$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft File: J92Lu4-1-s3BnynT7CdF1RENip8.mft (raw, json) Hash identifier: 6e5yILbNc0lXv1pk/ktCwlSCCmYIQE2JhorEp9b29wo= Subject key identifier: 0D:DC:56:BD:9C:60:5B:B4:FB:84:14:08:35:7A:DA:84:D1:8D:45:12 Authority key identifier: 27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F Certificate issuer: /CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft Manifest number: 0861 Signing time: Sat 04 May 2024 21:48:10 +0000 Manifest this update: Sat 04 May 2024 21:48:09 +0000 Manifest next update: Sat 11 May 2024 21:48:09 +0000 Files and hashes: 1: J92Lu4-1-s3BnynT7CdF1RENip8.crl (hash: f43q+3OnBhvpBxGpzRnPE/7pD1iww7pgHA7esi6eucc=) 2: CC1DFBAC9F0F11EAA4419D2DC4F9AE02.roa (hash: SV6wn1ONKGUETn7phh6Jtm/x58pYdRu9KHlc2SCIoEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3FD/serialNumber=27DD8BBB8FB5FACDC19F29D3EC2745D5110D8A9F Validity Not Before: May 4 21:48:09 2024 GMT Not After : May 11 21:48:09 2024 GMT Subject: CN=6636ad1a-ec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:ba:a3:8a:27:63:a5:30:c4:38:08:41:8a: ce:b8:ee:50:d2:a6:bc:82:8e:de:9c:06:c7:6e:f5: 92:a1:89:61:8f:e7:c9:86:2b:c9:18:39:74:ed:a2: 8a:83:a0:f6:af:94:1f:f6:0f:d7:51:24:25:5f:65: 2c:33:c7:7e:4f:ec:0e:e1:94:29:4f:06:a0:fa:62: 77:6a:5f:02:93:d8:a3:a1:9a:4e:29:85:30:f7:64: a7:24:90:52:9c:27:4c:18:0d:d8:94:f5:ce:fe:ab: bb:89:ae:29:f3:86:d9:e4:57:ea:22:29:3b:65:72: 03:ea:08:fc:04:e7:24:82:a2:d3:21:97:cf:dc:b9: 3b:68:91:49:0a:33:db:43:b0:3f:fd:bb:1b:1e:37: b3:06:2b:3d:38:83:0d:e5:2e:bf:8a:35:79:7a:b1: 51:59:af:ee:83:ce:99:22:2c:17:b0:fc:43:cb:c2: 84:75:7e:9f:f9:6a:45:56:6e:48:ac:c7:8e:08:18: 24:32:b6:ae:e4:ef:3d:82:48:e7:d0:e7:5b:c8:c2: de:93:b5:9c:38:45:7f:a1:88:9c:51:50:b7:77:55: fa:02:1c:f3:e8:06:53:e3:af:bd:8a:27:9c:74:84: f0:3a:59:06:36:17:06:5c:89:57:ad:f4:86:7d:28: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:56:BD:9C:60:5B:B4:FB:84:14:08:35:7A:DA:84:D1:8D:45:12 X509v3 Authority Key Identifier: keyid:27:DD:8B:BB:8F:B5:FA:CD:C1:9F:29:D3:EC:27:45:D5:11:0D:8A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J92Lu4-1-s3BnynT7CdF1RENip8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3FD/A6B3D4789F0E11EA80B75B2CC4F9AE02/J92Lu4-1-s3BnynT7CdF1RENip8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:55:47:a9:82:b0:9b:58:91:0c:c5:2b:ec:89:2f:bc:22:4a: 99:f5:95:1c:5c:a3:70:56:b1:89:cb:b2:1a:f5:f4:39:8d:4b: 29:06:81:de:2a:8d:27:52:93:16:59:aa:b7:5e:0b:43:6a:c6: 2a:cc:b9:38:b1:74:c8:39:26:0d:de:43:69:c0:b7:39:33:19: 34:94:ff:da:ce:12:f3:f4:a2:82:a2:03:10:0e:93:78:49:4c: 95:3b:16:5b:71:35:6f:3c:97:48:37:5c:c3:74:43:cf:70:6b: aa:8d:11:3c:97:9b:9f:d4:a6:1b:0c:08:4a:d6:07:24:df:d8: 33:cf:1d:52:87:21:9c:72:6e:dd:70:8b:68:2d:67:bc:ab:9c: fa:d9:22:c7:af:9a:79:c1:4e:a8:f9:89:ba:96:39:de:58:28: b2:f9:86:15:40:6f:00:c1:1a:09:f0:c9:cd:10:6f:03:36:20: ad:f9:92:4c:12:93:1f:0c:3e:be:81:9e:ed:3c:db:ba:2a:04: 93:9b:c0:7f:8d:b4:2f:ba:54:4b:ba:38:0e:bb:39:23:cd:de: 5f:4d:e6:0d:d2:58:9e:25:5f:b3:c1:2d:d5:a1:97:f3:a9:7d: af:92:61:b2:e1:90:07:c0:88:1f:fe:cc:16:16:ef:f0:d6:76: b8:4d:c7:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRkQxMTAvBgNVBAUTKDI3REQ4QkJCOEZCNUZBQ0RDMTlGMjlEM0VDMjc0NUQ1 MTEwRDhBOUYwHhcNMjQwNTA0MjE0ODA5WhcNMjQwNTExMjE0ODA5WjAYMRYwFAYD VQQDEw02NjM2YWQxYS1lYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zO6o4onY6UwxDgIQYrOuO5Q0qa8go7enAbHbvWSoYlhj+fJhivJGDl07aKK g6D2r5Qf9g/XUSQlX2UsM8d+T+wO4ZQpTwag+mJ3al8Ck9ijoZpOKYUw92SnJJBS nCdMGA3YlPXO/qu7ia4p84bZ5FfqIik7ZXID6gj8BOckgqLTIZfP3Lk7aJFJCjPb Q7A//bsbHjezBis9OIMN5S6/ijV5erFRWa/ug86ZIiwXsPxDy8KEdX6f+WpFVm5I rMeOCBgkMrau5O89gkjn0OdbyMLek7WcOEV/oYicUVC3d1X6Ahzz6AZT46+9iiec dITwOlkGNhcGXIlXrfSGfSiX0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3cVr2c YFu0+4QUCDV62oTRjUUSMB8GA1UdIwQYMBaAFCfdi7uPtfrNwZ8p0+wnRdURDYqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGRC9BNkIzRDQ3ODlG MEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1zM0JueW5UN0NkRjFSRU5p cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o5Mkx1NC0xLXMzQm55blQ3Q2RGMVJFTmlwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzNGRC9BNkIzRDQ3ODlGMEUxMUVBODBCNzVCMkNDNEY5QUUwMi9KOTJMdTQtMS1z M0JueW5UN0NkRjFSRU5pcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7VUepgrCbWJEMxSvsiS+8IkqZ9ZUcXKNwVrGJy7Ia9fQ5jUspBoHe Ko0nUpMWWaq3XgtDasYqzLk4sXTIOSYN3kNpwLc5Mxk0lP/azhLz9KKCogMQDpN4 SUyVOxZbcTVvPJdIN1zDdEPPcGuqjRE8l5uf1KYbDAhK1gck39gzzx1ShyGccm7d cItoLWe8q5z62SLHr5p5wU6o+Ym6ljneWCiy+YYVQG8AwRoJ8MnNEG8DNiCt+ZJM EpMfDD6+gZ7tPNu6KgSTm8B/jbQvulRLujgOuzkjzd5fTeYN0lieJV+zwS3VoZfz qX2vkmGy4ZAHwIgf/swWFu/w1na4Tce3 -----END CERTIFICATE-----Generated at Sun May 5 00:12:29 2024 by rpki-client on console-fra.rpki-client.org