$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: v2xJeokiSkaWsUZoK/ukqebzzWAZBOMukmVKwl/c6Aw= Subject key identifier: ED:42:EE:86:6A:F4:CA:B2:6C:C0:86:E8:3B:38:D6:CD:D7:E9:E4:10 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 12F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 12E7 Signing time: Tue 30 Apr 2024 17:46:41 +0000 Manifest this update: Tue 30 Apr 2024 17:46:40 +0000 Manifest next update: Tue 07 May 2024 17:46:40 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: 7l7WGDCdJNCWc7tLegTZTbGxt09HWTLVkyC1W2wc7LU=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: gD7hSblOpRT499LH/Yf2BpXTZO30eKU9cZJCj5bNoqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4849 (0x12f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Apr 30 17:46:40 2024 GMT Not After : May 7 17:46:40 2024 GMT Subject: CN=66312e80-c5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:10:80:94:49:8a:ea:ef:2b:51:3b:0b:55: a2:d2:de:99:33:1b:53:f0:ae:c5:24:10:fb:5c:5b: 8a:6c:38:ef:e5:19:7d:ae:72:f6:e9:49:98:1e:d0: 08:8b:a0:b2:36:81:60:35:fe:1c:1f:5a:0d:d2:b7: ab:ae:de:5d:f7:d1:67:53:e0:cc:4b:65:19:ff:92: fa:0e:94:85:6d:b4:10:0c:0a:bc:46:4f:ad:df:f1: 83:a5:cb:27:aa:0d:3e:31:95:15:73:05:13:81:6d: 2d:47:ae:d8:33:cf:50:5e:a8:09:07:57:4f:82:b7: 57:4a:0e:69:87:92:d4:fe:45:e6:96:f0:16:fd:0e: 22:ad:9f:dd:74:03:46:57:fc:66:37:29:a8:3f:80: 58:a9:af:9e:8f:d6:5b:02:8e:8e:00:a8:da:2a:de: 80:f7:2a:d1:c0:e3:a6:ba:08:c5:71:d0:17:ce:34: 83:ec:5c:fe:8a:c2:64:c9:b8:b1:00:e2:e8:05:fd: b9:4f:91:b9:a6:80:9d:9a:ff:c4:cb:6a:86:0f:13: 41:73:53:6c:0c:3d:7b:66:71:36:33:6e:65:76:9d: 5c:c4:6c:ce:90:8d:b4:d1:fa:75:c0:d7:fe:ed:41: 0a:59:fa:44:a1:8c:d2:01:70:da:5b:28:24:73:bb: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:EE:86:6A:F4:CA:B2:6C:C0:86:E8:3B:38:D6:CD:D7:E9:E4:10 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:84:01:39:19:98:67:e4:6d:20:be:9b:76:81:65:77:49: 3e:81:94:62:8f:77:03:10:f0:97:ce:ce:74:15:04:b9:64:97: e1:31:50:88:9e:48:3b:ac:56:dc:69:ca:ac:e9:41:00:25:f5: 06:d3:5b:0c:b6:c5:ed:73:a6:d0:fe:78:38:c9:e5:f2:f1:ec: 64:95:94:c8:01:21:9c:aa:8c:6c:03:6d:c8:d5:b7:f0:ea:94: f6:b3:83:ba:e2:70:46:c1:e9:35:a2:9c:1d:d2:95:23:a4:f6: f4:5d:98:10:58:00:49:64:c1:cd:42:aa:a1:e7:7e:52:34:6b: 53:27:01:50:bc:e0:f5:23:47:62:b3:36:3c:10:1f:65:7d:03: 4b:cf:95:83:b5:53:3e:c0:2c:87:6d:7f:0b:62:22:24:70:c4: 83:9c:f7:d1:27:97:36:48:01:12:1b:eb:05:75:cb:7e:30:21: e1:9b:86:e5:ba:73:19:ab:e5:83:60:2a:cc:a5:78:e3:65:3e: 11:ed:3b:59:76:5d:38:98:cf:be:32:24:61:2e:bf:f4:2d:d9: 9d:d5:1f:da:1d:03:00:98:23:9c:45:a4:72:d5:8c:fc:0d:b0: d3:e6:80:85:49:c9:50:95:0a:88:a2:9d:c8:9e:22:9b:78:b8: df:a4:3c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjQwNDMwMTc0NjQwWhcNMjQwNTA3MTc0NjQwWjAYMRYwFAYD VQQDEw02NjMxMmU4MC1jNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/AQgJRJiurvK1E7C1Wi0t6ZMxtT8K7FJBD7XFuKbDjv5Rl9rnL26UmYHtAI i6CyNoFgNf4cH1oN0rerrt5d99FnU+DMS2UZ/5L6DpSFbbQQDAq8Rk+t3/GDpcsn qg0+MZUVcwUTgW0tR67YM89QXqgJB1dPgrdXSg5ph5LU/kXmlvAW/Q4irZ/ddANG V/xmNymoP4BYqa+ej9ZbAo6OAKjaKt6A9yrRwOOmugjFcdAXzjSD7Fz+isJkybix AOLoBf25T5G5poCdmv/Ey2qGDxNBc1NsDD17ZnE2M25ldp1cxGzOkI200fp1wNf+ 7UEKWfpEoYzSAXDaWygkc7tdmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1C7oZq 9MqybMCG6Ds41s3X6eQQMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv+4QBORmYZ+RtIL6bdoFld0k+gZRij3cDEPCXzs50FQS5ZJfhMVCI nkg7rFbcacqs6UEAJfUG01sMtsXtc6bQ/ng4yeXy8exklZTIASGcqoxsA23I1bfw 6pT2s4O64nBGwek1opwd0pUjpPb0XZgQWABJZMHNQqqh535SNGtTJwFQvOD1I0di szY8EB9lfQNLz5WDtVM+wCyHbX8LYiIkcMSDnPfRJ5c2SAESG+sFdct+MCHhm4bl unMZq+WDYCrMpXjjZT4R7TtZdl04mM++MiRhLr/0Ldmd1R/aHQMAmCOcRaRy1Yz8 DbDT5oCFSclQlQqIop3IniKbeLjfpDyC -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:47 2024 by rpki-client on console-ams.rpki-client.org