$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: a3MpnoyXx+H8E2KVgl6owgyfrR56YvTDJSPH/lhjye4= Subject key identifier: 7F:DA:D9:43:A3:CF:3C:11:4F:56:FF:AC:FD:25:67:B7:11:DA:DA:C3 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0C93 Signing time: Sun 28 Apr 2024 18:50:50 +0000 Manifest this update: Sun 28 Apr 2024 18:50:50 +0000 Manifest next update: Sun 05 May 2024 18:50:50 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: jeUi6QWDMU6ongVSkHrejd7p6sM7TiE30LG6wQy8gXE=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: JFExDB3UWM+6oY9L9unkAkDMZqR6L7xjp+IepzjKJ/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Apr 28 18:50:50 2024 GMT Not After : May 5 18:50:50 2024 GMT Subject: CN=662e9a8a-f262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:4a:49:50:e0:f1:a3:d1:6d:12:41:74:e7: b1:54:52:b5:00:eb:1b:5c:27:71:94:97:e3:39:04: 4d:28:a9:24:f5:f2:36:ad:75:bb:76:86:2f:54:15: 9a:53:66:ce:66:64:6f:07:37:bf:4c:40:6a:a6:24: ff:55:e2:6c:fe:ab:11:6f:36:51:55:df:7b:91:d5: 9d:81:94:23:cd:d5:f0:a7:fc:95:11:5d:78:fc:7b: 31:7c:9e:1b:b2:2e:55:de:96:84:00:8d:cd:c2:01: 7e:eb:98:00:f2:ca:58:70:f2:fe:a7:5e:65:19:42: 31:c9:30:80:21:1c:62:61:db:72:79:d9:23:86:66: 4b:29:03:39:25:f0:65:04:af:61:4c:2e:96:50:df: 6c:1c:9b:46:e4:7f:8c:bc:17:4f:71:14:d4:9d:d6: 42:7c:52:bf:b3:4d:e6:d1:fe:85:87:e9:fb:de:69: ec:93:d4:3b:b7:45:dc:79:ec:ca:55:9f:0a:e2:28: ed:87:2d:c0:a7:43:50:6a:a6:ff:a9:4e:4d:82:fd: 74:69:2d:bf:78:a3:ed:63:10:4f:73:49:db:03:38: 9f:89:16:c8:e0:00:6b:52:bd:a0:3a:a4:55:99:b5: fe:f9:05:5d:1c:80:6a:1a:92:6f:ac:c4:78:93:49: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:D9:43:A3:CF:3C:11:4F:56:FF:AC:FD:25:67:B7:11:DA:DA:C3 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:af:8a:2c:d4:51:b1:03:d3:69:fb:c7:6a:6b:e0:44:de: 17:29:19:0d:9f:b9:35:42:96:f5:91:d5:bf:18:cb:c1:c1:06: 9c:e6:ea:9a:b6:f4:89:94:fd:43:d9:06:c5:fe:44:12:77:ba: 9b:84:85:6b:ff:ee:51:85:b8:d9:e7:0f:3c:5c:de:e1:26:b0: c5:d7:3b:86:fb:1c:7e:2a:7f:49:11:f1:af:89:c8:77:7d:aa: b7:2b:2d:a9:b8:08:ed:86:b9:64:37:ef:9c:36:22:be:49:2f: ed:06:58:fb:6e:da:a6:31:5f:25:5e:57:b3:8b:e7:7b:ca:7f: 27:e8:1a:7c:92:03:36:95:72:47:b1:83:51:80:46:cc:a2:94: da:4a:7a:11:01:05:70:53:0e:14:ee:4f:a2:4d:20:ae:94:2b: cd:3d:08:5e:87:43:30:d9:d4:6b:d0:08:38:e2:6c:38:3d:04: 9a:5c:08:54:16:19:64:db:ad:fe:c5:17:21:dd:03:62:3d:7a: 41:59:39:65:f4:ad:da:67:37:4d:28:73:84:a7:ca:e6:8e:f6: d2:9f:b9:a4:d4:f5:76:09:3b:b4:0b:4b:d5:8c:d0:03:88:39: 47:6e:10:c0:4d:b1:9e:5a:e9:e1:43:a0:09:a9:ca:4c:fc:59: 60:11:00:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjQwNDI4MTg1MDUwWhcNMjQwNTA1MTg1MDUwWjAYMRYwFAYD VQQDEw02NjJlOWE4YS1mMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVJKSVDg8aPRbRJBdOexVFK1AOsbXCdxlJfjOQRNKKkk9fI2rXW7doYvVBWa U2bOZmRvBze/TEBqpiT/VeJs/qsRbzZRVd97kdWdgZQjzdXwp/yVEV14/HsxfJ4b si5V3paEAI3NwgF+65gA8spYcPL+p15lGUIxyTCAIRxiYdtyedkjhmZLKQM5JfBl BK9hTC6WUN9sHJtG5H+MvBdPcRTUndZCfFK/s03m0f6Fh+n73mnsk9Q7t0XceezK VZ8K4ijthy3Ap0NQaqb/qU5Ngv10aS2/eKPtYxBPc0nbAzifiRbI4ABrUr2gOqRV mbX++QVdHIBqGpJvrMR4k0mjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/a2UOj zzwRT1b/rP0lZ7cR2trDMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9dK+KLNRRsQPTafvHamvgRN4XKRkNn7k1Qpb1kdW/GMvBwQac5uqa tvSJlP1D2QbF/kQSd7qbhIVr/+5RhbjZ5w88XN7hJrDF1zuG+xx+Kn9JEfGvich3 faq3Ky2puAjthrlkN++cNiK+SS/tBlj7btqmMV8lXlezi+d7yn8n6Bp8kgM2lXJH sYNRgEbMopTaSnoRAQVwUw4U7k+iTSCulCvNPQheh0Mw2dRr0Ag44mw4PQSaXAhU Fhlk263+xRch3QNiPXpBWTll9K3aZzdNKHOEp8rmjvbSn7mk1PV2CTu0C0vVjNAD iDlHbhDATbGeWunhQ6AJqcpM/FlgEQBX -----END CERTIFICATE-----Generated at Sun Apr 28 19:55:48 2024 by rpki-client on console-ams.rpki-client.org