$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: nzD1f7YVJufjzmFmRnm1AF9NXO/9fJoA7Fn1I80H3b0= Subject key identifier: 72:27:C0:22:C8:2F:04:B5:77:B0:27:34:1B:79:23:DA:A6:99:D0:A4 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0ED1 Signing time: Tue 30 Apr 2024 18:33:42 +0000 Manifest this update: Tue 30 Apr 2024 18:33:41 +0000 Manifest next update: Tue 07 May 2024 18:33:41 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: W336BtQvOr1tpsi0ZwekeeK0Z7xAh9zELGO/BP6haUk=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: UbVmqX2EN7OvTD/G9R2qTa0iVUxYEuY+GS2Jfwyu0II=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Apr 30 18:33:41 2024 GMT Not After : May 7 18:33:41 2024 GMT Subject: CN=66313985-5e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:4a:5b:4c:57:b1:da:16:41:00:4d:dc:d5: a3:93:ab:fb:83:56:45:4a:cf:c8:54:f9:bf:77:9f: 33:43:56:58:43:0b:38:e8:30:f6:fa:1e:f6:fb:f9: 39:df:a1:c7:d5:a7:e5:a6:f3:f5:19:4e:af:f8:38: ed:b2:fc:23:3b:82:4d:98:11:9e:26:a4:58:07:f6: b7:fd:c2:f1:54:a6:d4:f1:66:77:b2:66:7b:39:77: f7:8d:87:a9:7a:ac:00:d2:9c:8c:9a:df:b3:73:ea: 17:7d:ba:0c:53:a7:e4:85:a3:17:87:48:bf:e2:42: 89:a1:25:73:3f:0e:60:db:a3:c1:23:d1:b7:39:cf: 56:da:27:fe:a3:1b:6a:49:08:11:e5:69:5c:cc:56: 41:f7:6e:cd:76:6a:15:6b:95:50:06:0e:b7:e2:91: eb:34:8b:29:06:c5:38:92:e1:c7:64:d6:61:ef:a7: 0e:b4:1e:7c:ef:cc:f9:6b:01:b1:0c:b4:fb:f2:ad: 77:1e:1c:5d:36:5f:48:1c:1f:2d:df:6c:45:25:66: cd:b1:58:53:5d:71:ce:03:26:a0:73:46:1c:5a:d9: 9c:e9:0c:5d:85:e8:93:88:5d:5a:3a:f2:61:cc:79: 0a:fb:cd:b4:a6:46:10:29:8a:f2:70:9c:29:c9:f3: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:C0:22:C8:2F:04:B5:77:B0:27:34:1B:79:23:DA:A6:99:D0:A4 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a3:9e:dc:52:8b:55:29:11:6f:08:4a:fa:3b:0e:57:69:81: 3f:7e:d7:f9:1a:28:1d:70:57:76:c3:40:a7:c9:81:0b:84:04: 2d:5e:05:57:e1:d2:4d:93:bc:a8:ed:9d:07:c9:1e:93:92:ff: 3d:0a:cb:64:c4:0c:aa:04:9c:5f:8d:49:00:7c:f6:fe:55:95: eb:94:48:b8:38:bd:47:bf:0c:83:9e:bd:85:b2:03:14:06:9f: 58:12:4b:ab:8c:3c:ba:e0:ef:ff:8c:5b:9b:02:3b:0c:20:0d: 99:ad:c6:6a:de:0f:3e:0b:d5:d6:6d:53:ec:03:6f:7e:3c:60: ef:f4:06:10:a2:54:ce:ef:92:d1:44:21:49:01:55:cd:8e:be: 6c:cd:30:84:77:ca:cd:5a:88:9e:68:ae:cf:9e:28:db:d1:54: fe:8d:87:45:0c:33:8e:a6:23:0e:ad:d4:a0:eb:d1:4e:c6:83: ca:f0:7f:bf:5a:13:02:01:57:7c:9a:61:cc:d7:a1:0b:ee:9d: b1:f4:e1:ea:ed:00:94:1a:a6:7f:04:68:d8:01:d2:48:6f:c5: b4:b2:3c:35:9a:01:9b:2f:c8:d6:b0:1b:89:90:8a:36:4b:f2: dc:9d:0d:d2:61:31:32:07:38:c3:ed:ff:eb:ae:19:cb:0e:92: f8:8d:58:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjQwNDMwMTgzMzQxWhcNMjQwNTA3MTgzMzQxWjAYMRYwFAYD VQQDEw02NjMxMzk4NS01ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtY1KW0xXsdoWQQBN3NWjk6v7g1ZFSs/IVPm/d58zQ1ZYQws46DD2+h72+/k5 36HH1aflpvP1GU6v+DjtsvwjO4JNmBGeJqRYB/a3/cLxVKbU8WZ3smZ7OXf3jYep eqwA0pyMmt+zc+oXfboMU6fkhaMXh0i/4kKJoSVzPw5g26PBI9G3Oc9W2if+oxtq SQgR5WlczFZB927NdmoVa5VQBg634pHrNIspBsU4kuHHZNZh76cOtB5878z5awGx DLT78q13HhxdNl9IHB8t32xFJWbNsVhTXXHOAyagc0YcWtmc6QxdheiTiF1aOvJh zHkK+820pkYQKYrycJwpyfP9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHInwCLI LwS1d7AnNBt5I9qmmdCkMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZo57cUotVKRFvCEr6Ow5XaYE/ftf5GigdcFd2w0CnyYELhAQtXgVX 4dJNk7yo7Z0HyR6Tkv89CstkxAyqBJxfjUkAfPb+VZXrlEi4OL1HvwyDnr2FsgMU Bp9YEkurjDy64O//jFubAjsMIA2ZrcZq3g8+C9XWbVPsA29+PGDv9AYQolTO75LR RCFJAVXNjr5szTCEd8rNWoieaK7Pnijb0VT+jYdFDDOOpiMOrdSg69FOxoPK8H+/ WhMCAVd8mmHM16EL7p2x9OHq7QCUGqZ/BGjYAdJIb8W0sjw1mgGbL8jWsBuJkIo2 S/LcnQ3SYTEyBzjD7f/rrhnLDpL4jVgO -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:03 2024 by rpki-client on console-fra.rpki-client.org