$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: Pq6guEkorRMjj03xx374Rzll1yb+GZFhgGlF3T9ZvNs= Subject key identifier: 01:EC:BC:7F:63:00:0C:77:45:69:19:CF:FE:B9:90:FB:40:D0:31:BC Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0983 Signing time: Sat 04 May 2024 21:07:45 +0000 Manifest this update: Sat 04 May 2024 21:07:44 +0000 Manifest next update: Sat 11 May 2024 21:07:44 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: Mdpg9ZleZtutQqI76iF057RjHIa4gAfrd7QvzJDf1/Y=) 2: 98438B98677F11EA972EEA2EC4F9AE02.roa (hash: vgXVDEq6fY1aAocc5HR3NJ+0QWxdFIUgmDfdg3s0DS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: May 4 21:07:44 2024 GMT Not After : May 11 21:07:44 2024 GMT Subject: CN=6636a3a0-752e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:16:0e:92:28:31:75:0f:b3:4e:e6:1f:e2: ed:67:8f:c6:77:da:73:b0:2f:ec:29:94:80:c8:b1: 86:d7:4c:ed:0e:a5:b7:17:cb:56:3c:13:fb:27:04: 5a:79:f4:60:ee:33:6f:fc:16:19:43:10:c4:b6:a9: 6d:09:8b:ab:2a:0c:df:0b:eb:88:f9:b2:2d:7a:79: e9:8d:7c:fe:05:7f:28:8c:cc:6e:0d:4f:16:e3:49: cf:c3:2e:d1:be:75:cb:0b:dc:37:e3:0c:c4:23:75: 34:f0:c2:9a:11:6e:44:6b:68:52:f8:7c:73:a3:f4: e9:c8:70:20:9d:6c:3f:e2:73:cb:46:49:9f:8c:42: 73:d7:45:44:ca:97:da:17:9f:b2:09:87:48:e7:9d: e8:0a:e8:46:29:6d:1c:22:1e:f6:60:75:a2:20:b8: e3:f8:90:d7:f1:e0:a6:fd:a8:89:56:8f:7b:63:8a: 37:c2:4c:ae:fb:90:1b:b8:91:ba:8c:04:9c:ef:fd: 84:e5:fe:40:8f:47:74:b1:f1:ae:1b:5f:0f:af:f0: 74:d1:70:4c:f5:b8:60:82:b9:e3:4e:7e:03:20:59: 57:1f:91:f3:5d:a2:f9:20:0e:04:ba:31:d2:ac:79: 15:03:f5:62:a8:87:19:77:ee:53:98:81:94:1c:48: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:BC:7F:63:00:0C:77:45:69:19:CF:FE:B9:90:FB:40:D0:31:BC X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:b4:9a:37:12:38:4b:07:76:6e:e8:af:60:7f:f3:9e:68: 7d:cb:ec:97:1c:b0:e5:a1:8c:40:a8:2b:15:1f:e6:bd:ef:f5: b5:d2:f2:64:06:d6:1b:b1:ed:92:af:53:6d:43:25:90:2b:3c: 0e:86:94:e8:5b:2e:ca:16:7c:ad:36:e6:50:ce:58:b2:97:df: 2a:c1:3d:35:d6:f0:ef:38:0f:d7:cc:8b:99:e4:1e:0e:2f:ac: dc:ee:6b:a0:81:9e:ba:19:48:23:b0:df:39:db:99:d9:5b:11: 1a:f7:9a:3f:45:ee:5c:8e:2c:8e:ab:7f:f3:84:8c:3e:f0:1d: 2a:d2:63:66:ad:a4:15:9a:18:84:aa:7e:04:ea:45:cd:eb:87: e4:0d:d4:42:1d:6a:bb:0e:bb:d6:45:43:0b:d4:46:3c:5d:ed: a9:3b:0b:d4:fb:a6:9e:b4:d3:e5:be:d6:e6:5e:af:d2:98:a2: 1f:cf:96:c7:b8:2c:6b:41:1b:21:01:47:2e:09:7d:10:ae:31: 31:72:c4:54:6d:f1:92:7a:2a:2c:b1:8f:55:b7:1c:4f:04:a9: 56:9d:32:1c:ba:67:02:de:75:e2:0f:a9:f4:65:5c:72:cc:d6: c6:95:83:e5:5a:dd:aa:bf:b8:50:ec:14:ab:9e:76:ea:b2:69: 1a:3f:c3:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjQwNTA0MjEwNzQ0WhcNMjQwNTExMjEwNzQ0WjAYMRYwFAYD VQQDEw02NjM2YTNhMC03NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyQWDpIoMXUPs07mH+LtZ4/Gd9pzsC/sKZSAyLGG10ztDqW3F8tWPBP7JwRa efRg7jNv/BYZQxDEtqltCYurKgzfC+uI+bItennpjXz+BX8ojMxuDU8W40nPwy7R vnXLC9w34wzEI3U08MKaEW5Ea2hS+Hxzo/TpyHAgnWw/4nPLRkmfjEJz10VEypfa F5+yCYdI553oCuhGKW0cIh72YHWiILjj+JDX8eCm/aiJVo97Y4o3wkyu+5AbuJG6 jASc7/2E5f5Aj0d0sfGuG18Pr/B00XBM9bhggrnjTn4DIFlXH5HzXaL5IA4EujHS rHkVA/ViqIcZd+5TmIGUHEiVCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHsvH9j AAx3RWkZz/65kPtA0DG8MB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCquLSaNxI4Swd2buivYH/znmh9y+yXHLDloYxAqCsVH+a97/W10vJk BtYbse2Sr1NtQyWQKzwOhpToWy7KFnytNuZQzliyl98qwT011vDvOA/XzIuZ5B4O L6zc7muggZ66GUgjsN8525nZWxEa95o/Re5cjiyOq3/zhIw+8B0q0mNmraQVmhiE qn4E6kXN64fkDdRCHWq7DrvWRUML1EY8Xe2pOwvU+6aetNPlvtbmXq/SmKIfz5bH uCxrQRshAUcuCX0QrjExcsRUbfGSeiossY9VtxxPBKlWnTIcumcC3nXiD6n0ZVxy zNbGlYPlWt2qv7hQ7BSrnnbqsmkaP8NR -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org