$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: StfoHE/RpCjClfLLd0uFz83KlTAtAhgAIXVRA8BQ8wU= Subject key identifier: 30:85:3F:42:78:8D:D1:B8:7D:DD:27:E8:1B:CE:26:B3:41:3C:B1:50 Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 0673 Signing time: Sat 18 May 2024 23:28:58 +0000 Manifest this update: Sat 18 May 2024 23:28:58 +0000 Manifest next update: Sat 25 May 2024 23:28:58 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: kHo7FGcHevcBU/jRQqIe+dP+7u4vmBSwooidqr42t+c=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: Ii70CLVt7TySUHN/1bK+N/jJYtwbSV5rRTFy8thyAAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: May 18 23:28:58 2024 GMT Not After : May 25 23:28:58 2024 GMT Subject: CN=664939ba-27f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b2:b5:a6:7e:1b:01:0c:70:3b:2e:22:e0:ca: 8d:00:06:9d:db:ff:80:67:43:40:55:e9:06:98:47: fc:b2:13:df:f7:2a:ec:19:4a:cc:e5:2c:a5:c3:3e: 48:ea:b4:ed:71:65:a8:49:15:f6:c0:6d:12:0d:7a: 93:10:a9:a3:cb:f8:36:09:da:d9:5a:88:84:b0:94: 9d:92:5c:93:e4:1a:39:7c:89:8b:9f:96:34:ee:4b: 54:b4:9a:12:1f:3e:02:34:0c:38:97:c6:67:14:cf: 09:7f:3e:19:8b:c5:01:cf:94:9b:af:fc:f8:00:8d: 5d:01:a3:fb:52:cc:31:8f:53:94:ad:fa:2c:fd:a5: 4d:39:9f:d8:54:91:d2:39:48:6c:eb:d6:85:15:74: e9:16:25:af:34:b5:1e:d3:34:bc:b3:70:c4:16:a8: 7c:be:e1:f8:e7:bf:44:4a:e5:04:82:1c:5e:a4:ef: ef:f7:17:2f:a1:90:80:12:8c:27:24:83:45:51:c8: d6:d4:f9:ec:00:33:82:b5:cb:62:f7:6b:60:5c:c2: 9d:9a:10:ae:33:84:52:45:30:32:14:49:1e:5d:8d: 27:a6:26:d1:93:04:76:73:f2:fd:f2:b2:83:8f:50: ab:ad:cb:f0:a0:59:ea:66:b2:57:5c:86:07:bb:cb: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:3F:42:78:8D:D1:B8:7D:DD:27:E8:1B:CE:26:B3:41:3C:B1:50 X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2a:f7:ca:64:e4:32:5a:97:a7:0c:43:ee:a6:39:7a:90:7d: 16:45:3b:a7:2f:bf:37:20:25:ad:e9:6b:cd:31:ca:be:7b:0b: 92:67:01:3d:19:7f:50:3f:3a:b3:1a:07:f6:49:46:56:d0:ea: ef:b2:f6:f5:04:e0:4a:db:9e:9d:3a:9e:44:9d:28:e6:cc:e2: 1c:f0:a1:9c:3f:d6:a5:7e:cb:2d:73:7e:7c:6d:62:f6:13:cd: 0e:cb:e5:80:1c:0e:04:ec:0f:04:c3:af:59:f1:28:7e:88:77: a4:8f:d6:ea:68:12:e8:f5:b3:1a:17:a8:ac:8f:6f:13:6e:41: 10:75:5c:1d:ca:24:3a:57:90:cd:89:fa:c8:dd:cb:14:7a:1e: 7c:5e:57:2b:3c:bd:26:64:1a:fa:6d:73:8e:cc:d8:88:b8:2d: da:01:29:a9:87:19:5a:25:a2:63:99:63:b3:db:c6:bd:79:6a: 81:39:93:ca:89:ac:50:46:d5:a3:55:f7:d3:1d:dd:1a:47:84: 8b:79:39:33:11:9e:7d:c9:d6:e5:0e:c3:74:13:f6:b3:a0:3c: 9b:7a:dc:d7:05:2d:59:9c:ec:cb:ec:d6:f5:cd:1c:dc:3d:6a: 03:3d:e2:ea:29:30:a9:5d:82:d6:03:bd:c3:41:06:98:96:1c: dc:2a:63:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjQwNTE4MjMyODU4WhcNMjQwNTI1MjMyODU4WjAYMRYwFAYD VQQDEw02NjQ5MzliYS0yN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bK1pn4bAQxwOy4i4MqNAAad2/+AZ0NAVekGmEf8shPf9yrsGUrM5Sylwz5I 6rTtcWWoSRX2wG0SDXqTEKmjy/g2CdrZWoiEsJSdklyT5Bo5fImLn5Y07ktUtJoS Hz4CNAw4l8ZnFM8Jfz4Zi8UBz5Sbr/z4AI1dAaP7Uswxj1OUrfos/aVNOZ/YVJHS OUhs69aFFXTpFiWvNLUe0zS8s3DEFqh8vuH4579ESuUEghxepO/v9xcvoZCAEown JINFUcjW1PnsADOCtcti92tgXMKdmhCuM4RSRTAyFEkeXY0npibRkwR2c/L98rKD j1CrrcvwoFnqZrJXXIYHu8uASQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCFP0J4 jdG4fd0n6BvOJrNBPLFQMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaKvfKZOQyWpenDEPupjl6kH0WRTunL783ICWt6WvNMcq+ewuSZwE9 GX9QPzqzGgf2SUZW0Orvsvb1BOBK256dOp5EnSjmzOIc8KGcP9alfsstc358bWL2 E80Oy+WAHA4E7A8Ew69Z8Sh+iHekj9bqaBLo9bMaF6isj28TbkEQdVwdyiQ6V5DN ifrI3csUeh58XlcrPL0mZBr6bXOOzNiIuC3aASmphxlaJaJjmWOz28a9eWqBOZPK iaxQRtWjVffTHd0aR4SLeTkzEZ59ydblDsN0E/azoDybetzXBS1ZnOzL7Nb1zRzc PWoDPeLqKTCpXYLWA73DQQaYlhzcKmN5 -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org