$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: bccB8knRAghXZXi1bl9j7wbTCpVRPRSwlFkHSIhPkKQ= Subject key identifier: 69:AF:0F:E2:83:DE:41:08:10:10:A2:D9:82:EF:D0:99:75:A3:B6:BE Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 0626 Signing time: Fri 31 May 2024 00:23:36 +0000 Manifest this update: Fri 31 May 2024 00:23:35 +0000 Manifest next update: Fri 07 Jun 2024 00:23:35 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: DXAo3mz5AlHkuEes1aH6QbnJQkHqi4LRWvYk2gbTVgg=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: NhyP9C0VGB40rjoaoeyJ1nUpEdP5QFAk+t7Ozjv6Ft4=) 3: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: 0XD6ozUFmk55Hji/QQJa19ex1KVBJeV6+OuJeQZqSkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: May 31 00:23:35 2024 GMT Not After : Jun 7 00:23:35 2024 GMT Subject: CN=66591888-5538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:b9:fa:92:fa:b5:a4:14:e8:5b:a6:1c:7f: ce:1b:c1:71:65:be:cb:4b:85:e1:e4:3f:02:2f:31: a7:8b:a5:54:f2:12:fc:c2:e0:84:39:52:e0:c0:1c: 38:59:96:8b:fe:80:14:ec:09:97:36:8b:d2:d4:c2: 9f:a9:6a:f4:00:50:3a:6d:ae:d7:8a:e1:30:37:b6: 16:7c:53:54:1d:c1:68:65:ff:d5:f1:e4:a5:6a:f0: cc:eb:be:ac:81:fd:2f:71:1a:be:1c:df:0e:f8:50: 23:0c:39:1a:b9:b7:df:7f:c2:08:96:e4:58:1d:67: 49:77:62:2f:eb:1b:cf:7a:33:a3:44:2e:df:81:b7: 56:29:db:c3:d6:e5:89:1e:fc:27:62:f5:37:2c:c5: a1:8e:6f:fd:9c:b7:3a:d2:2d:a6:44:52:aa:33:65: f6:85:d4:f5:24:2e:46:7f:49:ee:eb:fa:fb:8a:8f: 47:98:d5:a8:d9:bd:f8:50:38:ec:a5:ee:8f:ca:44: 52:3e:18:dd:34:2e:13:b8:af:b8:d7:e7:88:b2:b7: 8c:5f:89:7f:01:b8:7c:75:1f:ab:0d:3e:17:4e:d3: c3:59:14:7d:4f:0d:3c:79:b6:a8:0f:ef:22:ba:cd: b8:be:d6:a9:f8:f0:b1:af:3c:07:c3:9e:a4:53:be: e5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:0F:E2:83:DE:41:08:10:10:A2:D9:82:EF:D0:99:75:A3:B6:BE X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e2:e8:7e:9e:17:f6:2a:6e:6a:17:57:e5:ec:55:25:3c:b8: f9:86:29:a1:1b:07:4d:fc:71:83:6d:bc:53:29:28:70:5b:4b: b7:b2:90:c2:db:c3:3c:07:02:07:90:46:c3:71:31:6b:26:24: f7:7d:ac:43:5a:84:a2:96:ca:31:c9:a3:d8:ca:c0:97:a5:a3: 2a:19:61:21:1f:77:93:27:6e:e5:fa:34:d2:66:24:fe:cd:d9: dc:31:ba:b0:b9:21:1a:db:03:eb:91:6e:38:3c:62:7e:8c:45: 1d:c6:c1:8d:6b:a4:8f:c1:1d:ed:b4:ca:9e:98:92:80:3b:36: 1e:10:4c:31:d6:34:23:6e:bd:b0:63:dd:46:59:52:96:5c:c9: 8d:3b:e7:19:ad:5f:b0:5c:b1:58:35:5f:40:9b:a7:bf:98:a4: bd:3c:0f:d9:22:93:26:bf:99:ba:eb:68:f1:e4:81:7d:06:a9: be:70:08:04:16:70:b5:a5:71:01:18:b8:89:ff:d3:e2:da:90: fe:35:c0:08:5c:58:84:bf:dc:1d:fb:e0:fe:f0:77:fd:6a:1c: 24:74:4e:7f:83:a4:ab:2f:7c:57:97:a2:92:a3:b8:0e:61:f1: 59:fa:8a:d4:b5:e0:ce:90:7d:e6:33:d9:e5:ae:43:2d:26:4f: c8:58:57:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjQwNTMxMDAyMzM1WhcNMjQwNjA3MDAyMzM1WjAYMRYwFAYD VQQDEw02NjU5MTg4OC01NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHe5+pL6taQU6FumHH/OG8FxZb7LS4Xh5D8CLzGni6VU8hL8wuCEOVLgwBw4 WZaL/oAU7AmXNovS1MKfqWr0AFA6ba7XiuEwN7YWfFNUHcFoZf/V8eSlavDM676s gf0vcRq+HN8O+FAjDDkaubfff8IIluRYHWdJd2Iv6xvPejOjRC7fgbdWKdvD1uWJ HvwnYvU3LMWhjm/9nLc60i2mRFKqM2X2hdT1JC5Gf0nu6/r7io9HmNWo2b34UDjs pe6PykRSPhjdNC4TuK+41+eIsreMX4l/Abh8dR+rDT4XTtPDWRR9Tw08ebaoD+8i us24vtap+PCxrzwHw56kU77lzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmvD+KD 3kEIEBCi2YLv0Jl1o7a+MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/4uh+nhf2Km5qF1fl7FUlPLj5himhGwdN/HGDbbxTKShwW0u3spDC 28M8BwIHkEbDcTFrJiT3faxDWoSilsoxyaPYysCXpaMqGWEhH3eTJ27l+jTSZiT+ zdncMbqwuSEa2wPrkW44PGJ+jEUdxsGNa6SPwR3ttMqemJKAOzYeEEwx1jQjbr2w Y91GWVKWXMmNO+cZrV+wXLFYNV9Am6e/mKS9PA/ZIpMmv5m662jx5IF9Bqm+cAgE FnC1pXEBGLiJ/9Pi2pD+NcAIXFiEv9wd++D+8Hf9ahwkdE5/g6SrL3xXl6KSo7gO YfFZ+orUteDOkH3mM9nlrkMtJk/IWFeF -----END CERTIFICATE-----Generated at Fri May 31 01:36:41 2024 by rpki-client on console-fra.rpki-client.org