfZXzW3Wjmm8hCtABflJrekF9Bh6XH F/PiQUjaHL2wpNGPEdQddpOrY8uUqGoIEWWOAXlN8IitJYM3zO/X7Y8hSiWQEab3 aoFYCQJlX+4f6j7ybLLeu5dzJ9070ixm2aVlhLhLyCotOP79h5U8wsfK5utTV6dT X9tMTH0BfOjAgkxvDJgeLW8CZWU7GBloeBY7TXQyUCwx0AMyZkHnsdnoAPb0xOaK ASjQ9DZtPilLb8ODBaZFhpwedfH+SYsnujecq2J6EihF+Ge4hRWRokDcvha7t+Zf FhHvr/wdddaqqcu009lii9LoTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzcYLzE RaLdtPbAMNzPEopk9cn0MB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Ghq3cpu24NHoGZ7Qi/2RUcZD87an524w4+jArrH+vYC9hMT8JvEl jaXuReZlVHUp0oTXID6kZC9yhW8kCNsTR0z3BuA12idniQFTDl4KZ2B/4zGahpp8 ZrRi5Z6b6ux3b1SxzW60Dn8E0u1MJ+yTSKqfHg3UEoy+k5b/3AyVBirw4D1BDlhg CBFg6o8xx7VPm6kyhZANAeFGHNLvm4gu0aSbU6OGEwVUVbB6kJzC73Kds0fHZkOY BERUGtR74+/xHDdop2OuY6TTMJOzio0BrekQL8DIAw2pHKDfhmwZ5CHsN07QWjID b3jKiuln/+g0LFnbhuuvwM0YMgU/1UXZ -----END CERTIFICATE-----Generated at Sat May 4 22:06:51 2024 by rpki-client on console-ams.rpki-client.org