$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: 9gHPYcS2EFs95s66dZTGz0cixyUlTOAMoRl/BEzHw+Q= Subject key identifier: 18:DA:90:E1:AF:DB:15:BC:10:6F:40:2B:5F:B2:B2:A8:05:96:5A:9B Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1BDC Signing time: Mon 06 May 2024 16:41:18 +0000 Manifest this update: Mon 06 May 2024 16:41:17 +0000 Manifest next update: Mon 13 May 2024 16:41:17 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: SH3VN7IZAfVcbHdx0ej79OxjDadiyNnTJMptTNQeFkg=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: AjoOOQloAhoraiJ5vJXIIOt5SehZ71Rq/8cuTddHEkQ=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: 6pYHHuWWADiGPoELEZz/McGlCa3GERUAOh4apj+q8Hk=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: X4d+GA+oxaD3pHMglLO+cJUzGrxCwF23SC21gJFgjWk=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: Q6z3r6Mcneri0vilb6I25R9o0jD8rs1NHitzF/FotBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7160 (0x1bf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: May 6 16:41:17 2024 GMT Not After : May 13 16:41:17 2024 GMT Subject: CN=6639082d-3db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:53:56:e5:38:86:74:ee:d9:cb:7a:a6:4f: 8d:f9:b8:33:4b:07:e7:42:b2:3e:33:da:a6:78:16: 73:ad:df:de:f1:b6:eb:fb:e4:3f:a8:19:f6:1a:d3: 21:84:3a:72:ae:4c:a3:93:50:75:51:dc:e5:11:95: 04:4f:ac:7d:a6:9c:56:b4:18:9d:e4:4c:15:9d:dc: d0:8d:94:d5:12:c2:9d:d2:02:6e:e8:d2:95:94:1f: d4:dc:78:97:7a:09:bb:4b:a6:d9:3b:56:83:97:1f: 27:cc:79:86:52:08:d0:86:c3:7b:a6:3c:26:47:b9: 4e:d2:1d:56:3f:f9:14:be:72:ec:c7:83:e1:0e:bb: 45:39:76:b6:b1:bc:3c:56:9c:39:3b:89:27:17:7b: a1:fb:4a:6c:c4:c9:ef:06:04:e4:a0:10:fc:0e:46: 2c:51:33:84:38:a7:56:da:86:08:e7:52:6d:b7:d1: 4d:31:52:14:c2:36:58:e2:d5:d2:18:8f:70:6a:c4: 89:91:3e:b6:78:0f:9e:3c:08:00:dd:96:2f:be:a2: ad:6c:fe:de:f8:3c:9f:4f:eb:5d:3a:ad:d6:24:98: 34:e0:e8:19:72:3c:04:36:30:2a:ce:c8:ab:63:ec: 0c:37:20:f9:71:1b:b9:00:03:66:40:d0:f8:78:7a: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DA:90:E1:AF:DB:15:BC:10:6F:40:2B:5F:B2:B2:A8:05:96:5A:9B X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c8:a5:47:c0:c3:10:e9:74:d6:21:db:41:32:3e:c1:08:3c: 14:61:11:82:e4:73:ba:b4:01:df:ac:a8:d6:bc:cc:97:1f:de: e9:c0:24:fc:6f:a1:20:7d:f0:ac:4a:0a:bc:cb:81:f6:e9:bb: da:44:ba:af:c6:0b:51:6f:10:ae:32:e7:94:98:99:7c:9b:5f: 45:35:11:57:59:a8:82:79:04:87:33:6c:de:30:3f:b2:59:c8: a0:d2:5c:f8:6f:da:a3:e0:8a:be:f9:cc:c1:c6:6b:04:fb:bc: bd:11:b4:64:55:82:06:49:ad:c6:0c:50:86:86:74:e4:0e:e3: c7:56:d3:d9:29:4c:b6:c1:56:5b:92:9a:75:4e:d2:29:12:e7: d4:26:29:6e:de:e3:43:b1:e1:4e:a1:10:98:97:0f:96:ff:f9: 38:ac:8a:ce:a7:af:de:25:85:76:2c:1a:f6:28:9d:8a:bc:96: 47:7c:a6:29:df:5a:9b:5d:2a:5b:da:b9:94:68:c4:3f:13:af: 0c:12:b7:62:a6:db:b3:68:62:38:2c:29:c8:6e:91:3a:ab:80: 2e:53:47:1a:f8:7f:67:74:f0:0e:a1:6b:cc:55:dc:3d:bf:4c: 35:d6:aa:52:cd:66:4c:3b:03:13:3d:18:23:6c:72:0a:4d:42: 78:b4:4a:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjQwNTA2MTY0MTE3WhcNMjQwNTEzMTY0MTE3WjAYMRYwFAYD VQQDEw02NjM5MDgyZC0zZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4VTVuU4hnTu2ct6pk+N+bgzSwfnQrI+M9qmeBZzrd/e8bbr++Q/qBn2GtMh hDpyrkyjk1B1UdzlEZUET6x9ppxWtBid5EwVndzQjZTVEsKd0gJu6NKVlB/U3HiX egm7S6bZO1aDlx8nzHmGUgjQhsN7pjwmR7lO0h1WP/kUvnLsx4PhDrtFOXa2sbw8 Vpw5O4knF3uh+0psxMnvBgTkoBD8DkYsUTOEOKdW2oYI51Jtt9FNMVIUwjZY4tXS GI9wasSJkT62eA+ePAgA3ZYvvqKtbP7e+DyfT+tdOq3WJJg04OgZcjwENjAqzsir Y+wMNyD5cRu5AANmQND4eHpwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjakOGv 2xW8EG9AK1+ysqgFllqbMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBryKVHwMMQ6XTWIdtBMj7BCDwUYRGC5HO6tAHfrKjWvMyXH97pwCT8 b6EgffCsSgq8y4H26bvaRLqvxgtRbxCuMueUmJl8m19FNRFXWaiCeQSHM2zeMD+y Wcig0lz4b9qj4Iq++czBxmsE+7y9EbRkVYIGSa3GDFCGhnTkDuPHVtPZKUy2wVZb kpp1TtIpEufUJilu3uNDseFOoRCYlw+W//k4rIrOp6/eJYV2LBr2KJ2KvJZHfKYp 31qbXSpb2rmUaMQ/E68MErdiptuzaGI4LCnIbpE6q4AuU0ca+H9ndPAOoWvMVdw9 v0w11qpSzWZMOwMTPRgjbHIKTUJ4tEqM -----END CERTIFICATE-----Generated at Mon May 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org