$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: 2yhtcJjVRg1ex5eaNBU/T6mvekrkxc4PTfs5VZNPQ9c= Subject key identifier: 95:C6:82:9D:21:1C:10:72:41:1F:CC:F6:F0:D5:E3:06:E4:D5:F7:86 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0881 Signing time: Tue 30 Apr 2024 21:55:26 +0000 Manifest this update: Tue 30 Apr 2024 21:55:26 +0000 Manifest next update: Tue 07 May 2024 21:55:26 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: 0va0RdOUj/NBJ9IclGORYFaKdpKw09Ahy+7tAmSRfGQ=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: /ALNmUUfkan7o10t4zkUbM7wqYiKdOA6D1/Q9Xsm8/U=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AQ3o+GfHhVU06Z566pSWoHu8x3nSgyx8mCy+hQvqGEc=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: xQqoae/tPKWvzjrxyk3lVCq70Z56Y74w86x5I0sSs00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Apr 30 21:55:26 2024 GMT Not After : May 7 21:55:26 2024 GMT Subject: CN=663168ce-fb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:45:5f:e9:78:34:11:d6:b7:a2:56:ee:f0: 25:68:4d:67:7d:78:33:af:72:20:23:9f:31:52:54: 6e:02:20:b4:ac:f3:65:1c:5c:0d:d4:b7:b0:89:17: aa:01:94:73:c4:c9:b7:be:e5:db:3e:d9:fe:7c:b2: 46:8a:55:77:66:a1:55:77:c8:75:63:1a:db:e1:12: 80:3e:b4:33:78:90:c9:e6:3a:94:99:06:59:7c:95: bb:b4:04:33:88:0a:9f:28:16:ac:2c:89:b4:c8:1d: fc:08:94:dd:0d:4c:a3:c0:5c:15:15:7b:2d:1b:ac: 3c:56:ef:70:52:b0:2b:ee:ea:75:1d:d6:ce:a6:a1: d6:63:a2:d7:6c:b4:14:05:87:9a:d2:8b:d4:c6:b3: 85:90:93:be:f6:94:ab:8b:35:26:10:43:bf:c8:5a: 60:76:d5:ff:c2:6a:de:9f:2b:6e:1b:05:46:17:fc: 87:5e:59:f4:c0:49:5f:a4:38:aa:42:5e:1e:4a:ee: 33:d3:5c:20:e4:3e:42:25:13:17:98:d1:ae:5d:bd: a1:ca:1a:53:7f:4c:6c:27:a5:b8:52:92:aa:a3:1a: b0:5d:d9:52:89:0c:e5:45:38:ee:ba:1f:01:84:d9: 51:b1:bc:7b:b6:f0:9c:3e:1c:b1:91:0f:93:c3:db: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:82:9D:21:1C:10:72:41:1F:CC:F6:F0:D5:E3:06:E4:D5:F7:86 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:03:0d:72:d1:af:14:61:31:06:55:6d:e4:ce:33:b2:ac: a7:cc:31:c0:1f:d2:d9:1e:f0:4f:70:2a:5c:87:e0:3c:6b:1c: dd:00:d5:5c:74:51:95:df:70:78:e3:19:84:21:e2:93:4d:1c: e2:5b:b9:31:35:2f:77:d1:f3:eb:04:28:5e:96:7c:64:ae:be: 75:18:d7:f7:ca:63:4b:b0:84:36:d8:ec:0e:a5:b8:d9:fd:af: d5:cd:a3:cb:67:cb:2f:cb:4d:d0:d4:8c:34:0a:1a:ac:2b:bf: e4:ce:b7:69:39:5b:ad:59:05:c6:60:44:53:f3:cb:47:42:a4: 19:ef:bd:f1:ff:28:7f:69:71:15:33:ac:7a:90:c7:ed:3a:9f: 9a:e9:2b:3c:bf:50:ff:00:20:6e:82:9c:74:98:e5:34:e4:b7: 36:f2:3a:bb:5c:6d:c3:26:78:1a:9d:b9:9c:bf:f7:07:e3:ed: d0:bc:78:3f:6a:13:b4:bd:90:ec:b5:af:db:cc:8e:03:85:b6: 22:b0:d1:98:86:36:db:76:e6:44:58:66:bc:7d:14:98:fc:04: 62:9c:2f:05:e3:2e:c8:7e:68:82:73:1f:e9:0f:da:e4:ba:6c: 6d:50:78:20:f8:7a:25:2b:8d:2a:48:fb:52:87:0e:d8:78:0c: 86:9e:92:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjQwNDMwMjE1NTI2WhcNMjQwNTA3MjE1NTI2WjAYMRYwFAYD VQQDEw02NjMxNjhjZS1mYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2hFX+l4NBHWt6JW7vAlaE1nfXgzr3IgI58xUlRuAiC0rPNlHFwN1LewiReq AZRzxMm3vuXbPtn+fLJGilV3ZqFVd8h1Yxrb4RKAPrQzeJDJ5jqUmQZZfJW7tAQz iAqfKBasLIm0yB38CJTdDUyjwFwVFXstG6w8Vu9wUrAr7up1HdbOpqHWY6LXbLQU BYea0ovUxrOFkJO+9pSrizUmEEO/yFpgdtX/wmrenytuGwVGF/yHXln0wElfpDiq Ql4eSu4z01wg5D5CJRMXmNGuXb2hyhpTf0xsJ6W4UpKqoxqwXdlSiQzlRTjuuh8B hNlRsbx7tvCcPhyxkQ+Tw9s8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXGgp0h HBByQR/M9vDV4wbk1feGMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX1gMNctGvFGExBlVt5M4zsqynzDHAH9LZHvBPcCpch+A8axzdANVc dFGV33B44xmEIeKTTRziW7kxNS930fPrBChelnxkrr51GNf3ymNLsIQ22OwOpbjZ /a/VzaPLZ8svy03Q1Iw0ChqsK7/kzrdpOVutWQXGYERT88tHQqQZ773x/yh/aXEV M6x6kMftOp+a6Ss8v1D/ACBugpx0mOU05Lc28jq7XG3DJnganbmcv/cH4+3QvHg/ ahO0vZDsta/bzI4DhbYisNGYhjbbduZEWGa8fRSY/ARinC8F4y7IfmiCcx/pD9rk umxtUHgg+HolK40qSPtShw7YeAyGnpLA -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:19 2024 by rpki-client on console-fra.rpki-client.org