$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: biBnZY8GRCqVciEVt1xMhP1I7cwm47L65myL8KZtlaA= Subject key identifier: D7:F9:38:E7:63:08:96:4D:9C:DD:66:33:FF:E7:70:B2:E0:88:05:4E Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 07B0 Signing time: Sat 04 May 2024 22:16:09 +0000 Manifest this update: Sat 04 May 2024 22:16:09 +0000 Manifest next update: Sat 11 May 2024 22:16:09 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: tuNZFw7ME+1lgLvVcsZmcRqKjLtVl5r/Is5Zdrmz+JM=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: 5C8ePjvhSgQfbUkW1V0izpOZDdVtdh6I4HowBYXf4n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: May 4 22:16:09 2024 GMT Not After : May 11 22:16:09 2024 GMT Subject: CN=6636b3a9-aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:68:4a:6b:16:f9:23:ed:a2:09:70:c8:27: 2f:ac:67:3e:3a:33:8c:4a:a2:c0:bf:57:68:14:6f: 45:b7:6a:3a:47:2d:d3:aa:c4:7c:c8:57:be:11:32: d3:8a:1d:4f:15:da:1c:4c:62:49:1f:8c:17:9e:ca: ae:37:62:63:7c:2b:92:ab:ae:8d:ef:db:3b:c5:0a: f1:96:0d:85:25:96:1f:7d:9c:8e:be:df:93:56:c8: 43:2f:0c:e9:c6:ab:5b:b6:d8:9f:c8:f2:ad:42:50: ef:d5:fc:b9:43:70:47:e0:20:e4:7e:57:d2:a0:89: fa:43:39:73:72:fc:e6:12:af:e5:05:88:fd:07:c0: 68:fd:90:c7:1f:09:40:d2:ac:6f:5e:4c:c9:5c:f4: 01:a7:59:ef:51:5a:3b:b4:56:f5:8a:e3:f0:63:ac: 20:05:1b:f1:0d:17:7d:1b:43:09:b6:c7:b6:5c:c6: cc:6c:0f:46:62:18:ee:ff:fb:b5:b6:e9:83:b3:f1: 58:bf:6e:d0:f1:8a:fa:c9:e2:b8:18:35:e7:cc:80: 82:33:45:fb:33:bb:1a:f6:f7:26:3d:1f:b9:7f:a0: b8:bf:ca:e8:e6:21:1e:3b:5d:49:0a:62:ca:ea:ae: 3a:c6:f2:4b:68:64:86:0a:b4:20:1c:28:91:a9:72: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F9:38:E7:63:08:96:4D:9C:DD:66:33:FF:E7:70:B2:E0:88:05:4E X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6e:3a:3f:6c:2f:cb:4c:52:d3:4a:3d:1f:9b:84:91:9e:50: 23:d8:3b:38:77:39:44:3c:3c:e2:07:2f:ce:86:15:69:97:5f: 86:6c:3e:15:eb:33:17:41:f1:ef:77:01:c2:88:9e:29:a8:02: 34:b8:c1:d2:3a:da:d7:8d:ac:2b:bb:a4:26:f6:23:f1:63:92: 7c:c5:b4:a9:d4:47:77:b4:62:a6:35:03:e7:c0:24:4d:fb:6c: 4d:73:31:ad:ee:cd:d0:51:3f:93:bc:fb:c1:19:42:5f:8d:16: 00:99:ee:90:cd:9e:4a:8e:67:26:80:f4:d0:71:59:ef:ba:25: 28:4e:0d:a5:57:14:50:8f:0d:98:e2:0b:54:fc:e6:18:b6:29: a4:ad:69:e1:30:a3:dc:a7:3e:c3:2b:9c:bf:84:fd:6a:63:5f: d7:07:98:aa:d8:3a:ae:19:f3:5b:4c:3e:4d:87:d9:c5:ca:74: d4:b3:c0:dd:1a:33:f9:57:5b:03:09:92:f2:b6:f6:81:e0:10: f9:57:52:da:d0:99:fc:1a:5d:10:d7:33:56:c6:28:e6:75:2b: a9:4e:f8:5e:d5:e6:f4:f6:fe:39:82:b2:f3:e2:81:2f:45:a7: 5e:fc:bd:23:57:95:c1:aa:3f:4f:f1:e6:a9:df:d4:1d:b4:db: 1c:12:3d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjQwNTA0MjIxNjA5WhcNMjQwNTExMjIxNjA5WjAYMRYwFAYD VQQDEw02NjM2YjNhOS1hYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VFoSmsW+SPtoglwyCcvrGc+OjOMSqLAv1doFG9Ft2o6Ry3TqsR8yFe+ETLT ih1PFdocTGJJH4wXnsquN2JjfCuSq66N79s7xQrxlg2FJZYffZyOvt+TVshDLwzp xqtbttifyPKtQlDv1fy5Q3BH4CDkflfSoIn6QzlzcvzmEq/lBYj9B8Bo/ZDHHwlA 0qxvXkzJXPQBp1nvUVo7tFb1iuPwY6wgBRvxDRd9G0MJtse2XMbMbA9GYhju//u1 tumDs/FYv27Q8Yr6yeK4GDXnzICCM0X7M7sa9vcmPR+5f6C4v8ro5iEeO11JCmLK 6q46xvJLaGSGCrQgHCiRqXIzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf5OOdj CJZNnN1mM//ncLLgiAVOMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAObjo/bC/LTFLTSj0fm4SRnlAj2Ds4dzlEPDziBy/OhhVpl1+GbD4V 6zMXQfHvdwHCiJ4pqAI0uMHSOtrXjawru6Qm9iPxY5J8xbSp1Ed3tGKmNQPnwCRN +2xNczGt7s3QUT+TvPvBGUJfjRYAme6QzZ5KjmcmgPTQcVnvuiUoTg2lVxRQjw2Y 4gtU/OYYtimkrWnhMKPcpz7DK5y/hP1qY1/XB5iq2DquGfNbTD5Nh9nFynTUs8Dd GjP5V1sDCZLytvaB4BD5V1La0Jn8Gl0Q1zNWxijmdSupTvhe1eb09v45grLz4oEv Rade/L0jV5XBqj9P8eap39QdtNscEj3x -----END CERTIFICATE-----Generated at Sun May 5 00:14:45 2024 by rpki-client on console-ams.rpki-client.org