$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: jm+dS3jiCCHmenl2lJTsTl8lopfuPXXTR6R/I8+50Jg= Subject key identifier: FA:6C:AA:4C:9A:AF:6E:F0:8B:7B:3C:C5:AB:01:D7:9B:ED:62:B5:94 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 033D Signing time: Tue 07 May 2024 02:56:50 +0000 Manifest this update: Tue 07 May 2024 02:56:49 +0000 Manifest next update: Tue 14 May 2024 02:56:49 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: iclRGa2asMdNEZw00hLQxbypjX/0lx6UjSI0O5Wp5e0=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: k+Z56AZRkmsg8G/VM5gkdImqRL0zYO34OeSgcqTOnfk=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: g2dvLYBGOdMHNfTcKzHb+shJjdNBYdOW92QYVT374z4=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: 4yf2iy/EaDycevCFtGY4EKlu7vgv+r5omMQGMcRFOK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: May 7 02:56:49 2024 GMT Not After : May 14 02:56:49 2024 GMT Subject: CN=66399872-7327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:a5:44:b9:b9:3d:4d:81:50:9e:41:2b:e6: e5:08:61:02:58:16:45:0f:08:52:ac:a5:ca:a2:ed: f8:cf:c4:d6:d7:84:b1:00:f0:6b:34:aa:05:f7:10: a8:89:ed:09:63:68:90:75:61:ee:59:5c:38:e8:ca: c1:7c:47:c7:db:89:89:91:7e:91:7c:b5:70:46:2e: 09:9b:af:77:02:56:f6:2f:f7:37:c1:f0:fe:56:e5: 45:2c:10:71:83:b9:fe:d8:c1:a0:c1:c4:ed:6b:ce: d8:2c:a1:3b:76:b9:58:e6:c9:3e:0c:35:a1:78:ad: ba:b6:6b:d8:7b:85:b3:fa:1c:c2:5f:55:f4:d4:4a: 70:8c:d0:93:b2:66:3c:74:32:66:0c:28:a3:72:c7: 2a:c8:de:be:1f:dc:37:66:c7:11:86:b7:3f:0a:5d: b7:a0:b6:f2:17:18:09:c7:ff:6d:81:35:bf:a1:43: c7:dd:c4:bf:51:cd:5b:17:ff:2f:2b:8e:76:d0:d2: ee:b7:22:52:a1:4a:3d:00:24:08:98:1c:a0:55:22: e5:d0:32:ce:c7:33:07:40:f7:2e:d5:6a:f9:b4:df: 68:c7:d5:42:12:df:e8:0e:5b:ff:21:aa:c3:d2:e1: e0:ee:6e:56:4e:7e:c8:d2:2b:a5:a7:d4:2e:89:f0: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6C:AA:4C:9A:AF:6E:F0:8B:7B:3C:C5:AB:01:D7:9B:ED:62:B5:94 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4d:2c:de:2d:22:e8:6c:59:6c:2c:a6:be:45:43:0e:62:32: 6a:7a:e2:86:c7:5d:41:03:23:ce:1a:52:a9:13:d8:32:e4:10: 81:c2:34:1f:fb:a0:b1:42:fc:14:66:a9:dc:85:65:47:85:75: 06:a1:d8:7d:f8:ee:0c:a4:ab:c1:ec:28:58:62:f1:9c:0e:0a: 7c:af:e1:b3:82:fc:44:c7:e2:a9:bb:e1:43:db:c8:bf:ec:df: 24:df:3f:2d:b6:26:3b:84:34:15:ca:42:5d:57:32:2d:c1:c8: 4f:c2:5e:49:16:18:b2:a9:b7:65:62:5e:4c:9b:12:cd:5d:d9: 75:a0:4b:50:de:3d:11:3d:2c:ea:a7:60:1b:3b:33:c4:af:7a: 27:3f:e6:a6:f1:b1:09:2c:81:1d:c1:11:73:d6:31:33:3a:83: a6:fe:90:a0:42:7b:13:d9:14:a9:90:8f:ba:1b:19:33:82:18: 25:c5:ff:71:f3:f2:11:ba:87:f5:e4:5a:84:86:fb:0f:ff:38: 1f:f4:12:65:b5:ad:60:0b:bd:67:68:08:70:86:29:e7:c5:d3: 35:61:92:42:07:e8:db:87:f9:d5:29:7e:44:a4:14:09:f4:15: 86:f5:7b:0b:35:91:82:f5:9a:f6:db:9a:05:51:c2:02:a6:58: f1:25:8a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjQwNTA3MDI1NjQ5WhcNMjQwNTE0MDI1NjQ5WjAYMRYwFAYD VQQDEw02NjM5OTg3Mi03MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A+lRLm5PU2BUJ5BK+blCGECWBZFDwhSrKXKou34z8TW14SxAPBrNKoF9xCo ie0JY2iQdWHuWVw46MrBfEfH24mJkX6RfLVwRi4Jm693Alb2L/c3wfD+VuVFLBBx g7n+2MGgwcTta87YLKE7drlY5sk+DDWheK26tmvYe4Wz+hzCX1X01EpwjNCTsmY8 dDJmDCijcscqyN6+H9w3ZscRhrc/Cl23oLbyFxgJx/9tgTW/oUPH3cS/Uc1bF/8v K4520NLutyJSoUo9ACQImBygVSLl0DLOxzMHQPcu1Wr5tN9ox9VCEt/oDlv/IarD 0uHg7m5WTn7I0iulp9QuifBQiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpsqkya r27wi3s8xasB15vtYrWUMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvTSzeLSLobFlsLKa+RUMOYjJqeuKGx11BAyPOGlKpE9gy5BCBwjQf +6CxQvwUZqnchWVHhXUGodh9+O4MpKvB7ChYYvGcDgp8r+GzgvxEx+Kpu+FD28i/ 7N8k3z8ttiY7hDQVykJdVzItwchPwl5JFhiyqbdlYl5MmxLNXdl1oEtQ3j0RPSzq p2AbOzPEr3onP+am8bEJLIEdwRFz1jEzOoOm/pCgQnsT2RSpkI+6Gxkzghglxf9x 8/IRuof15FqEhvsP/zgf9BJlta1gC71naAhwhinnxdM1YZJCB+jbh/nVKX5EpBQJ 9BWG9XsLNZGC9Zr225oFUcICpljxJYq4 -----END CERTIFICATE-----Generated at Tue May 7 03:50:01 2024 by rpki-client on console-ams.rpki-client.org