$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: Jf3gjh+yvtGs1XPChOLLbGYmicCmAKfdBZMtSqNzPIw= Subject key identifier: 7F:87:A6:83:8A:73:5B:60:06:34:1B:30:69:80:21:69:6D:EC:3F:13 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 6E Signing time: Sun 19 May 2024 07:30:36 +0000 Manifest this update: Sun 19 May 2024 07:30:36 +0000 Manifest next update: Sun 26 May 2024 07:30:36 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: vgKLNMKVLPyUvYL125EJJ9RiBRC19sB0XCVtqIs/vys=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: Rzehxr0+uq4wGOaC52117Iqt090HmyAUS/NU7NUpmFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: May 19 07:30:36 2024 GMT Not After : May 26 07:30:36 2024 GMT Subject: CN=6649aa9c-6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:32:50:0f:0a:ff:88:ad:52:ba:0f:56:8d: 3e:1b:81:75:d6:c7:3f:c7:d5:42:ef:76:74:58:10: 35:6a:a0:be:e2:41:cc:ce:fe:83:5f:ec:7c:a7:ec: fc:0f:5c:53:94:b3:c1:84:5b:ca:8c:b8:3d:44:72: 4a:51:2b:e2:81:62:d7:ad:41:b3:b8:ca:d6:1c:cc: 70:16:c4:bf:08:4d:64:9f:3f:38:69:95:3e:cc:12: 62:5b:a6:51:18:fe:03:18:0d:f4:60:2c:b8:70:33: ca:70:6e:24:a8:33:1f:46:a3:b4:9d:1a:07:e4:e0: d2:f3:99:7e:24:ac:14:dc:95:bc:35:6a:e1:9f:1d: 80:90:30:b0:a8:10:ea:2b:f5:e4:cc:38:94:ea:ab: f2:c0:4d:39:57:b0:2f:b3:21:0a:4c:2c:3c:51:42: 21:41:44:97:86:b9:0c:ff:d0:43:82:87:0d:ea:e6: e7:b1:1f:95:9d:68:04:b7:c8:2a:60:51:6d:25:48: 71:a3:ce:60:bd:5f:34:ea:cc:5a:69:0e:1d:76:26: a8:e1:33:c2:d6:d8:89:18:1d:6c:05:6c:f5:7b:4e: f3:e9:24:c0:5f:5b:36:5e:bc:68:78:e9:86:b8:26: 5b:da:b7:1a:ff:99:56:2b:b2:23:17:e2:0c:e1:fc: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:87:A6:83:8A:73:5B:60:06:34:1B:30:69:80:21:69:6D:EC:3F:13 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:79:9c:36:ac:df:8d:b3:3f:6d:c3:36:62:86:aa:e5:ad:46: ac:f4:27:17:9a:c1:bd:5c:27:83:80:36:80:0e:f8:26:30:1d: 74:36:6d:b5:e1:5f:16:54:1e:35:35:4d:76:ab:eb:cc:2e:1a: 6a:aa:a6:14:14:a9:4f:c8:bb:40:5c:ab:99:96:40:28:9e:7d: da:4d:8b:30:a5:77:77:c4:cf:4d:ee:9a:87:39:82:22:5e:35: 89:aa:71:1f:46:36:cf:df:29:d9:59:c7:8e:4f:c6:4d:b3:4d: 32:63:ae:22:46:bf:b3:bc:35:02:48:5d:94:0a:8f:0c:c8:7d: 9b:f4:49:11:90:dc:45:7a:f2:17:c3:49:93:66:79:c8:ed:4b: 1d:ef:15:35:7c:02:cf:04:ed:21:51:7b:a6:68:dd:eb:be:d7: 9c:5b:9d:37:18:70:a5:c9:4b:da:3e:8a:2d:d3:4a:55:db:14: 88:f3:f2:fa:e4:98:fa:b4:d9:30:6f:cd:1e:d0:62:9d:55:c0: ff:e3:8f:3a:9e:07:1b:aa:94:bc:3b:37:a2:2d:61:e9:76:26: ec:7a:45:95:b3:3b:77:30:36:e3:60:ab:61:3b:cc:46:58:15: ea:7e:9c:aa:51:bb:cb:b6:a1:a5:79:86:8d:28:18:c5:4c:da: 7e:51:5d:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE M0Y3OTExMC8GA1UEBRMoMjVGOURCNjAwN0FERjZGNTdFQzRFRkY3QTYyQkY0RDQy REE3NUVDNTAeFw0yNDA1MTkwNzMwMzZaFw0yNDA1MjYwNzMwMzZaMBgxFjAUBgNV BAMTDTY2NDlhYTljLTYzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjUDJQDwr/iK1Sug9WjT4bgXXWxz/H1ULvdnRYEDVqoL7iQczO/oNf7Hyn7PwP XFOUs8GEW8qMuD1EckpRK+KBYtetQbO4ytYczHAWxL8ITWSfPzhplT7MEmJbplEY /gMYDfRgLLhwM8pwbiSoMx9Go7SdGgfk4NLzmX4krBTclbw1auGfHYCQMLCoEOor 9eTMOJTqq/LATTlXsC+zIQpMLDxRQiFBRJeGuQz/0EOChw3q5uexH5WdaAS3yCpg UW0lSHGjzmC9XzTqzFppDh12JqjhM8LW2IkYHWwFbPV7TvPpJMBfWzZevGh46Ya4 Jlvatxr/mVYrsiMX4gzh/BtzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf4emg4pz W2AGNBswaYAhaW3sPxMwHwYDVR0jBBgwFoAUJfnbYAet9vV+xO/3piv01C2nXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzRjc5L0ZBMzFBMkIyNkYx QTExRUU4RDMyRTA2NEM0RjlBRTAyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmZuYllBZXQ5dlYteE9fM3BpdjAxQzJuWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz Rjc5L0ZBMzFBMkIyNkYxQTExRUU4RDMyRTA2NEM0RjlBRTAyL0pmbmJZQWV0OXZW LXhPXzNwaXYwMUMyblhzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHd5nDas342zP23DNmKGquWtRqz0Jxeawb1cJ4OANoAO+CYwHXQ2bbXh XxZUHjU1TXar68wuGmqqphQUqU/Iu0Bcq5mWQCiefdpNizCld3fEz03umoc5giJe NYmqcR9GNs/fKdlZx45Pxk2zTTJjriJGv7O8NQJIXZQKjwzIfZv0SRGQ3EV68hfD SZNmecjtSx3vFTV8As8E7SFRe6Zo3eu+15xbnTcYcKXJS9o+ii3TSlXbFIjz8vrk mPq02TBvzR7QYp1VwP/jjzqeBxuqlLw7N6ItYel2Jux6RZWzO3cwNuNgq2E7zEZY Fep+nKpRu8u2oaV5ho0oGMVM2n5RXX4= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org