$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft File: JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json) Hash identifier: kFKYFP8TTnJxZqkkp4MPNdUp9ZpdvMa1obP84XVXE0o= Subject key identifier: 67:0C:FF:55:87:CA:D1:16:1E:C5:A7:FF:0E:9F:AE:C7:68:D6:52:8D Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft Manifest number: 0BD1 Signing time: Sat 04 May 2024 19:14:34 +0000 Manifest this update: Sat 04 May 2024 19:14:33 +0000 Manifest next update: Sat 11 May 2024 19:14:33 +0000 Files and hashes: 1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: f8TyteTIDpCvZHfQ9OqV+1lRjh2/V3XpFkHQjXGaRUU=) 2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: naIqp1qIgirHYTXhnEIrxV9EWzLYh1BLi6TO8qJtCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Validity Not Before: May 4 19:14:33 2024 GMT Not After : May 11 19:14:33 2024 GMT Subject: CN=66368919-5967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:c8:e5:2a:67:b5:16:7c:1a:4c:42:f0:5c: 49:11:bf:da:08:20:fb:b7:0b:0a:11:d1:33:5a:fd: 47:67:76:57:d5:ec:e0:8d:d4:2a:c6:f3:b0:06:19: 23:40:8f:07:14:18:20:b4:33:55:5b:9b:bc:16:d5: aa:68:cc:1c:be:64:66:cd:33:a9:bb:66:df:b6:a6: cd:ef:8e:8c:63:e3:6c:79:1d:de:89:e3:96:c5:60: 50:e3:43:07:67:80:dd:37:fd:79:76:7b:bf:c5:05: 11:3f:de:e1:14:45:8a:ad:32:72:e6:68:c9:55:0b: 12:4b:b1:1f:10:80:91:da:a3:08:ee:c4:eb:e5:45: 1b:32:4f:61:1e:ec:8b:a1:8c:01:66:31:54:22:9e: f1:f4:4f:67:70:12:0d:3b:6b:12:69:b6:fd:c5:d6: b7:ab:7d:2e:53:57:f8:b5:8f:4a:f3:21:c4:c2:a4: dd:09:56:3c:17:59:3c:ed:e1:a1:58:65:dc:ea:12: b7:ea:a4:6b:a5:ab:aa:2c:1c:9d:07:3d:6d:fb:0c: 27:5c:b1:fa:d2:31:d4:36:ec:4c:09:6b:3c:f2:da: 35:7f:24:f1:f2:67:57:18:82:c6:05:e3:0f:be:2b: d5:16:66:82:d2:68:e4:84:ab:de:c8:93:5e:af:08: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:FF:55:87:CA:D1:16:1E:C5:A7:FF:0E:9F:AE:C7:68:D6:52:8D X509v3 Authority Key Identifier: keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:9b:1e:1c:3d:46:3a:bb:49:a1:28:43:c5:0c:4f:76:ac: ec:1a:64:5c:9c:15:bb:34:2a:25:88:2d:4d:3a:c8:45:0b:06: 2a:b1:c5:dd:16:1d:8d:45:71:86:cb:49:16:59:25:9a:6d:16: 0b:46:17:19:bd:70:70:52:b6:0a:99:f0:98:dc:18:80:64:61: d2:3d:da:87:03:5f:ec:2c:55:81:ce:3d:34:16:97:cc:da:dd: e2:3b:7d:3b:bc:69:11:4d:22:ad:ff:7f:60:b2:ea:47:3f:18: 1f:22:60:6f:f3:22:9b:e7:fa:ad:59:0a:96:a3:16:93:13:53: 39:47:dd:61:ef:41:0d:44:bf:2a:79:1f:3d:cf:cb:33:14:aa: f5:c3:88:7f:fd:23:23:17:5d:1a:3b:c3:8f:ac:36:b4:0f:10: 11:c5:21:89:73:5a:9c:1d:bb:c9:41:75:fa:39:ae:bd:1f:85: 33:fe:70:79:08:7b:9d:38:2e:80:90:35:c6:fb:c2:41:28:1e: eb:a4:15:33:12:48:88:3d:42:2b:90:5c:93:f9:84:36:f4:6c: a0:3c:b3:d2:40:15:02:0b:c1:48:62:cf:32:93:32:1c:38:5f: f5:ea:64:89:11:76:db:20:e3:ba:74:b1:2d:59:ba:0b:d3:05: 0e:cd:04:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD RjQxN0M5M0YwHhcNMjQwNTA0MTkxNDMzWhcNMjQwNTExMTkxNDMzWjAYMRYwFAYD VQQDEw02NjM2ODkxOS01OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstLI5SpntRZ8GkxC8FxJEb/aCCD7twsKEdEzWv1HZ3ZX1ezgjdQqxvOwBhkj QI8HFBggtDNVW5u8FtWqaMwcvmRmzTOpu2bftqbN746MY+NseR3eieOWxWBQ40MH Z4DdN/15dnu/xQURP97hFEWKrTJy5mjJVQsSS7EfEICR2qMI7sTr5UUbMk9hHuyL oYwBZjFUIp7x9E9ncBINO2sSabb9xda3q30uU1f4tY9K8yHEwqTdCVY8F1k87eGh WGXc6hK36qRrpauqLBydBz1t+wwnXLH60jHUNuxMCWs88to1fyTx8mdXGILGBeMP vivVFmaC0mjkhKveyJNerwgN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcM/1WH ytEWHsWn/w6frsdo1lKNMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkxZseHD1GOrtJoShDxQxPdqzsGmRcnBW7NColiC1NOshFCwYqscXd Fh2NRXGGy0kWWSWabRYLRhcZvXBwUrYKmfCY3BiAZGHSPdqHA1/sLFWBzj00FpfM 2t3iO307vGkRTSKt/39gsupHPxgfImBv8yKb5/qtWQqWoxaTE1M5R91h70ENRL8q eR89z8szFKr1w4h//SMjF10aO8OPrDa0DxARxSGJc1qcHbvJQXX6Oa69H4Uz/nB5 CHudOC6AkDXG+8JBKB7rpBUzEkiIPUIrkFyT+YQ29GygPLPSQBUCC8FIYs8ykzIc OF/16mSJEXbbIOO6dLEtWboL0wUOzQT5 -----END CERTIFICATE-----Generated at Sat May 4 19:58:46 2024 by rpki-client on console-ams.rpki-client.org