$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: cj/tjg6wEZRB62PZuVN72IoU0hMnWuNR93SNisHdq1o= Subject key identifier: 32:2F:E5:F7:A0:98:14:34:40:5F:99:3D:A0:2A:A0:A1:CA:D3:67:B2 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 02E9 Signing time: Fri 03 May 2024 03:24:48 +0000 Manifest this update: Fri 03 May 2024 03:24:47 +0000 Manifest next update: Fri 10 May 2024 03:24:47 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: UxLOvnTjLpV1KeAl5ZV49HXM+9ZXJc7fhJO/PpUddhk=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: CLX/342a3JMAuWhx7hI0idArAqPxfekE5e1Orgg5wlY=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: YIJ5sYo3DcOoEoVS1EI3sWkB/OrMpwPc6liB+UnlFhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: May 3 03:24:47 2024 GMT Not After : May 10 03:24:47 2024 GMT Subject: CN=663458ff-7187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:65:e0:63:41:fb:26:35:c9:3f:f7:2e:3a: 4f:15:6a:d7:6c:6d:d7:53:be:58:cc:75:56:a9:9f: 3c:65:21:04:03:c7:8d:1d:42:6e:8e:82:32:e5:d5: 73:a5:12:47:a1:37:0a:c7:8e:38:03:50:fa:ec:31: 90:a0:95:b8:09:78:a3:d5:f8:d3:94:61:c6:69:88: dd:3b:6b:2d:02:14:5c:13:a0:aa:46:06:00:3f:75: 76:81:68:cf:9c:c4:61:88:5b:1b:3c:e5:c1:b4:ad: 60:96:e0:a9:bc:2f:69:7c:86:4c:96:34:86:4a:95: b2:93:d8:5b:92:23:0b:9e:4e:fe:e1:f5:3b:89:ed: 8a:cc:ab:29:de:4f:05:3a:c8:72:f0:50:38:ca:7e: 25:15:18:9b:71:2e:7b:a2:23:58:a6:0a:38:2d:23: b9:ee:fb:28:6a:2f:cc:78:07:96:27:26:4e:87:65: b3:78:26:ed:8d:63:8d:a0:8b:1b:fe:6a:0f:aa:45: 92:0c:b4:4c:29:44:aa:6c:ce:c0:14:88:0c:dc:de: c8:12:5a:11:0e:42:b8:b3:3c:97:04:10:d8:1e:5b: d4:3a:6d:a9:41:34:14:df:b5:15:22:7b:dc:ea:94: 53:56:18:26:3a:f8:4d:59:74:ba:d7:11:65:29:bf: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:E5:F7:A0:98:14:34:40:5F:99:3D:A0:2A:A0:A1:CA:D3:67:B2 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:25:7b:d8:4c:99:18:72:62:ac:92:31:30:ce:05:31:39:16: 10:9e:d1:b8:a0:cd:28:48:ae:a7:86:7f:19:a9:2d:36:0a:87: 26:74:2a:27:21:66:a8:f3:4a:aa:f0:0e:b3:ab:40:cd:48:81: a2:12:94:a9:5f:62:f6:e6:c7:7c:e6:3f:5a:79:15:13:67:64: e9:62:ec:76:d7:d5:0f:90:97:8c:06:b6:53:6c:e7:79:01:ba: 37:17:7e:6e:83:cd:c2:00:a5:32:ca:05:3e:25:3f:57:91:39: 02:cd:1f:7b:e1:90:e8:e3:13:ce:21:2c:b4:51:ee:5a:3c:0d: eb:83:52:a2:56:df:ef:b2:bb:e1:d9:5c:2f:77:85:67:1e:b8: c9:b0:77:01:68:0d:1a:7e:72:43:49:ac:d0:d8:01:7b:fe:b7: b4:35:9f:ac:ee:33:a0:bc:e3:dc:d3:df:93:c6:25:46:a7:c2: cb:ca:32:7c:fe:55:b9:5d:37:46:d8:1c:31:36:19:27:99:65: 3c:43:cf:2d:f9:42:7e:a7:74:1b:9c:84:65:4a:a4:d0:95:9a: 7b:6c:3e:81:02:dd:38:33:91:ad:aa:25:b2:a9:a3:70:d9:37: a5:fe:d1:4f:e2:f5:b2:54:cb:b6:d1:04:e5:42:40:07:0a:3a: 28:da:ad:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjQwNTAzMDMyNDQ3WhcNMjQwNTEwMDMyNDQ3WjAYMRYwFAYD VQQDEw02NjM0NThmZi03MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1ll4GNB+yY1yT/3LjpPFWrXbG3XU75YzHVWqZ88ZSEEA8eNHUJujoIy5dVz pRJHoTcKx444A1D67DGQoJW4CXij1fjTlGHGaYjdO2stAhRcE6CqRgYAP3V2gWjP nMRhiFsbPOXBtK1gluCpvC9pfIZMljSGSpWyk9hbkiMLnk7+4fU7ie2KzKsp3k8F Oshy8FA4yn4lFRibcS57oiNYpgo4LSO57vsoai/MeAeWJyZOh2WzeCbtjWONoIsb /moPqkWSDLRMKUSqbM7AFIgM3N7IEloRDkK4szyXBBDYHlvUOm2pQTQU37UVInvc 6pRTVhgmOvhNWXS61xFlKb+ftQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIv5feg mBQ0QF+ZPaAqoKHK02eyMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6JXvYTJkYcmKskjEwzgUxORYQntG4oM0oSK6nhn8ZqS02CocmdCon IWao80qq8A6zq0DNSIGiEpSpX2L25sd85j9aeRUTZ2TpYux219UPkJeMBrZTbOd5 Abo3F35ug83CAKUyygU+JT9XkTkCzR974ZDo4xPOISy0Ue5aPA3rg1KiVt/vsrvh 2Vwvd4VnHrjJsHcBaA0afnJDSazQ2AF7/re0NZ+s7jOgvOPc09+TxiVGp8LLyjJ8 /lW5XTdG2BwxNhknmWU8Q88t+UJ+p3QbnIRlSqTQlZp7bD6BAt04M5GtqiWyqaNw 2Tel/tFP4vWyVMu20QTlQkAHCjoo2q0J -----END CERTIFICATE-----Generated at Fri May 3 04:45:29 2024 by rpki-client on console-fra.rpki-client.org