$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: sThOGAtodyA91QIGvHqNwVLzeFYTTwJ6kvvKkb1LPEw= Subject key identifier: 39:A3:44:6E:22:C0:FB:E8:11:C5:C1:01:7A:FD:10:D9:0D:25:FE:AF Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 33EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 33D0 Signing time: Tue 30 Apr 2024 15:30:43 +0000 Manifest this update: Tue 30 Apr 2024 15:30:43 +0000 Manifest next update: Tue 07 May 2024 15:30:43 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: cq0uObuFshJ4nkF/pBf7BTCp8OJORp5BiQu6c3oB9Io=) 2: 092C19FCA34C11EBB95A1B7BC4F9AE02.roa (hash: TFCa0bfZDCyDs3CblDobvJNITP42wpla6pPSQpoenGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13291 (0x33eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Apr 30 15:30:43 2024 GMT Not After : May 7 15:30:43 2024 GMT Subject: CN=66310ea3-6207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:6e:74:06:79:15:b7:1e:f2:40:fa:90:d1: a6:d9:71:ba:f2:ff:2b:90:32:87:8d:65:1b:53:e3: b0:45:db:6f:85:81:c4:c9:61:67:5b:df:ea:68:fa: d9:cb:31:61:87:d5:22:45:9d:b3:7f:d0:6a:66:ab: b3:7b:69:b9:ca:1a:a5:23:2b:e3:84:0f:1e:d9:de: a2:15:12:7f:dc:b1:0e:95:20:43:af:ce:b3:9e:a6: 7e:16:5d:58:a4:a2:4c:b9:ea:95:7a:33:1e:cd:1a: e3:92:cc:ae:63:4a:53:dd:20:48:d6:47:93:ae:fe: 0f:c0:dc:5f:90:f8:ee:f8:c8:08:4c:08:7b:57:9a: 2f:b6:9f:c9:ea:0f:3f:e4:e1:be:16:a7:33:c6:e6: 06:1c:ad:2c:fc:f6:4f:5f:24:a6:56:c6:f5:cd:68: 42:6f:92:e3:70:9c:83:b7:fb:dd:49:07:ce:00:fc: fb:9d:62:d7:3f:64:c4:bc:7f:3a:eb:85:0e:8a:37: ea:b1:ff:aa:40:98:75:39:7f:66:3b:0f:b5:2e:e2: 77:53:91:fa:a8:22:7a:56:12:3c:1f:fb:df:64:f0: b5:76:ee:ae:f1:9f:6e:aa:ff:f5:38:6f:00:fc:8f: c2:a3:72:e2:f3:68:cc:83:0f:ea:cc:cb:b8:4f:0b: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:44:6E:22:C0:FB:E8:11:C5:C1:01:7A:FD:10:D9:0D:25:FE:AF X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0b:c6:84:b5:82:dc:69:e5:7c:81:46:e8:37:98:35:e7:0a: 37:e2:3b:67:58:da:5d:3c:54:6e:05:09:87:24:e8:b8:f0:cd: 91:6c:29:d4:7c:95:7d:4b:fa:2e:b4:b8:b1:cb:83:d2:54:99: 48:9a:9b:1b:c2:58:9f:ea:a6:05:e8:fb:f5:33:d0:71:3f:d6: fd:71:86:bc:3b:ca:7f:f3:03:15:4c:b5:2c:c1:68:6e:23:3e: 57:e2:26:38:d9:8d:d6:78:84:bd:b5:d8:e7:7b:a2:3a:22:14: 24:11:b8:24:62:ca:f5:02:54:8c:32:ef:25:6e:67:6f:16:2d: 26:7e:db:50:50:45:ea:d6:82:38:d0:69:68:fa:9e:3a:ef:99: 2c:6c:84:59:17:ff:8a:d0:87:a3:76:79:40:1f:b1:0d:62:2e: a9:3e:48:97:0f:1d:cc:9d:d3:c8:5b:73:74:ad:c3:8a:a9:7e: ab:35:e1:b9:aa:b6:5f:b3:71:89:b1:a3:0a:da:91:6a:e2:53: d6:3a:1a:ef:55:49:0e:8b:b0:57:d2:6b:a9:9c:5c:c2:e7:a7: 98:d8:5d:8e:0f:6f:7c:19:78:62:b5:ed:eb:88:1b:df:a9:ed: e0:21:55:fc:0d:60:c4:1d:0f:a0:f9:67:4f:6f:73:11:72:65: 28:7a:38:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjQwNDMwMTUzMDQzWhcNMjQwNTA3MTUzMDQzWjAYMRYwFAYD VQQDEw02NjMxMGVhMy02MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdRudAZ5Fbce8kD6kNGm2XG68v8rkDKHjWUbU+OwRdtvhYHEyWFnW9/qaPrZ yzFhh9UiRZ2zf9BqZquze2m5yhqlIyvjhA8e2d6iFRJ/3LEOlSBDr86znqZ+Fl1Y pKJMueqVejMezRrjksyuY0pT3SBI1keTrv4PwNxfkPju+MgITAh7V5ovtp/J6g8/ 5OG+FqczxuYGHK0s/PZPXySmVsb1zWhCb5LjcJyDt/vdSQfOAPz7nWLXP2TEvH86 64UOijfqsf+qQJh1OX9mOw+1LuJ3U5H6qCJ6VhI8H/vfZPC1du6u8Z9uqv/1OG8A /I/Co3Li82jMgw/qzMu4TwsJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmjRG4i wPvoEcXBAXr9ENkNJf6vMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEC8aEtYLcaeV8gUboN5g15wo34jtnWNpdPFRuBQmHJOi48M2RbCnU fJV9S/outLixy4PSVJlImpsbwlif6qYF6Pv1M9BxP9b9cYa8O8p/8wMVTLUswWhu Iz5X4iY42Y3WeIS9tdjne6I6IhQkEbgkYsr1AlSMMu8lbmdvFi0mfttQUEXq1oI4 0Glo+p4675ksbIRZF/+K0IejdnlAH7ENYi6pPkiXDx3MndPIW3N0rcOKqX6rNeG5 qrZfs3GJsaMK2pFq4lPWOhrvVUkOi7BX0mupnFzC56eY2F2OD298GXhite3riBvf qe3gIVX8DWDEHQ+g+WdPb3MRcmUoejhP -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:41 2024 by rpki-client on console-fra.rpki-client.org