$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft File: Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft (raw, json) Hash identifier: afKGkj1anzAsXEiGZS8QoiRDYaN0XfA9ls2b8MeNXLk= Subject key identifier: 11:BE:B9:CC:DF:EA:19:90:56:47:9E:9C:B5:BE:6E:E7:DD:17:7C:14 Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 Certificate issuer: /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft Manifest number: 03F7 Signing time: Fri 03 May 2024 02:17:44 +0000 Manifest this update: Fri 03 May 2024 02:17:43 +0000 Manifest next update: Fri 10 May 2024 02:17:43 +0000 Files and hashes: 1: Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl (hash: 1H0PFBVEKb3POsGq2swQ46UrDCLPv+JKHPvXd+MwSqo=) 2: 5E511AB293DE11ECB5262B47C4F9AE02.roa (hash: XDGaP+YhaFiYYgcxTVAvh9Tt3o206yQ29R9FcbGI2wI=) 3: C5713632828611EC83D75A3DC4F9AE02.roa (hash: tV4u9al3y6g99UeUfGb7cNTPt/AoQwjdzEg1zE0T9TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20 Validity Not Before: May 3 02:17:43 2024 GMT Not After : May 10 02:17:43 2024 GMT Subject: CN=66344947-ea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:25:30:df:ce:cf:4f:c0:62:34:b6:59:0c: 0d:77:04:15:b8:12:93:6d:20:5b:d7:75:fb:1e:d3: e6:09:14:a2:0d:c2:e7:cb:35:e2:56:06:f8:9d:9b: 9f:21:22:52:40:98:7e:4d:d1:4d:46:d2:f7:1a:37: 34:1e:ea:bf:5d:63:fc:b4:1d:66:79:ec:40:dd:a1: 22:75:8c:a2:97:19:58:76:ca:6d:ae:9d:5b:6a:96: d6:d2:30:38:9c:7d:c1:73:26:b0:49:26:cd:48:64: ab:3a:1e:1e:0a:44:e3:6b:74:81:ff:31:c5:88:bc: e9:84:f6:08:cc:e9:ca:0c:03:82:03:0a:4a:92:de: e7:98:5e:51:48:90:15:d3:ff:c0:91:11:86:29:dd: 59:bf:78:13:08:92:a9:fb:84:89:42:b4:f0:7c:04: 34:ce:b6:64:f0:cd:1c:0b:1f:b4:ba:7d:cb:5b:4d: 03:3a:58:08:92:e2:71:e0:83:54:0c:41:13:67:62: 7a:b8:99:6d:11:b6:0a:76:cd:69:87:fd:f4:02:30: b2:be:55:f1:3c:25:73:25:76:a0:39:f4:bd:86:76: c9:d9:0b:95:2f:61:ac:e2:95:a9:b0:2c:e8:62:b4: 07:4d:0e:65:40:a4:b3:fa:aa:72:3b:3e:68:1f:98: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BE:B9:CC:DF:EA:19:90:56:47:9E:9C:B5:BE:6E:E7:DD:17:7C:14 X509v3 Authority Key Identifier: keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:7c:17:83:43:e1:52:14:b0:9a:8e:45:4f:ca:5c:e7:de: 9e:f8:13:95:8e:09:47:4b:0f:3b:49:a1:fd:55:13:92:38:ae: 7a:95:96:0c:af:7d:c4:f2:b7:9a:f0:75:0f:6c:97:14:3b:3e: 67:98:00:40:4c:1e:39:1c:5c:79:6d:3d:aa:97:f7:ea:6d:a9: ca:5c:7e:c7:83:7c:64:46:5f:c0:6d:64:42:e1:27:57:2e:de: a7:85:6d:30:26:c5:9e:06:85:f9:3d:8e:72:5b:b4:c1:fc:a3: b0:fc:a3:78:ca:8e:2c:82:fc:1f:ad:36:de:63:64:43:b8:a2: fb:0f:b1:66:fc:fb:cc:05:ef:ce:a4:89:c6:d6:eb:c8:bb:03: c0:e1:e3:d9:99:c0:36:6e:8a:e8:1d:92:f5:10:21:bf:72:f8: 78:f7:dc:e3:5d:91:5f:d9:f1:d6:05:fa:a5:5f:81:98:27:08: 03:1e:3b:39:b8:f9:05:4e:2d:75:4a:8d:aa:63:fd:1f:c7:1d: f1:2b:86:92:6e:ee:b3:5b:25:f8:a7:b1:2a:59:5f:7d:af:c8: 3d:b9:49:a9:bf:48:e6:d9:5e:8e:4d:dd:78:be:2d:e2:4e:4e: 18:e9:a6:8f:fd:9f:98:d0:74:9b:74:6b:a3:c8:56:ce:2b:01: 5c:3e:8f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0MTIxMTAvBgNVBAUTKDI2Qzg3RDE5NjZFMkY4MzVGN0NDOEU5NjFEMDJGRjMw OUNFN0JEMjAwHhcNMjQwNTAzMDIxNzQzWhcNMjQwNTEwMDIxNzQzWjAYMRYwFAYD VQQDEw02NjM0NDk0Ny1lYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hIlMN/Oz0/AYjS2WQwNdwQVuBKTbSBb13X7HtPmCRSiDcLnyzXiVgb4nZuf ISJSQJh+TdFNRtL3Gjc0Huq/XWP8tB1meexA3aEidYyilxlYdsptrp1bapbW0jA4 nH3BcyawSSbNSGSrOh4eCkTja3SB/zHFiLzphPYIzOnKDAOCAwpKkt7nmF5RSJAV 0//AkRGGKd1Zv3gTCJKp+4SJQrTwfAQ0zrZk8M0cCx+0un3LW00DOlgIkuJx4INU DEETZ2J6uJltEbYKds1ph/30AjCyvlXxPCVzJXagOfS9hnbJ2QuVL2Gs4pWpsCzo YrQHTQ5lQKSz+qpyOz5oH5ijowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBG+uczf 6hmQVkeenLW+bufdF3wUMB8GA1UdIwQYMBaAFCbIfRlm4vg198yOlh0C/zCc570g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQxMi9CNjc2RUJFMDI4 QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1EWDN6STZXSFFMX01Kem52 U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzaDlHV2JpLURYM3pJNldIUUxfTUp6bnZTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQxMi9CNjc2RUJFMDI4QzcxMUVDODYxMDdBMEFDNEY5QUUwMi9Kc2g5R1diaS1E WDN6STZXSFFMX01Kem52U0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGnwXg0PhUhSwmo5FT8pc596e+BOVjglHSw87SaH9VROSOK56lZYM r33E8rea8HUPbJcUOz5nmABATB45HFx5bT2ql/fqbanKXH7Hg3xkRl/AbWRC4SdX Lt6nhW0wJsWeBoX5PY5yW7TB/KOw/KN4yo4sgvwfrTbeY2RDuKL7D7Fm/PvMBe/O pInG1uvIuwPA4ePZmcA2boroHZL1ECG/cvh499zjXZFf2fHWBfqlX4GYJwgDHjs5 uPkFTi11So2qY/0fxx3xK4aSbu6zWyX4p7EqWV99r8g9uUmpv0jm2V6OTd14vi3i Tk4Y6aaP/Z+Y0HSbdGujyFbOKwFcPo+O -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org