$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: s0SNoxuzbATwFFrXv5VLAytWlmXlDaWFA+qQxccCVPo= Subject key identifier: 8A:9E:7A:9B:12:10:E9:B3:00:20:30:9F:D9:8C:11:34:81:9C:A7:D5 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0A49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0A3C Signing time: Thu 02 May 2024 20:37:32 +0000 Manifest this update: Thu 02 May 2024 20:37:31 +0000 Manifest next update: Thu 09 May 2024 20:37:31 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: TGWPvQ5KuB6K0gxi6eKzvzeHDzt0YCe0XA3Q/3J4gUA=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: 4wuttNTcs2A1WMxfkljPXuhlrhcB6lESJJyM3JIzH0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2633 (0xa49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: May 2 20:37:31 2024 GMT Not After : May 9 20:37:31 2024 GMT Subject: CN=6633f98b-b590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:96:53:de:fd:41:e2:81:ae:18:b1:80:18: d4:25:40:a9:4c:35:51:93:cf:31:ec:b3:af:2b:27: 68:b9:69:d0:2e:ed:2f:78:b4:c9:cb:59:c0:d5:2c: e9:6c:92:ca:23:1f:c8:0e:e5:cb:0a:f9:a2:3a:11: 54:0d:6b:01:b5:31:22:fb:02:a2:1f:b7:86:99:9a: c7:91:52:47:17:60:9a:ad:06:59:ba:84:f0:16:05: d0:06:8c:20:53:95:38:a9:be:c7:1b:db:0c:07:20: b8:7d:0d:2d:d0:8d:86:0d:ad:aa:9f:e8:6e:c1:dc: e1:3e:31:e2:8b:ab:80:aa:8b:2f:ec:9f:0e:5c:d3: b1:65:f5:6b:60:23:c2:38:9d:de:35:30:01:89:c0: 53:e3:a8:06:7c:da:1d:cb:da:97:9e:3f:ca:af:4f: 6e:59:04:1f:37:94:06:c9:60:a4:4b:d0:8d:0b:dc: ac:0e:7d:9d:fe:7d:f1:11:cc:cf:3e:f8:a7:84:ae: 1c:45:b9:bd:3a:c3:b0:79:4a:92:f3:16:c8:37:d9: 09:54:3c:d6:75:bc:bf:24:be:64:8c:9a:6b:62:d6: 2d:46:33:88:fd:95:e7:c0:c2:40:1b:36:69:a3:7a: 8e:12:f0:67:ea:16:24:e8:15:19:83:bb:d5:b5:96: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:7A:9B:12:10:E9:B3:00:20:30:9F:D9:8C:11:34:81:9C:A7:D5 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:97:2c:1d:70:07:c6:2f:40:60:d9:46:3b:96:df:02:e3:82: c6:23:e0:98:36:0b:38:56:15:b4:3a:9d:fa:3c:0c:07:1c:80: 44:4f:97:77:b6:24:84:56:d6:0e:ea:9d:6a:4f:3c:43:ec:e8: 7b:2a:e1:de:ec:8c:e1:6f:76:85:1f:62:b4:20:4b:c8:52:70: 73:b6:d6:8c:4a:b7:be:a9:d7:eb:60:59:73:38:41:d3:ec:9a: fd:2b:ea:48:32:5c:b5:f3:27:97:1a:ce:e1:76:70:41:5c:e6: 5c:c3:35:df:4c:74:ff:f6:43:0b:22:4f:92:c1:01:19:cb:ce: 61:30:ff:8d:04:3f:6e:e0:21:f6:42:9a:b6:cb:71:7b:5c:a8: 90:8b:b5:43:d5:b0:57:5c:ed:e4:fe:77:0b:64:ef:4b:c5:e7: 45:86:41:a0:a1:85:b7:f7:53:48:86:10:c6:53:36:82:5f:0b: c8:44:fc:f1:74:db:e5:f8:de:eb:0f:39:9f:d1:d0:97:91:3e: 5d:b0:02:3a:24:05:f9:99:67:e5:c5:fb:91:19:24:42:35:2b: 2a:08:ee:3f:a1:c4:4c:e1:65:a1:8e:94:e9:09:6f:32:2c:35: 4f:7d:31:7b:3b:51:14:cf:d8:2d:54:36:51:82:0b:4d:f4:ba: d2:06:ed:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjQwNTAyMjAzNzMxWhcNMjQwNTA5MjAzNzMxWjAYMRYwFAYD VQQDEw02NjMzZjk4Yi1iNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIWWU979QeKBrhixgBjUJUCpTDVRk88x7LOvKydouWnQLu0veLTJy1nA1Szp bJLKIx/IDuXLCvmiOhFUDWsBtTEi+wKiH7eGmZrHkVJHF2CarQZZuoTwFgXQBowg U5U4qb7HG9sMByC4fQ0t0I2GDa2qn+huwdzhPjHii6uAqosv7J8OXNOxZfVrYCPC OJ3eNTABicBT46gGfNody9qXnj/Kr09uWQQfN5QGyWCkS9CNC9ysDn2d/n3xEczP PvinhK4cRbm9OsOweUqS8xbIN9kJVDzWdby/JL5kjJprYtYtRjOI/ZXnwMJAGzZp o3qOEvBn6hYk6BUZg7vVtZYABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqeepsS EOmzACAwn9mMETSBnKfVMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjlywdcAfGL0Bg2UY7lt8C44LGI+CYNgs4VhW0Op36PAwHHIBET5d3 tiSEVtYO6p1qTzxD7Oh7KuHe7Izhb3aFH2K0IEvIUnBzttaMSre+qdfrYFlzOEHT 7Jr9K+pIMly18yeXGs7hdnBBXOZcwzXfTHT/9kMLIk+SwQEZy85hMP+NBD9u4CH2 Qpq2y3F7XKiQi7VD1bBXXO3k/ncLZO9LxedFhkGgoYW391NIhhDGUzaCXwvIRPzx dNvl+N7rDzmf0dCXkT5dsAI6JAX5mWflxfuRGSRCNSsqCO4/ocRM4WWhjpTpCW8y LDVPfTF7O1EUz9gtVDZRggtN9LrSBu0L -----END CERTIFICATE-----Generated at Thu May 2 22:28:56 2024 by rpki-client on console-ams.rpki-client.org