$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: MnjcAXvVRAaFudkMb2duBLdBhgHX6XMrnW4WRo0PXFI= Subject key identifier: 13:63:52:E0:06:FD:23:D0:EF:27:35:55:9E:E8:C3:F3:A5:18:70:D5 Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 02C1 Signing time: Sun 05 May 2024 03:38:59 +0000 Manifest this update: Sun 05 May 2024 03:38:59 +0000 Manifest next update: Sun 12 May 2024 03:38:59 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: 1Xol+n9gHNUMPBTJBQfPp1y631nYNn0wNWMVB5djvdA=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: L06G5zhFCO9MeNvA+zmysMr9Z+WhY3SxKgFZgoOfL9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: May 5 03:38:59 2024 GMT Not After : May 12 03:38:59 2024 GMT Subject: CN=6636ff53-4c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:87:13:9e:cc:42:4c:bd:d7:b2:5c:6f:88: 3d:75:c2:f5:40:98:b4:aa:e3:f5:0b:29:7d:ff:ba: 12:e1:3b:bd:a5:bc:51:d5:f4:27:f2:4c:46:9c:df: 98:52:68:f1:0f:63:d1:c9:14:1a:55:a3:65:69:53: 3f:27:2a:57:f3:70:6a:de:bc:9e:c7:7e:b9:8b:12: 80:a7:00:e2:41:44:2d:ac:34:9d:bc:5d:c5:36:e5: f2:dc:be:b6:46:66:92:17:06:e4:20:b3:24:6e:8d: 22:98:5d:da:d9:ca:a6:cb:2d:40:41:ad:ba:8e:de: 57:7f:47:64:2f:c6:8a:b8:b1:82:f1:4f:ea:ad:99: 7d:93:96:86:31:16:27:38:ed:c0:36:f3:2b:7a:42: b9:52:46:8e:3f:19:3b:ed:54:d3:60:77:a8:8d:5a: 8d:46:99:8d:8b:24:f1:20:9f:19:bc:3c:ee:3a:18: 91:d4:f6:c6:a8:02:a8:5b:df:0a:d8:4a:dd:28:2b: 68:ca:7a:cd:5f:67:30:b8:a2:64:ee:7e:ea:ee:3e: 35:42:bc:64:2c:8c:ba:70:a2:20:04:80:9a:14:04: 74:24:97:00:69:ee:15:8f:ee:4e:90:2e:e3:d7:69: 0e:83:d5:f0:87:a6:12:3c:43:e9:13:50:40:0f:02: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:63:52:E0:06:FD:23:D0:EF:27:35:55:9E:E8:C3:F3:A5:18:70:D5 X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:e1:27:19:ce:88:d4:38:ef:4d:df:4d:ea:ac:fa:16:6b: b0:ce:1a:5a:1d:99:83:8c:3d:c9:d4:55:89:d1:98:03:49:23: 02:01:0b:1f:23:c8:16:d4:54:1e:15:8f:0c:0f:b1:d1:c1:85: a9:36:2c:5d:66:f0:58:67:eb:db:eb:36:b3:ab:2d:9e:2e:0f: 9d:b5:48:bd:d1:37:11:eb:ed:1e:2a:a4:0f:36:a0:e4:be:d5: 50:2b:42:25:6a:dd:bc:39:7a:32:15:c2:9b:7a:26:a7:82:40: c2:a8:39:05:b9:5e:89:d9:2b:e0:90:13:32:df:ec:f8:dd:87: 94:8c:53:2b:e6:c7:63:56:51:6f:33:56:33:65:51:5b:4a:df: c4:04:58:99:62:35:fb:64:f7:a5:ea:54:33:5d:66:5c:6d:16: 44:5e:91:78:02:15:77:66:8d:13:ef:16:cf:4e:20:1c:e1:c8: 36:ee:3b:03:2b:11:28:82:c3:45:54:8b:2c:f3:de:a9:a0:64: 68:86:bc:ee:aa:e3:85:c9:d1:c8:b1:ae:3d:e5:54:ea:41:14: 01:f4:a8:b6:56:aa:69:15:ec:8e:74:ae:b7:a3:82:52:50:51: 4a:63:ea:1a:23:d4:75:cb:72:67:05:d3:26:02:e9:2d:10:dc: 1d:f9:25:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjQwNTA1MDMzODU5WhcNMjQwNTEyMDMzODU5WjAYMRYwFAYD VQQDEw02NjM2ZmY1My00YzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m6HE57MQky917Jcb4g9dcL1QJi0quP1Cyl9/7oS4Tu9pbxR1fQn8kxGnN+Y UmjxD2PRyRQaVaNlaVM/JypX83Bq3ryex365ixKApwDiQUQtrDSdvF3FNuXy3L62 RmaSFwbkILMkbo0imF3a2cqmyy1AQa26jt5Xf0dkL8aKuLGC8U/qrZl9k5aGMRYn OO3ANvMrekK5UkaOPxk77VTTYHeojVqNRpmNiyTxIJ8ZvDzuOhiR1PbGqAKoW98K 2ErdKCtoynrNX2cwuKJk7n7q7j41QrxkLIy6cKIgBICaFAR0JJcAae4Vj+5OkC7j 12kOg9Xwh6YSPEPpE1BADwIggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNjUuAG /SPQ7yc1VZ7ow/OlGHDVMB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWL+EnGc6I1DjvTd9N6qz6FmuwzhpaHZmDjD3J1FWJ0ZgDSSMCAQsf I8gW1FQeFY8MD7HRwYWpNixdZvBYZ+vb6zazqy2eLg+dtUi90TcR6+0eKqQPNqDk vtVQK0Ilat28OXoyFcKbeiangkDCqDkFuV6J2SvgkBMy3+z43YeUjFMr5sdjVlFv M1YzZVFbSt/EBFiZYjX7ZPel6lQzXWZcbRZEXpF4AhV3Zo0T7xbPTiAc4cg27jsD KxEogsNFVIss896poGRohrzuquOFydHIsa495VTqQRQB9Ki2VqppFeyOdK63o4JS UFFKY+oaI9R1y3JnBdMmAuktENwd+SUx -----END CERTIFICATE-----Generated at Sun May 5 04:34:53 2024 by rpki-client on console-fra.rpki-client.org