$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: XHifC8xTR722Wd4K0mXgUmO5zJEhPhDREz7PJhoth6o= Subject key identifier: 04:68:C2:97:5B:05:A6:CA:4E:5B:66:5B:8F:B2:A1:A3:59:51:91:DE Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 0658 Signing time: Sat 04 May 2024 23:48:41 +0000 Manifest this update: Sat 04 May 2024 23:48:40 +0000 Manifest next update: Sat 11 May 2024 23:48:40 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: KgTBrbp8MEpgenMTdCp7sXgs219QVn5pgHF5+fsFsQg=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: UZXzxjEsCvYvjA8VYfwq4fue0gsB4o2zNKVV+TXsQ1U=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: kH876vZyW3GeVSO2xrTOLPkMn6gRw6bbF6f8wrV0tl0=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: NMyF+OtgcdxCSHBe6946r2tRgTZHM6xQVf7GsLi8zGo=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: 7U0KbS7kyF4JWin9ap72wOBGLoOZmRrTTINcl+aoRiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: May 4 23:48:40 2024 GMT Not After : May 11 23:48:40 2024 GMT Subject: CN=6636c959-452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:22:ef:66:c5:e6:7e:72:f8:40:92:cc:c5: 1a:fd:65:65:21:05:a4:d9:09:68:4a:d5:76:d9:2b: 2b:b1:76:bb:20:c1:d5:53:07:fb:b1:66:85:09:e5: cf:c6:b7:73:43:4b:31:55:f2:da:cd:91:20:04:96: fa:4c:43:f9:1d:67:29:ec:92:8c:7b:ce:03:fa:eb: ee:c0:b0:67:3e:88:cc:fa:29:0a:99:29:85:75:68: 9e:ae:db:07:20:12:9a:1b:03:c1:cd:24:b0:31:58: a0:c5:40:6e:08:c6:83:e9:7a:01:64:18:06:04:54: 72:78:73:01:7c:c3:a8:3f:91:58:15:ed:13:93:a0: 0f:eb:52:6f:74:b1:09:14:8f:d5:68:42:f1:e2:32: 4a:ac:b9:c2:be:f3:14:1f:53:81:2c:5a:bc:f3:b4: a3:91:dc:fc:7a:df:86:6d:2f:db:44:56:b5:69:52: 7f:36:5f:18:bb:6a:ce:e8:7e:27:32:a1:b6:c6:bb: 13:88:e8:34:9b:f4:41:7d:21:a1:6d:8d:b0:87:2b: d7:1d:0c:02:35:2c:41:ef:d3:1a:34:32:1b:80:17: bd:7f:36:0a:03:5b:5c:e5:67:f6:2a:3f:50:9a:8b: 42:3c:30:eb:a9:5f:68:9c:cb:3f:f9:93:97:9f:b0: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:C2:97:5B:05:A6:CA:4E:5B:66:5B:8F:B2:A1:A3:59:51:91:DE X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d8:ef:2a:fb:47:b5:b7:9c:b0:88:f0:24:58:9f:ef:3a:a4: dc:5e:3c:7c:db:ac:2d:9a:63:82:f6:f0:e1:7f:e6:78:8a:c6: b7:87:71:b0:30:90:ec:c8:2e:04:b3:72:d5:61:f5:62:af:f2: bc:47:19:16:c5:d2:e4:54:a5:d0:50:0c:6b:82:3a:2d:1c:6b: 0d:82:24:ab:98:df:1f:46:73:48:67:9a:71:a5:83:02:9a:54: e5:f7:cc:72:07:96:47:0f:e4:f8:02:fe:9d:42:81:f0:48:9f: c8:70:de:c8:f0:8e:24:8f:d8:95:b4:26:03:22:e5:0a:a5:bf: 1a:00:0a:b9:db:c8:e7:ed:48:e1:89:29:ee:6f:eb:86:bc:f8: d0:30:cc:98:54:68:fb:79:cd:a7:26:de:42:d5:cc:5b:de:45: d5:68:a8:ef:e0:01:a4:42:40:82:8f:dd:1b:7b:4f:b1:12:64: 51:4c:20:af:6f:77:52:50:a7:a6:36:9e:be:d4:42:8d:18:a1: c2:e7:e5:ba:e1:c4:1a:2f:2b:20:69:e0:62:4a:f6:01:be:d8: 5b:f5:86:f1:30:98:85:ed:2f:14:45:e6:94:6f:3d:42:60:f8: d2:a6:15:43:3b:af:33:f8:c1:c8:b0:40:bc:f9:ce:69:6c:e5: d2:5d:4c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjQwNTA0MjM0ODQwWhcNMjQwNTExMjM0ODQwWjAYMRYwFAYD VQQDEw02NjM2Yzk1OS00NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1isi72bF5n5y+ECSzMUa/WVlIQWk2QloStV22SsrsXa7IMHVUwf7sWaFCeXP xrdzQ0sxVfLazZEgBJb6TEP5HWcp7JKMe84D+uvuwLBnPojM+ikKmSmFdWiertsH IBKaGwPBzSSwMVigxUBuCMaD6XoBZBgGBFRyeHMBfMOoP5FYFe0Tk6AP61JvdLEJ FI/VaELx4jJKrLnCvvMUH1OBLFq887Sjkdz8et+GbS/bRFa1aVJ/Nl8Yu2rO6H4n MqG2xrsTiOg0m/RBfSGhbY2whyvXHQwCNSxB79MaNDIbgBe9fzYKA1tc5Wf2Kj9Q motCPDDrqV9onMs/+ZOXn7Cv3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARowpdb BabKTltmW4+yoaNZUZHeMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD2O8q+0e1t5ywiPAkWJ/vOqTcXjx826wtmmOC9vDhf+Z4isa3h3Gw MJDsyC4Es3LVYfVir/K8RxkWxdLkVKXQUAxrgjotHGsNgiSrmN8fRnNIZ5pxpYMC mlTl98xyB5ZHD+T4Av6dQoHwSJ/IcN7I8I4kj9iVtCYDIuUKpb8aAAq528jn7Ujh iSnub+uGvPjQMMyYVGj7ec2nJt5C1cxb3kXVaKjv4AGkQkCCj90be0+xEmRRTCCv b3dSUKemNp6+1EKNGKHC5+W64cQaLysgaeBiSvYBvthb9YbxMJiF7S8UReaUbz1C YPjSphVDO68z+MHIsEC8+c5pbOXSXUzI -----END CERTIFICATE-----Generated at Sun May 5 01:13:20 2024 by rpki-client on console-ams.rpki-client.org