$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: Ln7ubNfoxQKW++ncwaMxMkJcEMOuqye0btL9S2qQEPY= Subject key identifier: AB:39:C4:75:2F:D2:CA:74:D7:90:10:AC:85:50:F0:D4:02:13:A6:41 Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0984 Signing time: Mon 06 May 2024 21:03:17 +0000 Manifest this update: Mon 06 May 2024 21:03:17 +0000 Manifest next update: Mon 13 May 2024 21:03:17 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: /dmOSmOq2p8Wce12ucE/0J5tHd20yIDgKOVxjNYJWJo=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: 00c1bphYKtqZbl/TfGxBoosN44LZMdQGJktDgNbF5qc=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: 9FCfdKvNLcSKyTSViBJbRJWp46FWAAUntOF0TSiO39Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: May 6 21:03:17 2024 GMT Not After : May 13 21:03:17 2024 GMT Subject: CN=66394595-22c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:f2:9c:f5:f1:46:44:be:0c:ce:bf:94:35: ef:5f:31:16:3a:3a:97:13:af:dc:c2:32:8b:22:e7: 87:da:ef:08:a0:9d:c8:e4:3f:64:58:7e:d6:1e:ef: 7e:28:82:5d:c1:20:8c:45:a1:79:94:13:91:f6:91: 99:e3:43:73:40:1a:dd:fa:76:20:4f:36:d5:e3:55: 50:4b:f5:7e:1e:47:35:bd:13:2b:9d:54:f9:4e:6e: 83:0a:78:81:3c:7d:e6:e0:c8:58:0a:e2:95:8f:01: ba:7f:76:fe:c9:d7:75:81:17:20:48:fe:9e:60:ea: ea:64:d9:20:5e:3e:43:5c:2d:a0:c7:4e:a4:37:4a: 08:d9:49:c6:f5:72:69:43:f6:aa:10:29:f6:6c:92: 18:34:32:84:25:35:f8:0c:c9:59:a2:fd:ef:a0:3d: 28:7d:a7:84:64:b1:3c:70:08:d5:04:50:02:9e:1a: 78:bb:20:e4:0e:74:43:3a:4e:b0:42:59:14:b4:5d: 4d:24:13:85:d0:27:54:3d:90:b6:df:00:54:a0:c5: 3e:ae:3d:5b:35:f7:b1:44:de:cf:a7:a6:7a:06:85: c9:f7:79:c0:49:54:3a:f8:e6:ca:8b:7c:9c:66:9d: 20:db:7e:03:e1:98:7b:17:07:71:35:78:92:04:ba: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:C4:75:2F:D2:CA:74:D7:90:10:AC:85:50:F0:D4:02:13:A6:41 X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:be:14:7a:59:6f:a0:7b:4d:d6:25:37:e8:1d:4b:1f:53:36: 50:de:fa:24:71:5f:d7:cc:05:f6:12:ed:39:51:ae:e9:cd:f5: 93:cb:97:ab:22:57:b0:f9:b7:f8:a3:59:77:c4:ce:51:4a:02: 37:a0:af:ff:a5:49:ec:c8:93:34:8c:9d:d5:0d:53:4c:70:34: 33:a1:09:ba:a0:3a:a9:4c:d7:fe:3f:b5:1f:1b:cf:89:f0:0e: c5:4a:a5:35:b7:90:3c:44:b5:e4:10:cd:3a:54:59:f9:e8:bc: f9:b6:5d:f3:d4:f6:df:30:4e:90:03:33:ac:6b:89:9a:59:b6: ae:ce:fe:4b:cd:ae:d2:54:fd:0e:20:bb:8b:c9:65:65:df:c6: 79:1e:bb:75:0a:5b:dd:c7:e5:c6:cd:9b:dd:dd:62:2b:9d:2b: 77:4e:06:c2:2c:04:ee:c3:b0:66:76:7f:e7:61:f3:89:cd:37: 6b:f0:c0:cf:f1:77:db:b3:2f:22:a8:59:d3:8f:cd:d0:ab:79: 69:e9:ab:89:d9:47:08:f7:ab:09:5f:3f:af:01:84:ed:30:f6: 21:04:2b:04:17:67:0e:8c:78:b6:23:27:72:4a:71:3d:40:ed: 79:e3:08:77:c9:51:a0:85:76:49:da:28:c8:3d:05:6f:22:74: 4f:c0:7c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjQwNTA2MjEwMzE3WhcNMjQwNTEzMjEwMzE3WjAYMRYwFAYD VQQDEw02NjM5NDU5NS0yMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQLynPXxRkS+DM6/lDXvXzEWOjqXE6/cwjKLIueH2u8IoJ3I5D9kWH7WHu9+ KIJdwSCMRaF5lBOR9pGZ40NzQBrd+nYgTzbV41VQS/V+Hkc1vRMrnVT5Tm6DCniB PH3m4MhYCuKVjwG6f3b+ydd1gRcgSP6eYOrqZNkgXj5DXC2gx06kN0oI2UnG9XJp Q/aqECn2bJIYNDKEJTX4DMlZov3voD0ofaeEZLE8cAjVBFACnhp4uyDkDnRDOk6w QlkUtF1NJBOF0CdUPZC23wBUoMU+rj1bNfexRN7Pp6Z6BoXJ93nASVQ6+ObKi3yc Zp0g234D4Zh7FwdxNXiSBLqP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs5xHUv 0sp015AQrIVQ8NQCE6ZBMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYvhR6WW+ge03WJTfoHUsfUzZQ3vokcV/XzAX2Eu05Ua7pzfWTy5er Ilew+bf4o1l3xM5RSgI3oK//pUnsyJM0jJ3VDVNMcDQzoQm6oDqpTNf+P7UfG8+J 8A7FSqU1t5A8RLXkEM06VFn56Lz5tl3z1PbfME6QAzOsa4maWbauzv5Lza7SVP0O ILuLyWVl38Z5Hrt1Clvdx+XGzZvd3WIrnSt3TgbCLATuw7Bmdn/nYfOJzTdr8MDP 8Xfbsy8iqFnTj83Qq3lp6auJ2UcI96sJXz+vAYTtMPYhBCsEF2cOjHi2IydySnE9 QO154wh3yVGghXZJ2ijIPQVvInRPwHzR -----END CERTIFICATE-----Generated at Mon May 6 22:40:55 2024 by rpki-client on console-ams.rpki-client.org