$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: VaRKixEmmFFsUalkTXBCScNfoFzIpQZFcXLZJjX+6Ds= Subject key identifier: B2:91:E9:A6:A5:2C:13:4F:E2:8F:3A:DF:40:9D:A8:04:C5:57:4C:E6 Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1AFE Signing time: Thu 02 May 2024 16:44:01 +0000 Manifest this update: Thu 02 May 2024 16:44:01 +0000 Manifest next update: Thu 09 May 2024 16:44:01 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: 7LicahGzr0tRjDBw0ceuainHihhV/nk6qPXp2zusnLk=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: di+Rm4OQP/ZGrPFK8dfRh21RT9iKabOLa+2mOyoNZOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6919 (0x1b07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: May 2 16:44:01 2024 GMT Not After : May 9 16:44:01 2024 GMT Subject: CN=6633c2d1-51dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:08:86:4a:f1:3c:48:f8:69:89:df:df:28: ef:53:0a:1f:84:4d:c2:3d:dc:e2:69:90:8a:48:45: 5b:0d:60:c3:9b:82:d1:11:5a:62:7b:24:2c:c6:7e: f6:69:75:91:78:b3:98:bb:ed:42:00:bc:84:8b:40: d1:96:c7:50:2a:c3:4c:da:b2:6b:a3:0f:cc:5e:cc: a5:a6:44:8a:10:c2:31:32:21:a3:1a:01:62:81:81: b9:b7:98:79:b1:3d:07:ed:bf:76:36:92:b7:ff:48: ec:ad:ac:24:42:37:10:6f:aa:84:2b:f2:39:97:52: f1:64:57:c8:06:2e:68:1c:f8:79:26:c4:e6:10:dc: a6:d0:a6:ab:e4:e8:fa:bf:02:a7:62:b3:26:75:51: 5b:7e:90:45:8f:b9:72:e4:f4:57:ba:ef:4e:05:c9: c6:8e:e9:ab:c4:2e:34:c1:ee:e8:5b:77:03:7a:14: 87:60:41:23:c8:b6:54:c5:4a:1b:91:ef:df:ae:cc: 75:96:9a:27:e9:b0:3b:53:8e:ee:bb:8f:21:e9:22: c6:ef:7a:e6:06:5f:76:28:a8:4d:6a:43:47:20:fe: 96:59:22:aa:81:2d:8a:11:77:e9:dc:73:4a:cd:e5: 4f:7f:cf:c6:30:f5:6e:01:d0:67:f4:55:f4:31:82: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:91:E9:A6:A5:2C:13:4F:E2:8F:3A:DF:40:9D:A8:04:C5:57:4C:E6 X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:36:ff:92:7b:c8:c6:6a:59:c4:56:c4:9b:d4:89:85:97:03: 08:44:e0:3c:b6:de:84:2b:1d:f1:c2:ef:ab:ce:0a:79:eb:90: fe:f2:19:04:4c:11:32:a7:68:37:27:83:50:df:f6:d3:c9:6e: 88:9c:1a:37:a0:c8:52:79:40:8b:62:ff:fd:3e:7f:a5:95:4f: 12:a5:cf:51:5a:6c:4c:ca:b5:ed:d1:7e:a6:9e:af:f6:12:91: 55:5d:c1:d7:76:0b:ad:4d:ca:4a:1d:bd:0c:24:5b:4a:46:5d: 5c:8f:98:c3:a0:39:f2:36:98:e8:db:99:46:b2:6c:78:7b:e4: ba:4d:83:bc:8f:fb:e0:0f:af:e3:23:fe:4a:28:9a:c5:2f:4e: 87:6d:e0:c3:53:94:ac:8f:ea:76:9a:c5:27:4b:5d:eb:87:49: fc:e7:b4:f6:c0:e7:a2:9d:1a:e5:d1:3d:20:72:f8:93:35:2e: e7:ba:07:08:7b:03:97:78:f0:7e:a3:db:79:86:f5:32:16:cc: 4d:6e:ce:4f:6a:cb:58:0f:34:3c:67:c6:c0:f9:05:ba:5b:c1: 85:f8:90:25:51:8f:78:8f:6c:f6:c0:bd:22:47:05:38:e0:04: 10:37:ff:c3:3a:55:16:8f:35:0a:f0:35:c3:03:81:a8:23:aa: e8:f5:a7:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjQwNTAyMTY0NDAxWhcNMjQwNTA5MTY0NDAxWjAYMRYwFAYD VQQDEw02NjMzYzJkMS01MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjgIhkrxPEj4aYnf3yjvUwofhE3CPdziaZCKSEVbDWDDm4LREVpieyQsxn72 aXWReLOYu+1CALyEi0DRlsdQKsNM2rJrow/MXsylpkSKEMIxMiGjGgFigYG5t5h5 sT0H7b92NpK3/0jsrawkQjcQb6qEK/I5l1LxZFfIBi5oHPh5JsTmENym0Kar5Oj6 vwKnYrMmdVFbfpBFj7ly5PRXuu9OBcnGjumrxC40we7oW3cDehSHYEEjyLZUxUob ke/frsx1lpon6bA7U47uu48h6SLG73rmBl92KKhNakNHIP6WWSKqgS2KEXfp3HNK zeVPf8/GMPVuAdBn9FX0MYLm+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKR6aal LBNP4o8630CdqATFV0zmMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuNv+Se8jGalnEVsSb1ImFlwMIROA8tt6EKx3xwu+rzgp565D+8hkE TBEyp2g3J4NQ3/bTyW6InBo3oMhSeUCLYv/9Pn+llU8Spc9RWmxMyrXt0X6mnq/2 EpFVXcHXdgutTcpKHb0MJFtKRl1cj5jDoDnyNpjo25lGsmx4e+S6TYO8j/vgD6/j I/5KKJrFL06HbeDDU5Ssj+p2msUnS13rh0n857T2wOeinRrl0T0gcviTNS7nugcI ewOXePB+o9t5hvUyFsxNbs5PastYDzQ8Z8bA+QW6W8GF+JAlUY94j2z2wL0iRwU4 4AQQN//DOlUWjzUK8DXDA4GoI6ro9adb -----END CERTIFICATE-----Generated at Thu May 2 17:43:45 2024 by rpki-client on console-fra.rpki-client.org