$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: Az0YsVImVZl+RNBehUXD3G7BNK2RVl/uz2VtLluIwrM= Subject key identifier: 2E:18:14:60:B2:72:5C:CA:15:B2:13:CE:D6:1C:66:44:1E:94:03:8A Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1B39 Signing time: Sat 18 May 2024 16:39:07 +0000 Manifest this update: Sat 18 May 2024 16:39:06 +0000 Manifest next update: Sat 25 May 2024 16:39:06 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: EZWPSUfJ4/HWC6H5Sbu/KmZz8Qh3aA/fdf6KA9RMc2w=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: qtRsJHVpnNad1M37BWzQ5GnqWukDmT2uyK4e9+6Jmqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6992 (0x1b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: May 18 16:39:06 2024 GMT Not After : May 25 16:39:06 2024 GMT Subject: CN=6648d9aa-cd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:a4:aa:74:75:51:a7:fd:a7:6e:37:17:5a: 10:7c:bf:b6:a3:45:67:8e:49:df:d5:dc:a0:7c:54: 2c:52:7e:8d:ee:f6:11:f3:de:1e:1d:76:fd:9a:cf: 7c:09:45:bb:aa:46:49:22:c5:14:f4:c0:51:61:96: da:8f:4f:c5:71:3c:0c:d5:2e:85:f4:4f:fc:0b:f6: 3f:3e:fc:d8:2c:76:4f:52:54:be:24:56:a1:32:83: 0d:f0:17:4f:dd:0a:f2:31:e5:6f:ae:f5:d3:08:e9: 9e:6f:12:82:33:3a:d1:0d:41:6e:5d:6d:cd:6f:ca: c0:f5:30:0b:9c:a9:cc:14:71:7c:cb:54:e5:3e:7e: 98:1e:a4:39:43:db:a8:44:07:9b:f6:cf:52:2e:d9: a8:38:1d:db:09:d5:d7:96:0b:90:d8:a3:dc:01:ea: 24:a6:78:b4:97:02:07:f9:24:5f:81:4a:46:8d:dd: 96:40:a7:69:7f:93:77:45:f3:85:d5:48:b7:09:72: a0:5d:d0:a2:ec:44:d5:d9:5e:8c:12:40:b8:c2:14: 95:5b:4b:90:46:f0:2d:99:cb:a9:13:eb:44:b8:a7: 1d:8c:f7:2d:9d:f4:85:4f:56:9f:16:0a:8b:51:d6: 20:e0:96:8b:b6:75:5b:dc:51:5d:0c:6a:3e:66:03: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:18:14:60:B2:72:5C:CA:15:B2:13:CE:D6:1C:66:44:1E:94:03:8A X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cd:4a:d5:6f:80:3d:51:5d:1e:e3:e6:b5:8a:5c:b7:d0:07: eb:cc:30:d9:20:fe:f2:d7:09:34:31:87:ca:9f:0c:45:1d:da: 8e:cc:0e:bc:d3:cd:92:22:30:f4:81:e5:b1:4f:4e:7b:61:b9: a5:a7:93:8f:31:1b:fd:fd:68:f0:c8:a8:ed:c3:72:c2:db:a4: 83:06:1a:5e:4d:5f:75:98:1d:9e:20:a9:ad:3c:e8:d8:b5:77: a1:5b:f5:e7:a0:dd:3c:29:87:20:5d:c5:c6:e7:c4:cd:b5:c1: 06:41:15:6d:bc:34:01:ec:95:d9:63:1e:43:63:0a:50:57:45: b6:3b:52:da:d7:1e:3a:d4:b5:9e:33:49:5f:12:91:a1:6f:bd: 3e:66:dc:c2:ba:c4:d4:e2:57:cc:5b:44:5c:f8:ec:c3:e2:59: 50:2e:b8:74:2c:11:8d:9f:4f:00:3e:c9:35:f0:47:e8:72:30: f0:92:3d:e9:0c:b9:d6:94:89:44:df:d8:b4:fd:de:3c:d2:9d: 8a:7b:58:96:63:11:ec:35:5e:a7:a9:1a:0c:2c:49:11:da:d7: 78:9b:91:be:65:01:f4:f5:a3:6f:16:b1:86:31:0f:44:46:57: 85:7e:88:a5:0f:f3:68:5e:bc:38:18:5c:7c:54:ff:cc:2e:a0: 03:ed:7b:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjQwNTE4MTYzOTA2WhcNMjQwNTI1MTYzOTA2WjAYMRYwFAYD VQQDEw02NjQ4ZDlhYS1jZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw22kqnR1Uaf9p243F1oQfL+2o0Vnjknf1dygfFQsUn6N7vYR894eHXb9ms98 CUW7qkZJIsUU9MBRYZbaj0/FcTwM1S6F9E/8C/Y/PvzYLHZPUlS+JFahMoMN8BdP 3QryMeVvrvXTCOmebxKCMzrRDUFuXW3Nb8rA9TALnKnMFHF8y1TlPn6YHqQ5Q9uo RAeb9s9SLtmoOB3bCdXXlguQ2KPcAeokpni0lwIH+SRfgUpGjd2WQKdpf5N3RfOF 1Ui3CXKgXdCi7ETV2V6MEkC4whSVW0uQRvAtmcupE+tEuKcdjPctnfSFT1afFgqL UdYg4JaLtnVb3FFdDGo+ZgNhPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4YFGCy clzKFbITztYcZkQelAOKMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPzUrVb4A9UV0e4+a1ily30AfrzDDZIP7y1wk0MYfKnwxFHdqOzA68 082SIjD0geWxT057Ybmlp5OPMRv9/WjwyKjtw3LC26SDBhpeTV91mB2eIKmtPOjY tXehW/XnoN08KYcgXcXG58TNtcEGQRVtvDQB7JXZYx5DYwpQV0W2O1La1x461LWe M0lfEpGhb70+ZtzCusTU4lfMW0Rc+OzD4llQLrh0LBGNn08APsk18EfocjDwkj3p DLnWlIlE39i0/d480p2Ke1iWYxHsNV6nqRoMLEkR2td4m5G+ZQH09aNvFrGGMQ9E RleFfoilD/NoXrw4GFx8VP/MLqAD7XuP -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org