$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: 5EWCCGbhEZMfD0QZ1fauLNk9GIFqr6lvo63icLdH8fQ= Subject key identifier: 24:67:5B:FF:0B:A1:46:B3:59:CE:81:77:94:01:94:61:8B:CA:7E:78 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 1588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 1564 Signing time: Tue 30 Apr 2024 17:28:00 +0000 Manifest this update: Tue 30 Apr 2024 17:28:00 +0000 Manifest next update: Tue 07 May 2024 17:28:00 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: jKwqeT9AXhfrPrvmNfIvIzr+BHaczvrSr2o2JqGDi2s=) 2: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: xGXH2PWmw8oDO8KHFjeFDl/oeWp4UKrtZ9hJajuuCEc=) 3: 88FE530C09C111EDBB795459C4F9AE02.roa (hash: 8Q0foLkbfyJo/brnRiDH23CBEQA0zE9Ep41v6mU3An4=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: HRxLdFHU7v9ktQmRHzKA7IbwxRL+QI1P77qnL5kGPjQ=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: kaCh08b2Mg8Eik2IuIhloga+8nnEdGyPNQCWzUmLk58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5512 (0x1588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Apr 30 17:28:00 2024 GMT Not After : May 7 17:28:00 2024 GMT Subject: CN=66312a20-ae11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:b3:36:af:5f:a3:4b:b3:5b:26:fa:e5:69: aa:1f:cc:01:7a:ae:52:cd:9a:b2:4c:e3:32:63:f2: 45:d4:c8:0a:22:f9:d1:e5:3a:32:f9:45:c0:9e:d0: 57:f1:4c:66:ba:44:4b:0e:48:9d:9d:04:45:22:ca: 10:21:ed:36:a2:ae:1c:d6:89:bf:83:ee:38:bf:32: c3:f8:44:78:42:3c:05:ea:76:e9:6c:6c:f2:ab:8d: eb:85:1e:92:27:5c:2b:08:4d:d4:55:75:59:c1:50: 6a:b8:8a:f5:78:2d:cf:ca:ac:3b:0b:9a:f4:03:da: e2:18:2b:ca:78:80:a1:33:1e:6b:dc:a3:17:85:44: 9c:40:26:9f:2c:4f:40:9b:29:66:c1:c9:c0:5b:66: b2:bf:27:c1:e7:f8:9f:70:f1:c4:28:c0:3b:30:06: 12:11:53:df:f0:1f:bd:61:c9:6b:af:54:8a:7d:56: d8:e8:85:f2:95:9d:1b:98:48:04:0e:d2:fe:c1:a0: bb:2f:9a:5e:41:03:03:68:27:2e:25:14:58:a0:a5: 3d:3a:6f:2f:23:2a:16:b2:a9:63:69:e0:ab:c1:1f: 18:1f:79:66:12:8f:94:db:d8:5a:56:ac:95:f8:31: d5:67:2e:62:97:47:1b:64:a3:19:a2:94:69:d6:cf: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:67:5B:FF:0B:A1:46:B3:59:CE:81:77:94:01:94:61:8B:CA:7E:78 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:6e:46:8f:d7:58:6a:50:d8:38:d9:6e:cf:37:c7:d8:6e: 18:73:97:bf:51:6e:2e:a8:5d:8f:e0:17:ad:44:45:90:9e:1e: 69:cf:27:a6:54:d8:f9:66:be:40:1c:d2:bb:dc:b3:39:fc:42: 28:0d:7d:88:b6:96:77:23:66:f5:85:1d:ec:03:e2:40:6d:72: ce:ec:a8:23:a5:e8:06:66:0e:eb:51:45:e1:e6:b3:06:de:61: c0:3d:ee:49:f3:7c:87:18:09:e9:46:1a:e1:45:f1:7c:ed:9b: 49:fb:de:98:41:d6:ce:27:d0:6f:ea:bc:9f:d6:02:6a:93:54: 04:2a:71:71:51:77:cf:c0:0f:00:9e:71:e2:07:7a:e6:35:ba: f0:ed:9c:6f:18:52:26:66:37:eb:14:d7:c0:03:04:86:39:ca: 9d:ea:c6:bd:13:d1:ed:3b:75:c6:70:42:0c:be:dd:ef:1e:db: ec:8d:c0:08:6f:03:4d:e9:e6:5c:ae:b4:b1:50:db:c2:5d:39: 86:e9:c2:c9:82:6c:85:6a:ab:d9:3f:52:8d:20:14:ee:31:a5: c5:f4:ea:74:b1:74:a3:76:1d:96:0a:f9:18:b1:ff:65:cb:60: ae:c3:16:a0:15:66:4a:a0:35:19:20:20:47:3f:b8:ce:59:03: f1:6f:57:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjQwNDMwMTcyODAwWhcNMjQwNTA3MTcyODAwWjAYMRYwFAYD VQQDEw02NjMxMmEyMC1hZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3mzNq9fo0uzWyb65WmqH8wBeq5SzZqyTOMyY/JF1MgKIvnR5Toy+UXAntBX 8UxmukRLDkidnQRFIsoQIe02oq4c1om/g+44vzLD+ER4QjwF6nbpbGzyq43rhR6S J1wrCE3UVXVZwVBquIr1eC3Pyqw7C5r0A9riGCvKeIChMx5r3KMXhUScQCafLE9A mylmwcnAW2ayvyfB5/ifcPHEKMA7MAYSEVPf8B+9Yclrr1SKfVbY6IXylZ0bmEgE DtL+waC7L5peQQMDaCcuJRRYoKU9Om8vIyoWsqljaeCrwR8YH3lmEo+U29haVqyV +DHVZy5il0cbZKMZopRp1s+vPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRnW/8L oUazWc6Bd5QBlGGLyn54MB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMcG5Gj9dYalDYONluzzfH2G4Yc5e/UW4uqF2P4BetREWQnh5pzyem VNj5Zr5AHNK73LM5/EIoDX2ItpZ3I2b1hR3sA+JAbXLO7KgjpegGZg7rUUXh5rMG 3mHAPe5J83yHGAnpRhrhRfF87ZtJ+96YQdbOJ9Bv6ryf1gJqk1QEKnFxUXfPwA8A nnHiB3rmNbrw7ZxvGFImZjfrFNfAAwSGOcqd6sa9E9HtO3XGcEIMvt3vHtvsjcAI bwNN6eZcrrSxUNvCXTmG6cLJgmyFaqvZP1KNIBTuMaXF9Op0sXSjdh2WCvkYsf9l y2CuwxagFWZKoDUZICBHP7jOWQPxb1dw -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:30 2024 by rpki-client on console-ams.rpki-client.org