$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: hKh2XGITvmqmAAIIqELxmcyCcSMJkHUwBzdHwgj8qr8= Subject key identifier: E6:4F:B6:DB:37:CC:89:93:12:64:4A:83:77:82:33:1A:98:3D:F7:82 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 0572 Signing time: Tue 07 May 2024 00:42:16 +0000 Manifest this update: Tue 07 May 2024 00:42:15 +0000 Manifest next update: Tue 14 May 2024 00:42:15 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: OU988ju7pv+OONqBd2oPrd5UAH+cGX5ipXHj9/A6SoU=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: AEX55uTzhEx4d0qx/4X7r0Xodi2rpGE09Pn+0vsA3Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: May 7 00:42:15 2024 GMT Not After : May 14 00:42:15 2024 GMT Subject: CN=663978e7-52c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:ea:b1:b1:b6:fb:e7:47:12:b1:75:8e:fe: db:51:db:ab:14:64:83:19:c8:55:9d:ac:7c:6c:ca: 56:03:4c:f4:84:92:4a:88:20:6c:fa:12:4e:9c:52: 6d:a4:e9:86:9f:67:f4:da:c3:70:17:81:9c:f3:70: 8d:5a:ef:d9:32:ae:bd:14:d0:40:7d:ea:62:e6:cb: d3:5b:32:70:bd:29:b8:a2:22:0a:d8:66:b6:70:1b: bd:53:96:e3:58:b9:6d:b0:22:cd:1e:69:90:53:6a: 75:87:46:d3:b3:75:59:0d:d0:e8:2f:55:5d:9a:70: 53:a2:da:93:bf:d4:9f:c5:28:fe:1d:2c:f2:68:c9: 66:7e:65:da:ef:13:3c:df:d5:cf:9f:78:bd:4d:bd: 31:b7:4a:4e:9f:07:70:17:bb:0a:12:4f:2f:5f:2b: 8e:d9:e8:16:f5:00:81:6e:b4:60:2a:31:09:08:14: de:2a:6e:e6:b0:0b:cd:77:6b:e8:ae:4f:94:ac:d0: f9:a7:c2:35:bd:c7:f5:1f:c5:bc:19:5d:74:fd:ef: c6:3e:85:27:b9:ee:c5:c5:48:1c:ea:be:99:c8:67: e6:2a:3b:84:38:4f:0f:41:8a:ad:be:fb:d1:d5:af: 05:4b:19:fc:11:79:f1:7a:26:96:44:3a:c8:b6:3d: 9d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4F:B6:DB:37:CC:89:93:12:64:4A:83:77:82:33:1A:98:3D:F7:82 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:74:d6:b4:ea:fe:ec:a6:26:f1:ef:b3:95:81:40:e9:75:b7: 18:c4:01:dc:02:73:b0:b3:4b:e9:dd:b8:38:40:d5:83:39:44: a2:37:2a:f3:19:c6:90:38:33:7b:5f:54:31:92:ba:63:73:7e: ec:27:e8:7a:ce:56:55:7d:0c:13:b5:49:87:d2:06:22:48:5a: bf:79:e0:6b:04:29:57:9b:e8:22:4f:a2:66:e9:99:a7:7c:92: 12:92:27:3c:6e:2b:0f:40:04:dd:01:fb:a1:ea:c0:cb:d5:8a: 95:b8:77:79:2b:f8:71:20:f4:bc:18:40:59:71:6e:1a:28:df: 56:d7:c6:76:93:2c:82:1c:ca:d0:d4:38:60:ba:db:77:e5:7a: 02:73:83:2b:fd:8c:f5:e4:d0:4e:0d:91:3f:7e:20:e0:5a:81: 77:b5:de:ff:5e:9b:db:ca:d6:7f:86:93:5b:5b:bd:c8:18:e4: 77:9a:e8:66:9a:a9:18:19:1b:27:49:34:7a:5b:3d:80:44:f4: 86:1d:5a:0b:19:5b:c2:6f:7e:6c:01:c2:31:3b:ac:88:11:bf: cb:da:24:0a:a1:bb:e9:8e:48:21:ad:91:0f:63:c1:bd:aa:59: fe:bb:df:f8:93:b4:31:0a:b7:c9:02:49:28:c9:91:ea:d2:68: 7f:4c:a3:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjQwNTA3MDA0MjE1WhcNMjQwNTE0MDA0MjE1WjAYMRYwFAYD VQQDEw02NjM5NzhlNy01MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjXqsbG2++dHErF1jv7bUdurFGSDGchVnax8bMpWA0z0hJJKiCBs+hJOnFJt pOmGn2f02sNwF4Gc83CNWu/ZMq69FNBAfepi5svTWzJwvSm4oiIK2Ga2cBu9U5bj WLltsCLNHmmQU2p1h0bTs3VZDdDoL1VdmnBTotqTv9SfxSj+HSzyaMlmfmXa7xM8 39XPn3i9Tb0xt0pOnwdwF7sKEk8vXyuO2egW9QCBbrRgKjEJCBTeKm7msAvNd2vo rk+UrND5p8I1vcf1H8W8GV10/e/GPoUnue7FxUgc6r6ZyGfmKjuEOE8PQYqtvvvR 1a8FSxn8EXnxeiaWRDrItj2dEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZPtts3 zImTEmRKg3eCMxqYPfeCMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBodNa06v7spibx77OVgUDpdbcYxAHcAnOws0vp3bg4QNWDOUSiNyrz GcaQODN7X1Qxkrpjc37sJ+h6zlZVfQwTtUmH0gYiSFq/eeBrBClXm+giT6Jm6Zmn fJISkic8bisPQATdAfuh6sDL1YqVuHd5K/hxIPS8GEBZcW4aKN9W18Z2kyyCHMrQ 1Dhgutt35XoCc4Mr/Yz15NBODZE/fiDgWoF3td7/XpvbytZ/hpNbW73IGOR3muhm mqkYGRsnSTR6Wz2ARPSGHVoLGVvCb35sAcIxO6yIEb/L2iQKobvpjkghrZEPY8G9 qln+u9/4k7QxCrfJAkkoyZHq0mh/TKNq -----END CERTIFICATE-----Generated at Tue May 7 02:01:05 2024 by rpki-client on console-ams.rpki-client.org