$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: CaH1ymAfxkYoYF78fk+R3iyjW6mYGWa5NE/dUhFglk8= Subject key identifier: 91:7E:75:C3:D0:AF:2B:A7:0E:3E:84:29:AA:AC:7C:04:3E:D4:D7:1E Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0C0B Signing time: Fri 26 Apr 2024 19:01:02 +0000 Manifest this update: Fri 26 Apr 2024 19:01:02 +0000 Manifest next update: Fri 03 May 2024 19:01:02 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: o1bgj7HC3Xj+LamlhJrEV2YtW0mg9A8XPZBmW6+6/uU=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: ByOmjvPWIUy5MEctlGILb7dfToBlqzQy/wGB/Nqnh4c=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: aJbZJVn/58MPVkydp5AJxQsxzBgpIoXPDTMR+AGZjMI=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: 3KEm1PsLKcIGmQ9ePFkwfSzechIJjiU3vhBgg4godCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Apr 26 19:01:02 2024 GMT Not After : May 3 19:01:02 2024 GMT Subject: CN=662bf9ee-54ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:b9:e2:06:11:d1:27:48:33:e7:72:6c:bd: a6:82:0e:40:23:ba:c4:a6:83:ce:77:71:3e:4c:2c: 3d:ba:be:79:98:3c:8a:7b:5e:e1:58:4d:c5:79:83: de:28:da:29:89:97:ba:78:b2:e0:67:b1:de:1d:c1: bf:3e:85:15:7d:e3:b1:90:fc:c4:74:5f:62:0c:36: 1f:c7:56:f8:08:b9:9a:3d:0e:3b:27:c9:5c:81:d8: 01:fa:68:cb:48:d6:f6:bc:b1:73:5d:46:3b:85:b6: 8f:cb:ec:6a:04:dd:33:f9:78:1c:2a:b9:43:c4:ab: c0:53:b1:b9:49:83:7f:f6:ed:53:21:dd:a0:a5:8c: 9e:6b:ab:36:52:0f:1b:3d:a1:1a:3d:5b:cb:5c:6d: 5c:eb:26:43:13:cf:36:0e:af:6f:23:23:0e:86:a3: ee:ed:87:70:ed:72:7f:78:0a:9a:21:3e:a8:bf:96: 8b:6a:ed:ec:e0:e7:70:f8:34:dc:eb:e9:05:67:0f: 8e:19:08:a0:7b:ca:97:b4:71:1a:c6:5e:ea:56:f1: 36:01:52:d6:4f:2e:cf:c4:2d:06:8f:9d:66:8a:a9: 74:bc:61:f5:0c:75:13:4b:cd:6a:5f:d8:f0:cc:6f: 40:77:97:1c:8c:e7:65:69:38:63:e0:ba:dc:71:aa: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7E:75:C3:D0:AF:2B:A7:0E:3E:84:29:AA:AC:7C:04:3E:D4:D7:1E X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:d3:6f:06:bf:da:f4:85:cf:e3:11:30:74:5d:b7:2a:8e: e1:06:54:b9:f8:73:ba:68:d9:7d:b3:98:60:e7:4c:f4:79:38: 32:73:06:75:b5:d2:87:dc:45:7a:12:bf:a4:75:8a:41:77:1c: 67:0e:f3:ae:3c:d7:70:c5:52:4f:a3:62:e5:42:af:e0:46:5c: 41:35:9c:b5:df:34:44:4e:d6:ba:d3:b8:e7:5e:76:14:19:1d: ad:9f:17:68:70:89:d6:fc:bb:44:93:39:4a:b2:b0:b7:f5:1b: e9:b6:d4:70:bf:3e:55:43:91:73:2b:13:71:19:89:22:03:2b: fb:dc:a6:97:f1:08:c4:a6:95:88:11:c9:a1:80:00:d6:c3:c7: 4f:52:ae:b0:ed:cf:b1:47:11:99:33:44:0d:b5:db:a1:d3:d5: 59:61:df:d0:4a:e2:94:d1:c3:18:a9:3f:c9:f0:d4:df:4e:9a: 97:ff:78:70:d3:f9:5d:39:5f:5b:4e:48:5f:70:8a:61:0d:bd: 6d:1a:b4:3e:3d:f5:81:35:93:bc:88:a4:d1:e0:9f:81:28:10: 1d:e6:fd:f1:bb:b7:9f:99:cc:94:29:28:3a:94:07:9b:ab:bb: 55:a7:e0:08:72:4a:c1:b5:6a:d3:02:4f:ca:fd:21:3e:2a:f3: 7d:8a:5d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjQwNDI2MTkwMTAyWhcNMjQwNTAzMTkwMTAyWjAYMRYwFAYD VQQDEw02NjJiZjllZS01NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Oe54gYR0SdIM+dybL2mgg5AI7rEpoPOd3E+TCw9ur55mDyKe17hWE3FeYPe KNopiZe6eLLgZ7HeHcG/PoUVfeOxkPzEdF9iDDYfx1b4CLmaPQ47J8lcgdgB+mjL SNb2vLFzXUY7hbaPy+xqBN0z+XgcKrlDxKvAU7G5SYN/9u1TId2gpYyea6s2Ug8b PaEaPVvLXG1c6yZDE882Dq9vIyMOhqPu7Ydw7XJ/eAqaIT6ov5aLau3s4Odw+DTc 6+kFZw+OGQige8qXtHEaxl7qVvE2AVLWTy7PxC0Gj51miql0vGH1DHUTS81qX9jw zG9Ad5ccjOdlaThj4LrccaqDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF+dcPQ ryunDj6EKaqsfAQ+1NceMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22NNvBr/a9IXP4xEwdF23Ko7hBlS5+HO6aNl9s5hg50z0eTgycwZ1 tdKH3EV6Er+kdYpBdxxnDvOuPNdwxVJPo2LlQq/gRlxBNZy13zRETta607jnXnYU GR2tnxdocInW/LtEkzlKsrC39RvpttRwvz5VQ5FzKxNxGYkiAyv73KaX8QjEppWI EcmhgADWw8dPUq6w7c+xRxGZM0QNtduh09VZYd/QSuKU0cMYqT/J8NTfTpqX/3hw 0/ldOV9bTkhfcIphDb1tGrQ+PfWBNZO8iKTR4J+BKBAd5v3xu7efmcyUKSg6lAeb q7tVp+AIckrBtWrTAk/K/SE+KvN9il2O -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:49 2024 by rpki-client on console-ams.rpki-client.org