$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: cxuX6xOe3C4jzvK8QtSYfw2hGqW8EngZxHnmad4Gnb4= Subject key identifier: CA:81:CC:0B:A5:43:D6:81:4C:A2:B8:E3:80:52:CF:66:39:36:2B:24 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: F7 Signing time: Sun 05 May 2024 05:46:27 +0000 Manifest this update: Sun 05 May 2024 05:46:27 +0000 Manifest next update: Sun 12 May 2024 05:46:27 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: IYvv5ZfAB9y3tWZ8KkJ+fPlIuFnhqJt1q2Ul7xjjUnM=) 2: 5CBBCAEA90B211EDB7A3471FC4F9AE02.roa (hash: 3QVoPynRLM5/JWYrC/nr9ZnhrZhvaYNCtt2d4cwNET0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 05:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: May 5 05:46:27 2024 GMT Not After : May 12 05:46:27 2024 GMT Subject: CN=66371d33-42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a2:6d:b8:2f:9e:fb:25:8f:98:7a:c7:04:b7: d0:b2:2c:62:f4:01:77:79:79:0f:e9:36:4d:b0:d9: 0b:4f:a9:b4:7a:e6:0e:ff:52:1a:8b:6d:db:5b:d9: 67:97:7c:1c:80:ed:70:dc:3b:45:a5:b9:b9:37:05: bb:83:8e:61:5f:9b:13:8a:08:61:2d:2a:59:20:0f: d5:e2:03:7d:4e:0f:e5:70:c4:5f:dc:4f:40:b0:ef: b9:af:16:c6:7d:0c:7d:84:28:30:4f:87:8f:82:76: f5:0c:fb:c3:0d:70:e2:3a:45:57:01:0c:92:d0:4d: 27:4e:e3:51:10:e0:64:73:47:fe:be:48:f1:0c:c8: 26:39:f7:22:7d:f9:78:0e:7d:e9:93:ee:15:31:96: 74:e6:ea:fa:3b:e7:d4:ff:1a:2d:20:e9:b1:9f:14: 57:40:00:4a:43:93:2a:24:a6:f9:1a:0b:97:c4:9a: 40:96:30:f1:c6:c1:2b:3b:3d:f0:a0:5f:19:c1:4a: c7:15:d4:8b:24:3c:85:87:40:62:fe:81:e6:20:a8: a1:88:4e:a0:4b:d1:8a:9d:6b:3f:3c:20:ee:33:39: 14:00:09:75:7b:a9:a7:b8:69:6b:ea:84:ef:68:5d: b2:e3:da:c6:f7:a2:4d:1c:50:9c:b7:46:33:23:99: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:CC:0B:A5:43:D6:81:4C:A2:B8:E3:80:52:CF:66:39:36:2B:24 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:af:3b:a7:e3:40:e2:b7:83:3c:e5:2d:ee:f9:82:09:97:eb: 66:83:2f:4f:6a:8e:b5:03:88:09:f2:2f:6f:87:0a:9d:04:c2: 5b:91:55:6e:b5:be:d9:d2:60:63:f7:a8:e2:17:c6:8d:ce:94: 08:ad:2e:73:93:16:31:68:07:05:2a:64:48:f5:8d:ca:e4:66: 43:3d:cb:72:bf:d0:27:a1:6d:b3:07:39:56:13:c1:b9:2b:53: a5:8b:6f:e5:b2:fe:5d:87:89:f4:9d:06:8b:a0:e1:89:5a:1b: 66:6c:00:16:df:9e:2a:88:83:6b:a0:b4:c0:13:d8:de:a1:fb: 07:2c:08:7f:e0:1a:f4:ca:bb:43:04:fc:37:76:fa:42:0d:27: ca:22:51:9d:12:52:4d:5d:74:80:de:4f:a5:92:94:2d:1f:85: d8:05:4d:8e:e0:b8:ec:ca:45:dd:dc:af:1e:33:a2:a4:72:b4: 00:e5:3f:37:c0:77:9f:f6:70:fa:ae:7c:56:71:e4:c4:d9:22: 22:97:b0:b7:9d:b4:cd:a2:59:e2:27:cd:86:5e:31:0a:9d:f1: 35:1a:62:06:d7:b8:53:5a:24:78:9c:eb:9d:db:fa:9b:b8:af: 66:6f:be:08:50:d2:55:94:f8:fe:7e:af:c5:7a:da:4b:1b:83: bd:de:79:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjQwNTA1MDU0NjI3WhcNMjQwNTEyMDU0NjI3WjAYMRYwFAYD VQQDEw02NjM3MWQzMy00MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqJtuC+e+yWPmHrHBLfQsixi9AF3eXkP6TZNsNkLT6m0euYO/1Iai23bW9ln l3wcgO1w3DtFpbm5NwW7g45hX5sTighhLSpZIA/V4gN9Tg/lcMRf3E9AsO+5rxbG fQx9hCgwT4ePgnb1DPvDDXDiOkVXAQyS0E0nTuNREOBkc0f+vkjxDMgmOfciffl4 Dn3pk+4VMZZ05ur6O+fU/xotIOmxnxRXQABKQ5MqJKb5GguXxJpAljDxxsErOz3w oF8ZwUrHFdSLJDyFh0Bi/oHmIKihiE6gS9GKnWs/PCDuMzkUAAl1e6mnuGlr6oTv aF2y49rG96JNHFCct0YzI5mpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqBzAul Q9aBTKK444BSz2Y5NiskMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVrzun40Dit4M85S3u+YIJl+tmgy9Pao61A4gJ8i9vhwqdBMJbkVVu tb7Z0mBj96jiF8aNzpQIrS5zkxYxaAcFKmRI9Y3K5GZDPctyv9AnoW2zBzlWE8G5 K1Oli2/lsv5dh4n0nQaLoOGJWhtmbAAW354qiINroLTAE9jeofsHLAh/4Br0yrtD BPw3dvpCDSfKIlGdElJNXXSA3k+lkpQtH4XYBU2O4LjsykXd3K8eM6KkcrQA5T83 wHef9nD6rnxWceTE2SIil7C3nbTNolniJ82GXjEKnfE1GmIG17hTWiR4nOud2/qb uK9mb74IUNJVlPj+fq/FetpLG4O93nkA -----END CERTIFICATE-----Generated at Sun May 5 08:39:11 2024 by rpki-client on console-fra.rpki-client.org