$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: 47RLje3flJVHgmB/zqJMURAoHh9JuE+kVt1MYUv6Dcc= Subject key identifier: 39:AD:44:49:C1:17:C1:89:E3:00:23:30:47:DE:AD:6E:62:F5:FB:92 Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0B82 Signing time: Fri 26 Apr 2024 19:20:39 +0000 Manifest this update: Fri 26 Apr 2024 19:20:38 +0000 Manifest next update: Fri 03 May 2024 19:20:38 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: pmfjFKbpTPGl6b7mjeReakel58CnwZTHut/6rHn6Q48=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: B7bMfpiuog7j3lAIf3eVZ/sNLLPGCxV9ah/9SIc1VpA=) 3: 70E436A4155311EDB5B4C084C4F9AE02.roa (hash: 2KPGE6YOGXpDAntQqSYERNf3VFcgLXO23a7bItR4QIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: Apr 26 19:20:38 2024 GMT Not After : May 3 19:20:38 2024 GMT Subject: CN=662bfe86-5273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:76:94:9c:c1:6c:9d:fd:3e:34:e5:07:fc: 57:2d:00:0f:b1:e9:bd:06:a7:41:09:53:41:7f:7e: 7c:d0:ee:06:07:11:f8:80:b5:31:f5:cd:bb:50:2e: db:ff:61:1f:26:8e:9c:f4:b9:de:ce:93:01:25:49: 8b:81:d2:55:e8:42:51:9d:8f:09:f7:d6:22:84:20: 89:86:d7:4a:e4:fa:05:a8:9e:ff:36:69:54:83:3a: 93:1f:af:90:02:34:67:15:be:ff:fa:79:20:d3:1a: 8a:7c:ed:61:10:7c:5d:78:ec:ba:0d:97:8a:93:e9: a2:2a:d9:66:d3:d7:1c:94:61:c3:ce:2a:14:67:02: df:a1:37:b0:8a:5e:68:06:37:c6:a9:5b:8e:ee:4c: 89:0a:1b:17:e9:d7:7e:ef:91:5a:6f:5a:d0:17:b3: cf:d0:1c:55:51:9e:42:04:57:2c:29:3b:3d:0a:c0: 55:18:2c:a0:ef:b7:9a:17:28:44:16:f8:6b:94:51: 78:89:03:aa:89:4c:59:46:15:a1:1f:95:39:49:00: 8f:73:47:bb:03:27:6d:da:2b:da:4c:a2:01:38:f5: ba:a5:72:33:e5:3a:87:76:e2:e9:1c:ac:38:fa:4d: bd:35:a5:a8:7a:0b:5c:29:fe:6a:d2:d6:dd:ce:7c: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:44:49:C1:17:C1:89:E3:00:23:30:47:DE:AD:6E:62:F5:FB:92 X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:ee:60:67:c3:67:b8:a1:7f:9a:fa:f9:fa:4e:13:3b:00: 8d:91:6e:f3:80:f1:61:33:2c:09:4f:51:b4:40:6a:d7:49:e6: 1e:b7:88:0e:3a:fb:b3:5b:c7:c9:d5:8c:58:35:ef:a3:0c:70: 85:38:5e:3c:d1:21:46:c3:eb:a7:15:78:c3:6d:52:f9:d4:9f: e8:1b:78:d1:fa:02:25:f7:1e:10:c1:36:24:f5:09:ee:1e:33: b3:01:23:79:56:4e:9f:33:0a:ee:90:d8:af:15:55:d0:4f:9c: 63:e9:1c:db:c3:69:1c:3d:94:a5:71:66:b4:9a:04:5e:50:da: 72:ba:51:7e:a2:e4:8c:b8:32:40:1a:ae:d5:d9:b2:92:75:74: ec:8e:75:48:96:62:17:42:37:9f:24:31:76:40:d2:06:02:50: 3b:ca:ab:53:49:33:01:1e:1b:8d:df:33:d7:90:af:9a:35:55: 81:21:32:06:9a:2b:be:ed:46:c9:b7:22:21:98:a1:00:fa:55: 40:b0:0d:94:e5:a4:5a:b5:fc:e2:07:a6:63:a0:6c:a3:3f:da: 58:08:36:b2:24:af:0a:58:3f:f0:19:9f:06:a8:e3:68:4b:aa: fa:9c:9f:6e:97:50:76:48:5b:71:8a:fc:2c:4c:81:f8:94:e2: 4c:13:cf:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjQwNDI2MTkyMDM4WhcNMjQwNTAzMTkyMDM4WjAYMRYwFAYD VQQDEw02NjJiZmU4Ni01MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs952lJzBbJ39PjTlB/xXLQAPsem9BqdBCVNBf3580O4GBxH4gLUx9c27UC7b /2EfJo6c9LnezpMBJUmLgdJV6EJRnY8J99YihCCJhtdK5PoFqJ7/NmlUgzqTH6+Q AjRnFb7/+nkg0xqKfO1hEHxdeOy6DZeKk+miKtlm09cclGHDzioUZwLfoTewil5o BjfGqVuO7kyJChsX6dd+75Fab1rQF7PP0BxVUZ5CBFcsKTs9CsBVGCyg77eaFyhE FvhrlFF4iQOqiUxZRhWhH5U5SQCPc0e7Aydt2ivaTKIBOPW6pXIz5TqHduLpHKw4 +k29NaWoegtcKf5q0tbdznwFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmtREnB F8GJ4wAjMEferW5i9fuSMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcoe5gZ8NnuKF/mvr5+k4TOwCNkW7zgPFhMywJT1G0QGrXSeYet4gO OvuzW8fJ1YxYNe+jDHCFOF480SFGw+unFXjDbVL51J/oG3jR+gIl9x4QwTYk9Qnu HjOzASN5Vk6fMwrukNivFVXQT5xj6Rzbw2kcPZSlcWa0mgReUNpyulF+ouSMuDJA Gq7V2bKSdXTsjnVIlmIXQjefJDF2QNIGAlA7yqtTSTMBHhuN3zPXkK+aNVWBITIG miu+7UbJtyIhmKEA+lVAsA2U5aRatfziB6ZjoGyjP9pYCDayJK8KWD/wGZ8GqONo S6r6nJ9ul1B2SFtxivwsTIH4lOJME88b -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:28 2024 by rpki-client on console-ams.rpki-client.org