$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: Ez0+g5tmMiP5N7AFCK+uogSGEw7WOlU2HzEKLQsJFOM= Subject key identifier: C2:C3:F1:A1:3F:CD:6B:DC:65:D3:0A:26:E3:8C:C5:33:C8:78:D7:62 Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 1410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 1406 Signing time: Sat 04 May 2024 17:33:37 +0000 Manifest this update: Sat 04 May 2024 17:33:36 +0000 Manifest next update: Sat 11 May 2024 17:33:36 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: YMsOQLPM48DJEu0pvQPwhDUk0ztL4f9VLjZSw/M257g=) 2: 3BA876C457A911E8A8A8B477C4F9AE02.roa (hash: c/2BMvxVG+wPQu7bLGPuWO2CIk/JxXDbBYkIvLxWdII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5136 (0x1410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: May 4 17:33:36 2024 GMT Not After : May 11 17:33:36 2024 GMT Subject: CN=66367170-0590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:f9:28:0a:85:19:1d:ee:7e:b0:14:97:cf: 8f:ac:aa:0a:c1:6b:f6:5e:c4:91:d5:b9:9b:72:76: b1:3b:9c:06:e6:42:71:4d:db:71:fe:eb:34:c8:3c: b7:64:19:29:e8:4e:0d:1d:d0:4f:1c:dd:58:f5:b7: 8a:da:32:9f:01:0a:6d:85:e5:83:2a:c3:18:73:db: 2e:c6:c2:3b:ff:a7:e4:9d:37:40:cb:ea:88:e0:63: c3:67:76:5a:2b:ec:55:4d:cb:c9:74:d8:21:4b:63: 36:3b:5f:4f:1d:64:2a:e5:26:c7:a1:59:96:7e:a9: b1:0a:13:50:3c:bf:e7:e8:e0:bd:5d:ec:c9:0e:4e: cd:1a:6a:a6:1f:3d:02:fc:57:ef:8a:24:5e:37:e0: 8e:91:be:3a:0d:20:7e:e7:fb:ec:81:25:f0:03:d8: 90:e8:cb:37:40:70:3a:a8:66:4e:ec:7d:4a:53:ed: 5a:c8:31:68:f5:b2:f1:8e:68:3e:b0:7a:12:75:9f: 4f:89:6b:55:a8:08:94:e5:32:ca:7f:97:af:6b:93: 66:59:ce:91:04:5d:f3:59:9a:96:cb:c7:25:37:2c: 3e:f7:0d:ad:c1:1d:a2:d9:70:f4:7b:5f:07:70:ae: 4f:c0:44:40:e6:f1:a9:66:81:24:f9:b9:61:2b:ab: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:F1:A1:3F:CD:6B:DC:65:D3:0A:26:E3:8C:C5:33:C8:78:D7:62 X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e5:19:4e:d3:0e:9a:7d:c5:df:18:50:7e:f1:59:13:63:ae: 0a:31:4a:fc:72:7c:e2:f3:69:ce:de:04:62:0f:a9:11:c8:99: d7:cf:f5:99:43:63:38:0f:80:0a:38:96:e4:b7:4e:ae:de:dd: c7:90:f6:98:e9:95:fc:dc:95:62:3e:09:5d:38:db:a4:86:16: 61:70:2e:2f:6e:79:2f:4d:17:13:0f:58:b2:33:b4:a1:5f:cb: f9:85:66:94:44:5d:8b:83:74:b6:73:cf:29:e1:06:51:da:1a: d1:1d:37:d8:60:95:a1:87:32:0b:f9:6d:55:e7:aa:ed:3c:3a: 71:e0:fd:82:6c:84:4c:a5:4b:e0:ab:98:c6:75:bd:11:46:f0: ce:cd:23:cb:78:1e:8f:17:fd:44:fb:99:80:60:94:54:06:80: d3:a8:08:19:46:db:4b:e3:05:f0:7e:c0:01:ae:90:b3:c3:98: 34:a3:d9:8e:02:18:49:1a:18:bb:d1:a3:33:1b:2d:7c:6d:8d: cc:ba:2e:d3:ae:a7:2a:37:3a:9e:d5:5d:39:f4:a3:73:8d:f4: f8:34:c5:d2:06:ec:fe:07:81:c8:c6:40:d8:c7:fc:0c:ae:73: 5f:80:03:0f:6a:1b:8f:f5:5e:5e:3e:d3:db:eb:d2:61:fb:0f: e9:b1:fb:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjQwNTA0MTczMzM2WhcNMjQwNTExMTczMzM2WjAYMRYwFAYD VQQDEw02NjM2NzE3MC0wNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMP5KAqFGR3ufrAUl8+PrKoKwWv2XsSR1bmbcnaxO5wG5kJxTdtx/us0yDy3 ZBkp6E4NHdBPHN1Y9beK2jKfAQptheWDKsMYc9suxsI7/6fknTdAy+qI4GPDZ3Za K+xVTcvJdNghS2M2O19PHWQq5SbHoVmWfqmxChNQPL/n6OC9XezJDk7NGmqmHz0C /FfviiReN+COkb46DSB+5/vsgSXwA9iQ6Ms3QHA6qGZO7H1KU+1ayDFo9bLxjmg+ sHoSdZ9PiWtVqAiU5TLKf5eva5NmWc6RBF3zWZqWy8clNyw+9w2twR2i2XD0e18H cK5PwERA5vGpZoEk+blhK6ueWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLD8aE/ zWvcZdMKJuOMxTPIeNdiMB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU5RlO0w6afcXfGFB+8VkTY64KMUr8cnzi82nO3gRiD6kRyJnXz/WZ Q2M4D4AKOJbkt06u3t3HkPaY6ZX83JViPgldONukhhZhcC4vbnkvTRcTD1iyM7Sh X8v5hWaURF2Lg3S2c88p4QZR2hrRHTfYYJWhhzIL+W1V56rtPDpx4P2CbIRMpUvg q5jGdb0RRvDOzSPLeB6PF/1E+5mAYJRUBoDTqAgZRttL4wXwfsABrpCzw5g0o9mO AhhJGhi70aMzGy18bY3Mui7TrqcqNzqe1V059KNzjfT4NMXSBuz+B4HIxkDYx/wM rnNfgAMPahuP9V5ePtPb69Jh+w/psfv2 -----END CERTIFICATE-----Generated at Sat May 4 19:58:42 2024 by rpki-client on console-ams.rpki-client.org