$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft File: SJjKo3y70Riu0iofvIoLVbiAmNE.mft (raw, json) Hash identifier: UsFYCZzQa6rA14ct6FLWKasJsR7j2fA+urzXrgLNGZI= Subject key identifier: 89:FE:9B:AA:EB:56:F8:27:8F:A9:EC:88:A5:39:C5:DD:D6:04:54:61 Authority key identifier: 48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 Certificate issuer: /CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft Manifest number: 0690 Signing time: Mon 06 May 2024 23:24:00 +0000 Manifest this update: Mon 06 May 2024 23:23:59 +0000 Manifest next update: Mon 13 May 2024 23:23:59 +0000 Files and hashes: 1: SJjKo3y70Riu0iofvIoLVbiAmNE.crl (hash: qY8Bhsi7qUWxInEWV1y33kncNUgX3485iRj/ribFr9Y=) 2: 6F96208C227011EBA0973F7FC4F9AE02.roa (hash: +l+y88slcd8CMQ9n/dTzp3oShT4cTaRVlDNuVo8APSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7DC6/serialNumber=4898CAA37CBBD118AED22A1FBC8A0B55B88098D1 Validity Not Before: May 6 23:23:59 2024 GMT Not After : May 13 23:23:59 2024 GMT Subject: CN=6639668f-d0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:92:06:08:c0:60:b5:9a:a2:6c:c5:2c:49: 35:fd:ae:8e:a2:2d:f6:31:6a:eb:93:6b:d6:c7:9b: 7e:f4:e3:16:80:8e:c1:ff:8d:44:70:03:b1:a6:61: 58:12:a3:e3:8a:bf:b5:d5:77:cd:ea:fa:40:5c:97: b0:b3:35:43:4f:59:18:94:4e:92:a9:06:bb:1a:fa: cd:5f:1a:ee:7b:be:da:51:a0:f1:34:82:e6:c2:09: 88:31:a7:66:c2:8a:76:90:60:79:e9:83:af:01:71: 43:cf:74:81:af:78:dd:5f:0e:ba:32:b0:75:9b:3a: d9:ab:81:5b:f0:0c:59:a2:c7:70:af:f8:c3:40:ea: 72:ef:da:38:2f:d2:27:7c:82:1e:7f:53:4c:36:f9: b8:c2:6b:08:8c:27:75:3d:c0:8f:8c:46:c1:19:e3: 3d:ba:8e:d9:76:36:59:5b:24:76:e0:1c:0a:11:9e: 02:96:9a:18:86:f1:d5:9e:e2:99:fd:2a:15:25:91: df:dd:48:f1:d4:ed:b9:0f:3c:38:b1:07:b1:87:00: b9:6e:12:3e:17:f6:09:ae:9c:7a:65:de:99:9a:cd: 36:00:f4:43:6d:30:64:03:38:0e:aa:32:ee:63:80: 92:f4:24:4b:d1:aa:0d:5b:06:d5:05:69:89:e8:95: 45:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:9B:AA:EB:56:F8:27:8F:A9:EC:88:A5:39:C5:DD:D6:04:54:61 X509v3 Authority Key Identifier: keyid:48:98:CA:A3:7C:BB:D1:18:AE:D2:2A:1F:BC:8A:0B:55:B8:80:98:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJjKo3y70Riu0iofvIoLVbiAmNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7DC6/5CA84DE4226E11EBB049A87CC4F9AE02/SJjKo3y70Riu0iofvIoLVbiAmNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bf:9b:ce:85:b8:4c:8c:c8:37:63:0f:67:7e:35:e8:dc:d9: 83:dd:19:5c:ab:13:5d:83:04:1e:28:2e:a6:01:fd:e6:0a:67: b6:b7:a1:12:2b:7d:64:d2:51:20:fb:50:ce:c2:91:e8:bf:47: de:02:56:3c:c8:71:a8:0e:5c:e2:c6:22:6a:9b:93:7c:72:68: 93:11:99:cc:f1:f1:4e:63:76:70:5e:1c:05:36:42:b9:25:ac: 9e:e3:d2:b4:4a:d8:42:a9:4b:54:1d:a5:5e:dc:f0:e7:57:79: 50:8a:b7:ee:50:76:7c:de:37:dd:18:d8:be:b0:32:89:52:6a: 4d:bc:d7:93:d2:5d:f7:20:96:75:ae:a1:8c:cb:e2:d2:35:7d: 07:8b:72:fd:33:19:f4:2f:0f:a6:da:70:40:07:f4:6b:f2:1d: ba:26:e2:69:2f:47:20:33:9e:78:b4:aa:f1:01:57:43:1b:f9: 24:0b:16:6d:2d:47:af:f8:ef:9a:c3:3d:4e:04:07:e3:93:e0: b1:89:12:ca:39:44:d3:67:e4:68:d8:df:10:39:41:c0:7d:22: a4:37:77:3f:af:3c:53:ea:4f:a0:16:a8:5a:ee:bd:a7:d6:dc: 55:e8:34:a7:51:61:df:f1:a6:ca:bf:15:12:15:95:a2:e9:86: f4:af:57:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdEQzYxMTAvBgNVBAUTKDQ4OThDQUEzN0NCQkQxMThBRUQyMkExRkJDOEEwQjU1 Qjg4MDk4RDEwHhcNMjQwNTA2MjMyMzU5WhcNMjQwNTEzMjMyMzU5WjAYMRYwFAYD VQQDEw02NjM5NjY4Zi1kMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ6SBgjAYLWaomzFLEk1/a6Ooi32MWrrk2vWx5t+9OMWgI7B/41EcAOxpmFY EqPjir+11XfN6vpAXJewszVDT1kYlE6SqQa7GvrNXxrue77aUaDxNILmwgmIMadm wop2kGB56YOvAXFDz3SBr3jdXw66MrB1mzrZq4Fb8AxZosdwr/jDQOpy79o4L9In fIIef1NMNvm4wmsIjCd1PcCPjEbBGeM9uo7ZdjZZWyR24BwKEZ4ClpoYhvHVnuKZ /SoVJZHf3Ujx1O25Dzw4sQexhwC5bhI+F/YJrpx6Zd6Zms02APRDbTBkAzgOqjLu Y4CS9CRL0aoNWwbVBWmJ6JVFnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn+m6rr Vvgnj6nsiKU5xd3WBFRhMB8GA1UdIwQYMBaAFEiYyqN8u9EYrtIqH7yKC1W4gJjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0RDNi81Q0E4NERFNDIy NkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBSaXUwaW9mdklvTFZiaUFt TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NKaktvM3k3MFJpdTBpb2Z2SW9MVmJpQW1ORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0RDNi81Q0E4NERFNDIyNkUxMUVCQjA0OUE4N0NDNEY5QUUwMi9TSmpLbzN5NzBS aXUwaW9mdklvTFZiaUFtTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9v5vOhbhMjMg3Yw9nfjXo3NmD3RlcqxNdgwQeKC6mAf3mCme2t6ES K31k0lEg+1DOwpHov0feAlY8yHGoDlzixiJqm5N8cmiTEZnM8fFOY3ZwXhwFNkK5 Jaye49K0SthCqUtUHaVe3PDnV3lQirfuUHZ83jfdGNi+sDKJUmpNvNeT0l33IJZ1 rqGMy+LSNX0Hi3L9Mxn0Lw+m2nBAB/Rr8h26JuJpL0cgM554tKrxAVdDG/kkCxZt LUev+O+awz1OBAfjk+CxiRLKOUTTZ+Ro2N8QOUHAfSKkN3c/rzxT6k+gFqha7r2n 1txV6DSnUWHf8abKvxUSFZWi6Yb0r1f7 -----END CERTIFICATE-----Generated at Tue May 7 01:58:28 2024 by rpki-client on console-fra.rpki-client.org