$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: /Zd++HeEk/gE0VhP/3/oTQ2b+EHcMcwWh2e2+Dv6YYQ= Subject key identifier: 92:F2:81:45:C5:55:95:86:AC:DC:7D:7B:7C:D3:EC:E8:7F:B9:2D:8A Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 04BC Signing time: Sat 27 Apr 2024 01:24:01 +0000 Manifest this update: Sat 27 Apr 2024 01:24:00 +0000 Manifest next update: Sat 04 May 2024 01:24:00 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: AZKXUARRXopLlGrb7s/sw0Xe8MvfaJ7pn+pLm5K0pc8=) 2: 859FFE90D9B111EBA2B24243C4F9AE02.roa (hash: otixXu8i9YahARC25LtB9KIuLdHbhqBEx9lF6Uow8C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Apr 27 01:24:00 2024 GMT Not After : May 4 01:24:00 2024 GMT Subject: CN=662c53b0-7b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:c0:6d:72:e3:67:98:a8:98:35:3f:6b:e3: 4b:ba:45:7a:b8:ad:80:a1:3a:9f:be:a4:54:24:df: 5e:8e:c7:3d:03:87:da:58:e6:ad:ef:c9:45:50:6e: eb:f7:d7:a9:15:6f:9f:9c:06:82:09:b5:5d:6a:c6: 1a:3b:ed:e6:79:dc:35:62:4c:3b:75:a5:67:9b:dc: b3:5e:2c:3a:5b:7b:5f:e3:bf:a7:ae:ff:f3:1f:64: a6:61:31:98:e7:08:64:50:1b:9e:9e:10:47:ad:c1: 80:41:97:5c:6e:3c:fb:b0:73:99:08:6b:a2:ae:bd: f2:b1:58:a9:3d:1c:38:a0:d9:53:e1:9d:fd:ca:0d: 8b:5e:24:ae:ba:29:62:e8:12:a0:e2:2a:d2:6c:6e: ec:b9:ac:4d:27:81:a6:97:88:58:cc:a4:28:e6:d9: bb:b4:26:28:d1:d6:e7:c6:79:cf:b7:9d:83:c5:dc: ce:f7:f9:92:f2:fd:c1:ee:68:33:5d:31:46:78:a5: 89:cb:d8:46:d3:d2:cf:69:03:91:d4:0d:4e:52:2c: a0:97:24:bf:60:65:ce:de:68:b0:31:38:63:00:f1: 38:f9:8e:a5:66:cd:c3:86:19:45:51:66:bb:12:3b: c5:90:de:0b:be:99:28:c8:e5:f5:98:05:19:4c:da: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F2:81:45:C5:55:95:86:AC:DC:7D:7B:7C:D3:EC:E8:7F:B9:2D:8A X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d5:81:d2:4e:35:77:08:e9:2f:17:ee:27:d7:ad:d9:9d:05: e6:d9:26:9a:6a:02:54:0f:6f:13:51:c7:0c:bc:0b:26:15:6b: c7:4b:39:92:09:fe:1f:56:91:e1:af:e7:f0:6b:72:05:9e:b8: ba:45:48:e8:b6:10:b6:95:3a:50:f5:d4:e5:1f:d5:fd:68:48: 1f:ce:75:98:4a:f4:7e:fd:7a:d4:b9:07:47:50:b9:83:01:b5: ef:35:78:52:78:b5:2c:b0:fa:a0:44:ce:36:c7:9b:eb:ec:1a: 7f:83:dc:a9:97:92:91:07:96:0b:7c:dd:43:03:83:e9:ae:d1: 43:fa:50:44:51:a7:ac:c3:33:4b:49:07:36:d1:de:ab:75:38: c2:6a:10:2e:f5:98:f9:22:26:26:0f:c3:f2:a4:7f:35:1d:3d: 8d:97:e0:f2:01:92:bb:ca:da:b7:d2:45:4b:b4:60:9e:61:b2: 26:8c:d1:e0:53:9d:92:f6:9c:c5:b9:67:db:ad:52:42:ee:63: 1e:e9:4e:73:43:58:04:e7:4e:45:f2:9e:21:ac:5e:38:81:e0: f6:a4:f7:a8:db:62:94:02:06:37:d7:b4:b6:d7:62:2a:3e:4a: 69:4f:54:94:be:15:e7:56:c8:79:bb:d2:51:d3:0e:14:05:f7: c0:cd:99:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjQwNDI3MDEyNDAwWhcNMjQwNTA0MDEyNDAwWjAYMRYwFAYD VQQDEw02NjJjNTNiMC03YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4enAbXLjZ5iomDU/a+NLukV6uK2AoTqfvqRUJN9ejsc9A4faWOat78lFUG7r 99epFW+fnAaCCbVdasYaO+3medw1Ykw7daVnm9yzXiw6W3tf47+nrv/zH2SmYTGY 5whkUBuenhBHrcGAQZdcbjz7sHOZCGuirr3ysVipPRw4oNlT4Z39yg2LXiSuuili 6BKg4irSbG7suaxNJ4Gml4hYzKQo5tm7tCYo0dbnxnnPt52DxdzO9/mS8v3B7mgz XTFGeKWJy9hG09LPaQOR1A1OUiyglyS/YGXO3miwMThjAPE4+Y6lZs3DhhlFUWa7 EjvFkN4LvpkoyOX1mAUZTNqqrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLygUXF VZWGrNx9e3zT7Oh/uS2KMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC61YHSTjV3COkvF+4n163ZnQXm2SaaagJUD28TUccMvAsmFWvHSzmS Cf4fVpHhr+fwa3IFnri6RUjothC2lTpQ9dTlH9X9aEgfznWYSvR+/XrUuQdHULmD AbXvNXhSeLUssPqgRM42x5vr7Bp/g9ypl5KRB5YLfN1DA4PprtFD+lBEUaeswzNL SQc20d6rdTjCahAu9Zj5IiYmD8PypH81HT2Nl+DyAZK7ytq30kVLtGCeYbImjNHg U52S9pzFuWfbrVJC7mMe6U5zQ1gE505F8p4hrF44geD2pPeo22KUAgY317S212Iq PkppT1SUvhXnVsh5u9JR0w4UBffAzZmF -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:33 2024 by rpki-client on console-ams.rpki-client.org