$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: aJec2TuBj/+AelgAAy1lU28atg6MVlTcRZAySiIlJQQ= Subject key identifier: 79:F4:7F:CB:3E:23:85:6D:35:40:FA:DF:9D:A3:A2:2B:5B:44:07:2F Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 33C6 Signing time: Tue 30 Apr 2024 14:23:38 +0000 Manifest this update: Tue 30 Apr 2024 14:23:37 +0000 Manifest next update: Tue 07 May 2024 14:23:37 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: hs9JHgAxI9dJ+5ob4QGOYNg0hvOzLZ4J9DUsT38KPNo=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: Wqc/SiNa8ZHU/O93vts9GhN1tQDb/+XfcqbCY3PBSMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Apr 30 14:23:37 2024 GMT Not After : May 7 14:23:37 2024 GMT Subject: CN=6630fee9-5f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:74:fa:fe:33:e1:0f:06:4d:2d:36:a4:98: 13:7d:4f:86:42:ff:6b:97:f9:c6:fe:b8:91:a7:5c: c5:28:02:8c:cf:90:2d:85:da:9d:01:ca:6d:13:69: 48:96:53:10:ba:7b:8c:72:54:28:90:ce:05:60:50: b8:f6:e7:72:f0:5f:ad:d5:27:17:e1:9d:e8:ad:34: 8b:2a:0b:b9:33:14:b8:9b:b5:ea:f1:a4:8c:a7:04: cd:29:76:bf:c1:9e:1f:86:fd:3d:f9:1e:f7:63:1b: 04:44:f8:61:ea:5b:f9:f0:c4:11:2a:27:32:b9:01: 68:f7:66:f3:54:73:41:75:38:59:1f:b3:64:e6:68: 69:04:6f:17:60:f0:9b:ab:12:5f:bc:d2:a4:39:53: b4:1a:fc:80:9a:24:ee:ea:6a:0a:8f:5f:fe:ba:2c: b3:cc:55:19:cb:54:20:af:ce:62:8c:05:dd:7e:b0: a4:10:86:dc:9b:9e:a1:52:68:4e:db:24:41:bc:09: 56:62:ef:fa:fd:5b:5d:57:1c:42:fb:37:c1:d2:b2: 0e:a9:a2:ee:e2:12:88:95:f6:6d:ad:59:6d:e8:cf: df:16:9f:39:e2:3c:da:5d:34:dd:93:7a:6e:64:40: b4:bc:2e:2a:16:02:63:c1:64:9c:ac:ea:7c:12:b2: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F4:7F:CB:3E:23:85:6D:35:40:FA:DF:9D:A3:A2:2B:5B:44:07:2F X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:75:d7:4f:eb:31:2b:19:f6:8f:98:98:8f:4a:21:c5:18: 19:2c:92:54:84:75:c6:95:a9:8a:17:c0:05:4c:d2:82:ac:c3: 2c:df:1d:7a:02:0a:4c:1e:a2:07:af:e4:a0:df:3a:e4:e2:e5: d8:50:b9:71:b9:93:bd:58:f5:80:e5:b1:c5:4a:5f:7a:78:11: c4:ea:45:5e:26:37:af:60:4c:32:60:28:cb:b3:48:63:0b:e6: a6:94:64:13:82:ad:76:71:95:ae:79:33:bd:97:58:8a:47:2e: 45:5b:74:99:f6:a3:cd:e2:42:27:8a:f2:d6:24:ad:f7:08:2d: 86:99:c3:d2:c2:7d:91:22:7f:d1:de:72:6b:45:bb:0f:56:02: 43:94:0d:5f:69:04:5b:15:0d:b6:3a:a3:20:71:51:cb:20:3e: 34:2f:25:37:09:b1:cf:2a:d6:e0:5b:44:7b:63:2f:1b:f2:3a: 34:e3:38:13:30:56:06:5f:0d:98:e1:f8:10:91:fe:ec:95:b7: b5:4a:d1:80:71:03:49:82:ed:51:26:70:bf:4b:11:d9:82:d2: 2d:43:04:cc:3f:8d:22:43:05:e9:9b:ec:71:8a:13:0d:c1:35: 7a:90:74:d8:80:97:f3:28:8b:41:e6:a4:85:aa:76:04:2c:eb: 4b:de:bf:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjQwNDMwMTQyMzM3WhcNMjQwNTA3MTQyMzM3WjAYMRYwFAYD VQQDEw02NjMwZmVlOS01ZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg10+v4z4Q8GTS02pJgTfU+GQv9rl/nG/riRp1zFKAKMz5AthdqdAcptE2lI llMQunuMclQokM4FYFC49udy8F+t1ScX4Z3orTSLKgu5MxS4m7Xq8aSMpwTNKXa/ wZ4fhv09+R73YxsERPhh6lv58MQRKicyuQFo92bzVHNBdThZH7Nk5mhpBG8XYPCb qxJfvNKkOVO0GvyAmiTu6moKj1/+uiyzzFUZy1Qgr85ijAXdfrCkEIbcm56hUmhO 2yRBvAlWYu/6/VtdVxxC+zfB0rIOqaLu4hKIlfZtrVlt6M/fFp854jzaXTTdk3pu ZEC0vC4qFgJjwWScrOp8ErJ+OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn0f8s+ I4VtNUD6352joitbRAcvMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRZHXXT+sxKxn2j5iYj0ohxRgZLJJUhHXGlamKF8AFTNKCrMMs3x16 AgpMHqIHr+Sg3zrk4uXYULlxuZO9WPWA5bHFSl96eBHE6kVeJjevYEwyYCjLs0hj C+amlGQTgq12cZWueTO9l1iKRy5FW3SZ9qPN4kInivLWJK33CC2GmcPSwn2RIn/R 3nJrRbsPVgJDlA1faQRbFQ22OqMgcVHLID40LyU3CbHPKtbgW0R7Yy8b8jo04zgT MFYGXw2Y4fgQkf7slbe1StGAcQNJgu1RJnC/SxHZgtItQwTMP40iQwXpm+xxihMN wTV6kHTYgJfzKItB5qSFqnYELOtL3r9o -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:24 2024 by rpki-client on console-ams.rpki-client.org