$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: OIO8Yom6qRvv8alXRbWu945WLkYYxZqZ4W/2AkBD1Rw= Subject key identifier: 39:99:10:F7:84:1D:B9:39:F5:56:BC:B5:50:E6:DC:2F:16:B5:BE:7C Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 3D Signing time: Fri 17 May 2024 08:18:58 +0000 Manifest this update: Fri 17 May 2024 08:18:57 +0000 Manifest next update: Fri 24 May 2024 08:18:57 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: 4isXsHrYR6VRFI0NQF5zPBnD23gwZwbNHI8MES+cKlw=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: 4B+w89ouKNb3XdIT9qRDACf78o9QbpoWm43XGhlTEMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: May 17 08:18:57 2024 GMT Not After : May 24 08:18:57 2024 GMT Subject: CN=664712f2-f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:a0:e8:69:80:b3:19:8d:76:50:83:d8:34: f2:58:fd:6a:2c:2c:b0:bf:44:e7:6e:26:b1:78:1b: a0:37:91:17:b9:72:28:94:56:62:26:d3:54:11:01: d1:0c:e0:ca:47:65:15:07:13:67:53:82:4c:59:81: af:c6:89:1c:1b:34:78:46:a9:64:71:c6:39:f7:fe: a2:0e:95:c5:0d:be:1e:b3:30:ee:4c:64:49:0e:0d: 25:c7:a1:92:66:28:17:65:99:2f:d7:bc:3d:55:35: 3d:83:c8:f7:d9:a7:6a:3f:c6:a9:15:8a:b2:eb:c0: e1:0f:f3:55:66:3e:02:77:f5:5a:c3:d1:4f:f8:f0: 86:70:90:2c:76:56:a5:ac:9c:9f:d3:75:d0:72:cd: e9:5e:d6:db:b8:fb:51:f5:ec:49:bd:74:da:a9:36: 04:49:b1:d2:d2:a8:a5:08:8d:72:bd:fc:e7:27:69: 86:ad:4f:03:13:93:c9:58:cd:5e:ec:b1:4f:61:4c: db:58:22:9b:89:21:6d:71:bd:2f:0a:53:39:35:70: a5:71:5c:bb:3f:db:f7:bb:47:17:49:83:06:4b:f3: d2:dd:f2:fd:b0:5b:14:5b:4b:fa:26:1d:b0:7d:f8: 16:34:92:af:ba:86:3c:dd:88:1c:8f:e3:d5:42:8d: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:10:F7:84:1D:B9:39:F5:56:BC:B5:50:E6:DC:2F:16:B5:BE:7C X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:97:05:49:06:1b:5d:85:7a:63:0b:46:ee:e5:b3:55:4e:b7: 40:55:9c:36:32:0d:c7:85:10:3a:62:63:3e:e0:f1:36:e6:f1: 3e:b3:a6:b8:eb:a6:4a:a8:81:b2:a9:a5:a2:8a:d2:dc:51:9c: b4:40:52:6c:51:16:88:f3:f3:61:d1:1a:cc:1b:69:9d:4a:35: 86:b5:2d:45:db:73:cf:26:e6:35:1e:97:f8:53:96:bb:0f:22: f8:e2:8a:9d:9f:1a:2c:29:7e:70:79:17:84:ad:bc:48:6e:d4: c3:88:d6:8e:d3:0c:05:bc:96:32:9d:21:77:b2:63:79:4e:c7: 4c:1c:91:51:1c:97:ab:f6:42:c4:a3:35:98:aa:85:a0:1e:5d: ea:6a:15:7d:3a:65:b7:e7:02:9f:0e:33:48:b9:86:68:ef:bd: ca:53:8e:7f:1d:e9:c2:67:91:f4:12:8a:5b:b7:72:a3:ff:7a: 56:1f:e7:e9:62:4f:18:86:02:57:34:6d:7b:00:79:42:b1:bd: bc:36:c8:d5:ce:12:42:bf:77:5b:85:b8:f9:34:54:a4:cb:cd: e1:f2:95:ff:45:a7:35:26:64:9e:2d:1d:9f:a2:85:aa:07:a6: 9a:4f:ba:eb:28:f7:d1:27:fb:ff:db:88:f4:34:d1:1f:4a:3c: e6:b6:85:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzNCODExMC8GA1UEBRMoOENCOTZGMERDQTg0QjIwQjQ5QTA3MTI4RTc3NzM3MjA1 OEE2OTA1MzAeFw0yNDA1MTcwODE4NTdaFw0yNDA1MjQwODE4NTdaMBgxFjAUBgNV BAMTDTY2NDcxMmYyLWYzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41aDoaYCzGY12UIPYNPJY/WosLLC/ROduJrF4G6A3kRe5ciiUVmIm01QRAdEM 4MpHZRUHE2dTgkxZga/GiRwbNHhGqWRxxjn3/qIOlcUNvh6zMO5MZEkODSXHoZJm KBdlmS/XvD1VNT2DyPfZp2o/xqkVirLrwOEP81VmPgJ39VrD0U/48IZwkCx2VqWs nJ/TddByzele1tu4+1H17Em9dNqpNgRJsdLSqKUIjXK9/OcnaYatTwMTk8lYzV7s sU9hTNtYIpuJIW1xvS8KUzk1cKVxXLs/2/e7RxdJgwZL89Ld8v2wWxRbS/omHbB9 +BY0kq+6hjzdiByP49VCjRTJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOZkQ94Qd uTn1Vry1UObcLxa1vnwwHwYDVR0jBBgwFoAUjLlvDcqEsgtJoHEo53c3IFimkFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3M0I4Lzg0QTRBMTBDQjhD NjExRUVBM0FGRDYxMEM0RjlBRTAyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvakxsdkRjcUVzZ3RKb0hFbzUzYzNJRmlta0ZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 M0I4Lzg0QTRBMTBDQjhDNjExRUVBM0FGRDYxMEM0RjlBRTAyL2pMbHZEY3FFc2d0 Sm9IRW81M2MzSUZpbWtGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWXBUkGG12FemMLRu7ls1VOt0BVnDYyDceFEDpiYz7g8Tbm8T6zprjr pkqogbKppaKK0txRnLRAUmxRFojz82HRGswbaZ1KNYa1LUXbc88m5jUel/hTlrsP Ivjiip2fGiwpfnB5F4StvEhu1MOI1o7TDAW8ljKdIXeyY3lOx0wckVEcl6v2QsSj NZiqhaAeXepqFX06ZbfnAp8OM0i5hmjvvcpTjn8d6cJnkfQSilu3cqP/elYf5+li TxiGAlc0bXsAeUKxvbw2yNXOEkK/d1uFuPk0VKTLzeHylf9FpzUmZJ4tHZ+ihaoH pppPuuso99En+//biPQ00R9KPOa2hY4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org