$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: l96YcsP5KaFP64ZGET9a0QMLRpHj4p0cXipKWsvcfsc= Subject key identifier: 5F:51:26:A0:13:57:0D:00:DB:43:39:8C:D5:25:7F:8F:AB:10:34:C9 Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 0846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 083D Signing time: Fri 31 May 2024 22:29:53 +0000 Manifest this update: Fri 31 May 2024 22:29:52 +0000 Manifest next update: Fri 07 Jun 2024 22:29:52 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: k35faSm8YjdQS8Fzx54PiNCxGami4Z+yWSqJbpo0HRE=) 2: 9A1AEF16A9F511EAAEF63A52C4F9AE02.roa (hash: lc/8tsw2jGRFqNPraPjUtNMuKBuTCWXzWMJ0I6Gzgz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: May 31 22:29:52 2024 GMT Not After : Jun 7 22:29:52 2024 GMT Subject: CN=665a4f60-44a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:ca:df:5e:31:69:a4:cd:cd:e2:55:4d:50: 9b:d4:4c:40:6a:10:3b:3c:f1:f8:38:84:0f:0f:b1: 5c:e8:f4:e3:1f:a8:9f:e3:98:56:5d:33:05:3e:ea: b2:42:0b:b2:6a:1d:70:5f:4e:79:61:24:45:e4:f0: 4a:58:8c:54:84:9f:f2:9f:18:9d:ba:1f:45:85:a6: 86:57:85:25:01:50:1b:9e:50:0b:d0:dc:70:ca:bd: 5f:2b:a3:64:c3:74:ec:6e:a3:b4:23:b8:4c:4a:d8: 2d:65:be:69:7c:9f:e0:5c:45:92:d4:f8:6d:fb:c4: 99:77:53:b4:10:be:ef:f1:e1:1f:52:a2:19:ba:ae: cb:e6:7f:8d:78:d6:da:89:58:00:7a:b6:f0:35:90: 3a:03:eb:8d:9d:26:ce:8c:78:4e:e5:41:b8:33:8d: fe:ca:4a:d3:64:6e:7b:2e:04:ea:27:52:4c:5b:29: 0b:a2:ae:c8:c4:31:c7:56:3a:fc:ba:e4:bd:ed:9f: 5f:f4:58:0c:bc:d5:4f:70:b8:9d:dc:5d:99:1d:3a: 28:02:68:92:bc:7c:98:b8:66:e6:d6:94:15:9d:a8: e3:e7:ac:7f:7e:c5:50:d1:31:03:77:b0:5f:f4:89: c2:7c:a1:44:cb:3f:5f:6d:e9:30:2c:ec:d0:2c:ad: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:26:A0:13:57:0D:00:DB:43:39:8C:D5:25:7F:8F:AB:10:34:C9 X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:1c:5c:6a:45:cb:66:62:d4:f1:94:a8:e9:10:1b:93:07:a7: 40:23:df:4c:20:58:11:d0:fa:9b:b5:a6:60:a9:4a:f9:b3:c1: 10:8b:8e:a0:74:73:d0:62:87:b7:3a:31:f9:16:b6:78:25:25: 15:35:f9:60:cc:65:c3:de:bb:dc:be:e6:ba:44:d2:47:84:30: 00:5c:11:7e:b9:51:52:83:aa:49:6d:08:28:f7:54:7b:f4:33: fe:12:74:b1:9b:d2:73:f8:96:4e:26:25:51:b3:ab:47:61:e6: d2:78:a8:8a:25:b4:a6:11:b5:46:97:f1:82:a0:e5:4d:56:60: 8a:ae:37:d7:0e:74:b0:a3:2b:4c:57:cd:7a:00:54:b5:4f:58: 6d:57:f0:64:c8:38:df:63:a6:0e:37:74:79:27:54:c8:bd:24: 57:02:db:98:a7:29:87:46:02:b9:ee:b1:9a:ff:da:ae:cb:48: 91:ca:e8:62:7c:36:44:0f:ef:4e:06:df:39:46:a1:a2:00:c1: c1:18:bb:d9:af:7f:0e:c2:c8:df:fa:27:87:90:db:13:2d:30: 86:ab:47:ea:f2:5c:81:9e:21:22:31:ef:ea:23:a7:6b:1c:d6: 62:1a:5a:0a:72:6a:e5:b6:66:10:b7:f4:5f:29:23:41:c8:f2: 04:99:bc:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjQwNTMxMjIyOTUyWhcNMjQwNjA3MjIyOTUyWjAYMRYwFAYD VQQDEw02NjVhNGY2MC00NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH/K314xaaTNzeJVTVCb1ExAahA7PPH4OIQPD7Fc6PTjH6if45hWXTMFPuqy Qguyah1wX055YSRF5PBKWIxUhJ/ynxiduh9FhaaGV4UlAVAbnlAL0Nxwyr1fK6Nk w3TsbqO0I7hMStgtZb5pfJ/gXEWS1Pht+8SZd1O0EL7v8eEfUqIZuq7L5n+NeNba iVgAerbwNZA6A+uNnSbOjHhO5UG4M43+ykrTZG57LgTqJ1JMWykLoq7IxDHHVjr8 uuS97Z9f9FgMvNVPcLid3F2ZHTooAmiSvHyYuGbm1pQVnajj56x/fsVQ0TEDd7Bf 9InCfKFEyz9fbekwLOzQLK3u0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9RJqAT Vw0A20M5jNUlf4+rEDTJMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgHFxqRctmYtTxlKjpEBuTB6dAI99MIFgR0PqbtaZgqUr5s8EQi46g dHPQYoe3OjH5FrZ4JSUVNflgzGXD3rvcvua6RNJHhDAAXBF+uVFSg6pJbQgo91R7 9DP+EnSxm9Jz+JZOJiVRs6tHYebSeKiKJbSmEbVGl/GCoOVNVmCKrjfXDnSwoytM V816AFS1T1htV/BkyDjfY6YON3R5J1TIvSRXAtuYpymHRgK57rGa/9quy0iRyuhi fDZED+9OBt85RqGiAMHBGLvZr38Owsjf+ieHkNsTLTCGq0fq8lyBniEiMe/qI6dr HNZiGloKcmrltmYQt/RfKSNByPIEmbxl -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org