$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: kEpur3WSN9DgcmVUWats+lRf8OPT5wNt9e+BzTTcSy8= Subject key identifier: B7:D4:7C:D2:0A:43:DE:C5:D2:C7:2F:29:75:60:A0:E4:B2:94:E0:E0 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1D37 Signing time: Tue 30 Apr 2024 17:01:16 +0000 Manifest this update: Tue 30 Apr 2024 17:01:15 +0000 Manifest next update: Tue 07 May 2024 17:01:15 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: 8aN+YFHVeAuI1mMFA8MxKXjIIG16dG6jr742o/7lOq8=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: SPdQWEUHMC7nCEbP5s9qYvLHBtKrci4CcO2zKn4HOiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Apr 30 17:01:15 2024 GMT Not After : May 7 17:01:15 2024 GMT Subject: CN=663123dc-16ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:2e:c4:78:f6:58:1c:61:1c:cc:3c:ee:22: 7c:6f:a9:79:c1:01:a5:6e:da:23:22:1d:0e:bd:91: 42:b8:a4:cc:cf:0f:aa:c6:88:ba:64:3a:9a:15:ef: 60:2d:60:41:51:bf:b4:25:14:5c:d2:14:8c:df:78: d3:95:81:b5:9a:e6:18:82:14:8d:90:71:cf:5d:6d: f6:a1:50:de:67:59:de:b2:e9:10:62:19:06:ed:ff: 9e:d1:4e:5f:cb:11:da:d4:f2:85:00:6a:00:48:6d: b8:b0:77:b7:f8:1e:33:f8:f8:07:ae:68:e3:9b:df: cc:78:77:ae:27:67:a4:b0:db:08:1c:b2:e5:87:b0: 4e:66:7b:e4:56:08:be:79:dd:78:54:f5:af:ba:49: b0:b9:3c:cc:09:58:54:6a:e2:57:7c:2d:be:37:0f: 12:17:06:8d:a3:8a:4f:1e:c2:74:91:5a:c5:41:b5: d5:19:48:60:6e:68:9e:1b:47:10:c7:8c:13:b8:7f: 04:50:43:24:56:2d:ef:fd:cd:6d:0d:13:b0:45:7e: a1:65:b8:d8:bb:a6:7c:de:83:6b:5d:c6:59:b2:29: af:97:12:90:25:6e:f0:3a:3a:9a:d5:27:9a:f9:83: 1e:4f:ce:fa:f4:4c:30:9f:dc:98:9e:a7:f2:56:fc: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:7C:D2:0A:43:DE:C5:D2:C7:2F:29:75:60:A0:E4:B2:94:E0:E0 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a1:9d:d2:d5:3a:fd:cb:bd:fc:64:fe:7c:f4:65:29:bd:d3: e7:ef:97:ec:52:c9:a8:93:a8:25:13:48:b7:19:b0:16:33:6e: 70:de:be:8c:f3:c7:f6:eb:eb:b6:05:fd:21:42:d4:6f:18:2f: db:d2:c4:bd:35:2e:40:f9:45:fd:b3:ef:5d:24:bf:2d:a6:f3: da:69:a3:98:88:01:44:ab:82:64:75:50:23:35:21:c9:14:18: 00:8c:a7:95:33:75:af:00:d5:67:9c:82:6d:4c:b3:39:06:ce: 76:ca:80:73:c5:6b:c5:56:50:86:23:9b:67:52:39:e1:f3:e2: 3d:0c:b2:4c:b1:07:4a:f1:7b:4c:da:22:36:29:d5:eb:1b:72: c9:fb:40:cc:21:73:8b:62:34:32:fc:c0:1c:4f:12:61:79:40: 5c:fa:ca:ac:90:59:a4:84:b5:82:b2:db:27:6d:0b:2e:21:d6: a4:52:80:74:85:07:03:80:17:58:cc:f4:1b:44:d5:f1:5c:7c: 90:4e:b2:9c:5c:87:1e:9d:12:26:63:5f:d9:ff:1d:23:06:1e: bb:6d:9d:f2:bf:4a:08:5a:3d:66:02:84:90:3a:be:2d:16:a1: e9:6f:58:4a:c4:d0:68:2a:a4:49:ba:31:9b:b2:2c:b7:4c:c5: 2f:6e:e9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjQwNDMwMTcwMTE1WhcNMjQwNTA3MTcwMTE1WjAYMRYwFAYD VQQDEw02NjMxMjNkYy0xNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2wuxHj2WBxhHMw87iJ8b6l5wQGlbtojIh0OvZFCuKTMzw+qxoi6ZDqaFe9g LWBBUb+0JRRc0hSM33jTlYG1muYYghSNkHHPXW32oVDeZ1nesukQYhkG7f+e0U5f yxHa1PKFAGoASG24sHe3+B4z+PgHrmjjm9/MeHeuJ2eksNsIHLLlh7BOZnvkVgi+ ed14VPWvukmwuTzMCVhUauJXfC2+Nw8SFwaNo4pPHsJ0kVrFQbXVGUhgbmieG0cQ x4wTuH8EUEMkVi3v/c1tDROwRX6hZbjYu6Z83oNrXcZZsimvlxKQJW7wOjqa1Sea +YMeT8769Ewwn9yYnqfyVvyIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfUfNIK Q97F0scvKXVgoOSylODgMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAoZ3S1Tr9y738ZP589GUpvdPn75fsUsmok6glE0i3GbAWM25w3r6M 88f26+u2Bf0hQtRvGC/b0sS9NS5A+UX9s+9dJL8tpvPaaaOYiAFEq4JkdVAjNSHJ FBgAjKeVM3WvANVnnIJtTLM5Bs52yoBzxWvFVlCGI5tnUjnh8+I9DLJMsQdK8XtM 2iI2KdXrG3LJ+0DMIXOLYjQy/MAcTxJheUBc+sqskFmkhLWCstsnbQsuIdakUoB0 hQcDgBdYzPQbRNXxXHyQTrKcXIcenRImY1/Z/x0jBh67bZ3yv0oIWj1mAoSQOr4t FqHpb1hKxNBoKqRJujGbsiy3TMUvbum4 -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:49 2024 by rpki-client on console-ams.rpki-client.org