$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: 9ASCfMpezvg4CFE+7bY5fbBR23Ag2YjDvGrLgRiLCX4= Subject key identifier: B5:BA:1D:07:13:FA:1E:79:3B:C5:3D:6D:A2:C3:1A:D0:75:D0:25:98 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0DA3 Signing time: Thu 02 May 2024 18:35:33 +0000 Manifest this update: Thu 02 May 2024 18:35:32 +0000 Manifest next update: Thu 09 May 2024 18:35:32 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: papawEvVKc336jMuYZQ6InwyX4uOJO1Dh+tiTwK9B3s=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: H2LFByHCGl67eJSX+O7peLobB2Xyb4BQ81wW7F5Xst0=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: qsatTV0vWjCabMFshTZDBa4P4hU9immfTIRLePvacAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: May 2 18:35:32 2024 GMT Not After : May 9 18:35:32 2024 GMT Subject: CN=6633dcf4-3461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:18:61:4b:13:13:20:19:5d:d3:77:d1:00: 8d:3d:e1:6a:98:31:c5:71:01:a5:43:68:87:0a:1b: 88:a6:9f:a9:dd:79:77:fc:6d:d1:37:ec:4f:12:de: a3:7d:4e:c6:69:56:7b:c0:4a:ef:8c:78:73:80:1b: 45:75:9d:40:c0:eb:ff:0e:2b:d8:40:15:a1:b5:b2: e1:0a:cd:fc:8e:11:c1:da:ea:80:46:99:8f:f7:4d: 50:54:82:fc:c5:46:8d:e3:f8:cf:61:8d:e8:55:8a: b8:8f:e9:43:62:d0:1e:e8:d1:f7:1a:fb:a7:51:89: aa:12:d2:7f:2d:38:6e:1b:f9:d4:79:88:40:42:73: d4:7f:ab:35:b4:e3:6f:7d:e2:97:0a:29:18:76:0e: 13:84:4c:7d:b7:c9:eb:33:94:80:11:92:a5:aa:15: 21:da:99:cf:08:f5:ee:42:b6:ba:0b:ce:c9:9a:dc: 33:05:03:c9:e5:0f:34:de:db:7e:1f:47:de:cb:7e: 0c:fd:f6:9a:82:0d:c3:e1:e7:ac:24:ec:81:c9:91: 97:12:44:73:44:6d:59:cf:a6:e8:01:ee:cd:ee:ce: 85:f9:88:7e:0a:d3:50:a7:2c:db:93:bb:10:0b:db: 86:4a:27:d6:4e:9d:78:12:02:3f:2f:76:b8:d6:f9: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:1D:07:13:FA:1E:79:3B:C5:3D:6D:A2:C3:1A:D0:75:D0:25:98 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:32:04:40:57:33:40:07:cd:41:39:b6:dd:05:6f:7b:0d:58: a1:60:24:05:de:f1:79:b9:07:62:85:81:57:a9:1e:a0:7d:f9: b3:49:ce:eb:75:e8:7c:77:7b:c1:19:9c:71:a2:53:c5:7c:32: 90:b9:7f:e3:b5:ee:7e:58:ce:c5:f3:67:90:01:6d:df:aa:19: 2c:6d:78:96:4d:17:1f:56:09:c4:78:8a:ab:9b:3a:8d:2d:98: a0:99:0e:b0:65:dd:ab:c1:6f:9c:31:b1:be:f0:b5:04:e6:1b: cb:ad:de:7c:80:f0:48:a4:df:4d:80:cf:cb:ca:23:59:6a:25: 35:fe:a2:cf:83:4c:1f:bb:ac:31:72:a5:18:92:0b:9a:c9:30: 47:1f:f8:f2:62:a0:82:99:9c:69:50:b2:8e:e5:29:fd:4f:40: 74:e4:b8:6c:7c:3d:f4:80:ab:03:50:7d:b2:0d:57:1a:cd:51: 95:75:a5:58:02:bf:ec:d6:69:4a:de:fc:bb:21:d8:06:ff:51: bc:a7:ca:f4:4e:12:03:c4:b8:79:28:d2:ed:35:e4:86:5c:b7: 46:07:78:51:22:10:81:6b:37:f0:78:22:80:56:32:7f:32:9d: d2:f5:84:cf:b8:4f:a9:a9:5f:b9:76:27:70:71:60:01:9b:56: 25:62:1c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjQwNTAyMTgzNTMyWhcNMjQwNTA5MTgzNTMyWjAYMRYwFAYD VQQDEw02NjMzZGNmNC0zNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypwYYUsTEyAZXdN30QCNPeFqmDHFcQGlQ2iHChuIpp+p3Xl3/G3RN+xPEt6j fU7GaVZ7wErvjHhzgBtFdZ1AwOv/DivYQBWhtbLhCs38jhHB2uqARpmP901QVIL8 xUaN4/jPYY3oVYq4j+lDYtAe6NH3GvunUYmqEtJ/LThuG/nUeYhAQnPUf6s1tONv feKXCikYdg4ThEx9t8nrM5SAEZKlqhUh2pnPCPXuQra6C87JmtwzBQPJ5Q803tt+ H0fey34M/faagg3D4eesJOyByZGXEkRzRG1Zz6boAe7N7s6F+Yh+CtNQpyzbk7sQ C9uGSifWTp14EgI/L3a41vki6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW6HQcT +h55O8U9baLDGtB10CWYMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2MgRAVzNAB81BObbdBW97DVihYCQF3vF5uQdihYFXqR6gffmzSc7r deh8d3vBGZxxolPFfDKQuX/jte5+WM7F82eQAW3fqhksbXiWTRcfVgnEeIqrmzqN LZigmQ6wZd2rwW+cMbG+8LUE5hvLrd58gPBIpN9NgM/LyiNZaiU1/qLPg0wfu6wx cqUYkguayTBHH/jyYqCCmZxpULKO5Sn9T0B05LhsfD30gKsDUH2yDVcazVGVdaVY Ar/s1mlK3vy7IdgG/1G8p8r0ThIDxLh5KNLtNeSGXLdGB3hRIhCBazfweCKAVjJ/ Mp3S9YTPuE+pqV+5didwcWABm1YlYhwY -----END CERTIFICATE-----Generated at Thu May 2 20:04:59 2024 by rpki-client on console-ams.rpki-client.org