$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: LprfqxFVA3O1sxX3a5WnROu7PgzgzvrwyjdDofF3kmU= Subject key identifier: 67:12:48:C1:BB:E3:6C:79:13:BC:34:42:1D:0D:66:D6:EC:84:F5:E0 Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 02CE Signing time: Sun 05 May 2024 03:32:41 +0000 Manifest this update: Sun 05 May 2024 03:32:41 +0000 Manifest next update: Sun 12 May 2024 03:32:41 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: UEF7eEIz9yrSgwMbDc8jfRNjjHl0AwmWUfQ9jCpP6ck=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: vpqcQmNYsSU8xv6Tdls1gDEsQZEBAwcUcBCWCw5IZLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: May 5 03:32:41 2024 GMT Not After : May 12 03:32:41 2024 GMT Subject: CN=6636fdd9-fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:a0:cd:c6:9f:b8:8e:68:47:9d:2c:39:31: ef:ba:43:db:97:40:63:3e:ee:63:4d:a7:f3:dd:f4: f2:21:3a:e3:ac:2a:3b:0e:9b:c3:da:af:5e:bf:aa: 16:e7:b8:ac:d0:10:ed:90:3f:f1:96:c5:e8:2f:53: ce:0f:d4:0b:59:7d:43:dc:4d:30:38:9e:3d:1f:51: e4:b9:24:ed:07:e9:35:64:12:f3:cb:d3:5a:a6:29: 21:0e:0b:de:07:8a:db:19:f1:03:95:e3:37:bc:6f: 61:ee:76:83:1d:0f:fa:9a:7f:5f:c3:e7:7e:cd:08: 9b:c4:61:00:b9:fe:83:d7:fb:e2:bd:4d:c4:29:b5: 92:c5:16:b9:03:a4:ba:7e:12:67:72:94:15:3e:4e: 6c:02:99:a7:88:db:5a:c1:b6:7b:e5:ce:73:4e:21: 65:ce:78:07:b7:e1:95:2f:af:e8:9b:78:7f:c8:91: 70:fe:da:34:fe:76:fd:02:bf:1a:55:27:50:d9:7d: 5e:54:35:a4:3f:32:cc:dc:cd:b2:ef:bc:cb:6a:95: 30:08:70:92:45:57:48:c5:cd:e0:3a:dd:33:94:64: 18:6c:1a:87:a7:07:a3:c6:c3:87:c5:91:24:9b:6c: 7b:9a:3c:cb:59:58:e5:de:e4:a8:c9:3a:6e:4b:de: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:48:C1:BB:E3:6C:79:13:BC:34:42:1D:0D:66:D6:EC:84:F5:E0 X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f4:f5:5f:5f:06:fe:f4:c9:99:8f:8f:6c:20:b4:61:d9:d4: 4a:d0:b4:4a:c4:49:d1:c8:3a:88:6e:de:67:44:8b:95:6e:97: 25:8c:8d:df:39:31:53:f4:61:e8:00:1f:6d:21:d1:58:0e:b0: d9:5b:2f:41:83:67:06:c6:a7:9d:ce:04:cf:ba:1b:a2:44:e1: a8:c2:9c:97:9a:9d:55:67:eb:a8:c3:74:5a:74:df:cc:d1:b1: 9b:66:a4:6d:d2:37:82:01:6f:ba:17:c0:d0:c2:a0:ae:33:5a: 78:93:c8:11:f6:d3:2b:09:54:32:da:93:af:9a:c9:eb:99:86: c0:4d:d3:2a:f6:ce:7e:85:c7:e8:8e:85:0f:aa:4b:53:7d:d2: f0:7a:81:0a:5e:98:f4:e6:68:c4:95:a1:3a:67:67:e2:57:41: bb:f2:5d:d6:1e:c6:1d:64:95:7f:24:a4:43:a3:97:76:2e:7a: 0b:38:60:01:c6:98:7b:82:e0:ba:8f:8d:67:53:21:5a:af:cd: 05:58:41:e0:ae:b3:3b:7f:30:2d:cc:56:bc:d9:8c:45:b5:31: 13:e9:90:e9:68:bf:f4:ba:d4:6e:92:89:74:af:2f:b0:3d:97: 6a:a7:c2:ae:05:57:b2:7e:51:2f:70:70:63:dc:02:bf:f3:cf: 05:03:bd:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjQwNTA1MDMzMjQxWhcNMjQwNTEyMDMzMjQxWjAYMRYwFAYD VQQDEw02NjM2ZmRkOS1mYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4ugzcafuI5oR50sOTHvukPbl0BjPu5jTafz3fTyITrjrCo7DpvD2q9ev6oW 57is0BDtkD/xlsXoL1POD9QLWX1D3E0wOJ49H1HkuSTtB+k1ZBLzy9NapikhDgve B4rbGfEDleM3vG9h7naDHQ/6mn9fw+d+zQibxGEAuf6D1/vivU3EKbWSxRa5A6S6 fhJncpQVPk5sApmniNtawbZ75c5zTiFlzngHt+GVL6/om3h/yJFw/to0/nb9Ar8a VSdQ2X1eVDWkPzLM3M2y77zLapUwCHCSRVdIxc3gOt0zlGQYbBqHpwejxsOHxZEk m2x7mjzLWVjl3uSoyTpuS95/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcSSMG7 42x5E7w0Qh0NZtbshPXgMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB09PVfXwb+9MmZj49sILRh2dRK0LRKxEnRyDqIbt5nRIuVbpcljI3f OTFT9GHoAB9tIdFYDrDZWy9Bg2cGxqedzgTPuhuiROGowpyXmp1VZ+uow3RadN/M 0bGbZqRt0jeCAW+6F8DQwqCuM1p4k8gR9tMrCVQy2pOvmsnrmYbATdMq9s5+hcfo joUPqktTfdLweoEKXpj05mjElaE6Z2fiV0G78l3WHsYdZJV/JKRDo5d2LnoLOGAB xph7guC6j41nUyFar80FWEHgrrM7fzAtzFa82YxFtTET6ZDpaL/0utRukol0ry+w PZdqp8KuBVeyflEvcHBj3AK/888FA708 -----END CERTIFICATE-----Generated at Sun May 5 04:40:00 2024 by rpki-client on console-ams.rpki-client.org