$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: ziu4jzzN8PHBDu+lBpQry9bD6zZtiOzENEfGxH+M0tk= Subject key identifier: F5:33:41:49:2C:B5:9A:9A:74:8A:77:A2:16:07:DA:29:B1:0F:E4:EC Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0A41 Signing time: Thu 02 May 2024 20:33:08 +0000 Manifest this update: Thu 02 May 2024 20:33:07 +0000 Manifest next update: Thu 09 May 2024 20:33:07 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: 5Yc8aq6W2S4ZiyNbm4zMmtktEY3a9ZpfKGK21TyBvDw=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: b20F/IW7G7sucRCi5wupfsa4Ia7n6wWVWzttBKzRHqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: May 2 20:33:07 2024 GMT Not After : May 9 20:33:07 2024 GMT Subject: CN=6633f884-5e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:11:3f:e9:56:01:4b:04:77:5a:d4:79:ad: ad:9e:57:f7:9c:6b:5c:30:67:4c:e8:0d:a5:85:50: ea:5d:b4:1f:b3:17:77:f6:1b:ac:73:49:eb:4d:9f: ba:c5:73:5c:a3:21:55:75:80:90:67:b2:5d:9e:f9: ac:34:c8:ea:64:9b:4c:40:79:f4:95:97:d1:0f:92: c3:77:68:8a:6b:e6:65:76:a5:55:49:e9:7f:7c:36: 20:11:77:1b:da:81:d8:69:21:a7:29:43:a2:b8:3e: 9a:44:93:67:fd:3e:a3:e6:6e:1b:e0:22:b9:ba:25: ab:42:86:7d:52:9f:6f:84:b1:d2:40:d8:20:06:44: 37:dc:54:0d:9b:a3:8a:e6:92:71:a6:57:7b:9e:c8: ad:56:22:fa:ad:b9:73:6c:c5:ec:04:49:57:3f:57: 28:5b:62:92:05:f4:38:c6:c0:fd:c2:a3:aa:38:6e: 12:a7:15:e5:7d:41:0d:de:59:84:f1:e7:ee:8f:68: ac:ad:fa:50:a2:37:f8:54:35:49:a1:93:eb:a4:ed: 69:31:90:35:35:3b:59:1f:89:f7:a4:0f:f7:01:50: ff:6b:30:22:d2:a7:39:e9:54:44:3d:42:40:b1:4e: c2:fc:78:a4:d5:77:be:cd:76:90:5d:fa:5a:cd:37: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:33:41:49:2C:B5:9A:9A:74:8A:77:A2:16:07:DA:29:B1:0F:E4:EC X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f2:a5:bc:44:0f:56:53:42:3b:8e:1e:c6:02:29:90:a9:fc: 41:c4:00:5e:e1:db:f1:5b:4e:ca:09:99:a9:df:f5:67:d4:12: 47:ad:05:e9:d4:6a:b0:d5:9d:11:2d:31:29:ef:9b:26:7b:d9: 12:36:75:7f:bd:27:34:b1:7a:ee:79:ba:ee:81:58:0c:a2:e4: ba:b2:21:8b:6d:5a:2c:f5:ad:b2:b1:08:95:04:af:8a:18:03: fc:33:26:db:4d:99:90:50:54:23:d5:49:40:13:01:1d:50:e3: 61:90:de:31:1b:97:05:d5:68:b9:d2:ba:f3:58:16:0f:1e:de: 4c:77:00:ca:91:4a:d7:0c:94:bc:56:81:ff:6a:72:b6:cb:5e: 6d:9b:b1:5d:4b:b0:3e:3c:cc:1b:7a:0a:a3:41:73:c9:f5:c5: 0e:f5:19:ee:52:98:7f:d0:b1:bd:91:0d:17:43:de:15:f7:e9: cd:f9:29:0b:ee:c7:b3:66:f3:89:96:4f:31:af:c0:f6:22:76: 47:48:fb:5d:99:05:22:70:20:41:7a:52:fa:12:3c:03:02:87: 2c:cd:d7:b4:5f:87:28:f9:ce:79:df:6b:a9:a7:25:31:76:91: 18:ce:83:28:ca:a1:5a:e3:53:36:9a:5d:1d:02:46:d8:51:1a: 16:3e:14:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjQwNTAyMjAzMzA3WhcNMjQwNTA5MjAzMzA3WjAYMRYwFAYD VQQDEw02NjMzZjg4NC01ZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ikRP+lWAUsEd1rUea2tnlf3nGtcMGdM6A2lhVDqXbQfsxd39husc0nrTZ+6 xXNcoyFVdYCQZ7JdnvmsNMjqZJtMQHn0lZfRD5LDd2iKa+ZldqVVSel/fDYgEXcb 2oHYaSGnKUOiuD6aRJNn/T6j5m4b4CK5uiWrQoZ9Up9vhLHSQNggBkQ33FQNm6OK 5pJxpld7nsitViL6rblzbMXsBElXP1coW2KSBfQ4xsD9wqOqOG4SpxXlfUEN3lmE 8efuj2isrfpQojf4VDVJoZPrpO1pMZA1NTtZH4n3pA/3AVD/azAi0qc56VREPUJA sU7C/Hik1Xe+zXaQXfpazTd2YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUzQUks tZqadIp3ohYH2imxD+TsMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj8qW8RA9WU0I7jh7GAimQqfxBxABe4dvxW07KCZmp3/Vn1BJHrQXp 1Gqw1Z0RLTEp75sme9kSNnV/vSc0sXruebrugVgMouS6siGLbVos9a2ysQiVBK+K GAP8MybbTZmQUFQj1UlAEwEdUONhkN4xG5cF1Wi50rrzWBYPHt5MdwDKkUrXDJS8 VoH/anK2y15tm7FdS7A+PMwbegqjQXPJ9cUO9RnuUph/0LG9kQ0XQ94V9+nN+SkL 7sezZvOJlk8xr8D2InZHSPtdmQUicCBBelL6EjwDAocszde0X4co+c5532uppyUx dpEYzoMoyqFa41M2ml0dAkbYURoWPhRd -----END CERTIFICATE-----Generated at Thu May 2 22:28:47 2024 by rpki-client on console-ams.rpki-client.org