$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: Ahj3UWT2Qgi7VWAPssTVLBf8Dn8Y118yMPpUa9aY1fo= Subject key identifier: 8E:76:53:A9:8A:70:C3:CD:9F:DF:62:41:31:78:2F:D4:0A:D5:C6:CF Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 06DB Signing time: Sat 18 May 2024 22:52:43 +0000 Manifest this update: Sat 18 May 2024 22:52:42 +0000 Manifest next update: Sat 25 May 2024 22:52:42 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: kN9J/slx/9vP82owzTkLtD7omJcbwk/a2FSrAaePF8E=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: l3VZSK2THtgY7ndsjgKypN+4Gdl6NZ9vi+KTwfT/SI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: May 18 22:52:42 2024 GMT Not After : May 25 22:52:42 2024 GMT Subject: CN=6649313a-cb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:84:ba:ad:fb:8b:d7:fa:ff:be:ef:41:ad:fc: a5:bf:ee:44:ee:87:f6:ed:8f:9c:e0:46:e5:78:6e: ca:1d:c5:4b:65:66:61:ac:8c:89:76:c0:b3:21:82: 25:b3:dd:d5:70:ce:9e:21:51:1a:ce:30:42:f3:a4: dd:7b:20:b5:09:e8:90:a4:43:07:06:a0:db:4f:68: ea:65:70:4c:77:31:39:0c:e0:87:50:53:ad:4a:cd: 34:49:1d:8a:ef:f4:2d:29:70:de:41:79:12:d4:6a: 66:79:e2:4c:05:2a:d5:fc:9c:64:bb:a4:a1:7a:27: 6a:95:4a:20:b8:aa:3b:b8:ec:4f:37:67:3c:39:61: 5b:23:75:6c:52:e3:bc:cd:4d:1e:e1:d9:d4:08:43: 89:ab:f5:16:f4:fa:c4:26:10:fa:9f:3d:43:75:9b: a8:f2:ff:31:03:40:5f:65:de:0b:7d:c4:8a:de:43: ae:8a:34:67:08:4d:25:1f:b2:38:a0:b0:8e:4c:67: df:ba:e9:b1:03:99:89:15:ae:54:f8:ca:1a:4b:fc: 89:df:13:72:cd:72:03:c3:e3:c1:3b:37:c5:fa:0e: 79:bd:33:fb:89:c2:f9:ec:20:01:4d:64:26:d0:ac: d6:64:b7:b4:2c:e6:55:56:9e:0b:cd:a9:77:bb:6e: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:53:A9:8A:70:C3:CD:9F:DF:62:41:31:78:2F:D4:0A:D5:C6:CF X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8a:43:1d:f4:3a:0d:f7:b0:bf:0a:70:70:a0:9f:ad:90:a3: 16:a7:68:ed:2d:38:22:04:88:37:81:72:aa:20:60:a4:46:fb: d8:5e:0c:ce:a3:03:a1:8e:06:1c:5a:8e:1f:cf:81:22:61:e0: d0:32:fb:c3:3a:18:71:91:97:02:3f:18:d9:4f:01:54:86:1e: f2:b9:53:08:c3:fe:e6:d5:62:29:de:42:93:4b:7e:04:40:24: 02:55:a9:d4:ce:cc:e5:ef:00:55:13:39:ae:89:3c:43:26:9a: f5:bf:fc:55:9f:71:db:53:cc:c0:c7:ea:2d:6d:5d:ab:61:45: b5:3c:ff:f5:e5:9c:9c:12:ef:ee:50:9c:57:2f:1a:ae:7e:64: 85:9e:7b:54:8f:2e:65:3d:01:98:e9:e7:e2:6c:f6:87:9f:e2: 9e:72:87:0f:9d:60:66:98:0b:ea:ef:c3:55:ad:ab:4e:28:12: c1:ce:95:35:41:c8:26:5c:b6:22:fa:de:ee:d1:7a:fe:22:cb: 70:a2:84:19:5d:f5:ac:6b:9d:cd:40:46:cd:82:da:2a:b4:7b: 9c:dd:8a:da:27:5c:e2:6e:e7:c2:b2:ea:75:1b:de:59:04:6b: 25:8a:28:8c:b1:eb:12:ae:c7:18:ad:bd:15:3d:31:c5:09:9b: 12:18:2d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjQwNTE4MjI1MjQyWhcNMjQwNTI1MjI1MjQyWjAYMRYwFAYD VQQDEw02NjQ5MzEzYS1jYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YS6rfuL1/r/vu9Brfylv+5E7of27Y+c4EbleG7KHcVLZWZhrIyJdsCzIYIl s93VcM6eIVEazjBC86TdeyC1CeiQpEMHBqDbT2jqZXBMdzE5DOCHUFOtSs00SR2K 7/QtKXDeQXkS1GpmeeJMBSrV/Jxku6SheidqlUoguKo7uOxPN2c8OWFbI3VsUuO8 zU0e4dnUCEOJq/UW9PrEJhD6nz1DdZuo8v8xA0BfZd4LfcSK3kOuijRnCE0lH7I4 oLCOTGffuumxA5mJFa5U+MoaS/yJ3xNyzXIDw+PBOzfF+g55vTP7icL57CABTWQm 0KzWZLe0LOZVVp4Lzal3u27oHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI52U6mK cMPNn99iQTF4L9QK1cbPMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfikMd9DoN97C/CnBwoJ+tkKMWp2jtLTgiBIg3gXKqIGCkRvvYXgzO owOhjgYcWo4fz4EiYeDQMvvDOhhxkZcCPxjZTwFUhh7yuVMIw/7m1WIp3kKTS34E QCQCVanUzszl7wBVEzmuiTxDJpr1v/xVn3HbU8zAx+otbV2rYUW1PP/15ZycEu/u UJxXLxqufmSFnntUjy5lPQGY6efibPaHn+KecocPnWBmmAvq78NVratOKBLBzpU1 QcgmXLYi+t7u0Xr+IstwooQZXfWsa53NQEbNgtoqtHuc3YraJ1zibufCsup1G95Z BGsliiiMsesSrscYrb0VPTHFCZsSGC10 -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org