$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft File: MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json) Hash identifier: 9wZ5+OilNGa6WgxP3tHkJPQVVq4Xgwflc+E6ReDHF9g= Subject key identifier: 29:56:00:B3:5B:EC:28:80:6E:69:3C:98:80:AD:14:58:8B:04:FA:EC Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 Certificate issuer: /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft Manifest number: 0387 Signing time: Sun 19 May 2024 02:41:22 +0000 Manifest this update: Sun 19 May 2024 02:41:22 +0000 Manifest next update: Sun 26 May 2024 02:41:22 +0000 Files and hashes: 1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: RUsFK1CSb7jY9GTcOzkn8WotJVLVYbUigZzv4d5giko=) 2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: 9JXpvGvbKZZ6wal+I+4NgtnbORBILpr16m8wSCjrcTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873 Validity Not Before: May 19 02:41:22 2024 GMT Not After : May 26 02:41:22 2024 GMT Subject: CN=664966d2-4a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:ba:f5:a4:b5:db:c1:29:4b:54:0c:97:8d: db:ab:28:47:fd:b8:c8:13:b2:10:4d:f8:7a:76:5f: 0d:7f:b3:81:47:61:7f:48:a5:0a:15:47:e8:3c:92: 4a:07:e5:7f:c3:34:a4:9d:c9:ac:5b:0a:d6:56:ed: e0:b4:fe:49:12:62:17:24:17:01:da:5e:1a:c3:3c: 3e:37:56:fe:84:da:d2:0c:ea:08:96:69:5a:a1:01: d2:aa:72:1a:15:66:ba:e8:6d:63:cd:3d:48:85:c9: bf:84:14:cb:53:5c:be:08:90:73:ee:71:0d:84:71: d7:52:88:45:8a:79:6b:ce:2a:46:67:2c:f9:a0:cd: dc:91:1f:56:3e:ce:e8:68:04:56:76:bc:0a:75:4b: e4:0b:8c:6a:0a:e8:68:39:7f:cb:be:2e:36:2d:96: 38:4a:0f:83:f3:69:76:d7:63:79:14:1b:ec:be:db: 7d:0e:e1:ab:6e:c7:f6:7e:8e:41:bc:d3:60:e0:4b: a0:95:94:15:60:9e:35:39:2d:1a:1c:6c:51:39:9c: 62:cf:27:32:cb:8a:13:dd:f8:54:f2:42:41:f1:88: b9:9b:5b:f5:5e:c9:29:2c:13:9a:8d:63:37:2a:92: 2f:73:0e:e9:3b:3b:f1:d9:a1:cb:53:99:ae:dc:21: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:56:00:B3:5B:EC:28:80:6E:69:3C:98:80:AD:14:58:8B:04:FA:EC X509v3 Authority Key Identifier: keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:02:8d:48:98:38:c2:42:4f:05:4b:7d:98:5a:8b:6e:18: 33:99:c2:60:25:55:85:8d:2c:1a:be:5c:e0:b9:8d:ca:00:16: 28:15:7c:c8:14:cb:e8:da:c6:7c:ff:6a:a1:9d:32:7f:1e:70: 37:09:3c:b4:27:d2:d8:3c:48:8a:b9:b2:88:61:9a:62:32:1c: bb:6c:5b:49:c4:65:91:eb:a1:b5:01:8d:ae:f4:1f:81:b1:80: 77:ab:1f:17:35:30:11:76:3c:c6:89:e9:67:5d:d6:fc:3e:bc: ac:2e:81:b0:29:be:5f:d4:0e:a3:b6:7b:55:97:8c:8d:48:a2: 09:40:c9:2a:47:71:22:37:22:ad:aa:86:91:52:2f:c2:fd:c9: 4b:20:d9:5c:7b:dc:5b:43:08:ad:0f:52:cb:16:1c:61:8b:87: aa:21:0d:1e:f0:fb:9d:0f:e6:bb:93:89:74:ce:11:fb:21:6f: ed:d0:0a:3e:af:98:31:d7:0b:c6:7e:f3:bf:f1:02:eb:71:da: b7:eb:18:1d:26:36:03:df:00:e3:e6:57:9c:82:42:d3:75:2a: 31:52:03:7d:48:2f:4c:4c:b5:e7:72:25:3f:87:15:2e:89:53: 86:b0:0c:7f:92:d9:1b:e2:38:06:c7:95:e5:69:ef:9a:54:89: ad:e7:72:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2NDMxMTAvBgNVBAUTKDMyMzlDMEFDODJEOTQyNzJBNkEwOURGQjJBOTBBNjY3 MzA5QjM4NzMwHhcNMjQwNTE5MDI0MTIyWhcNMjQwNTI2MDI0MTIyWjAYMRYwFAYD VQQDEw02NjQ5NjZkMi00YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKW69aS128EpS1QMl43bqyhH/bjIE7IQTfh6dl8Nf7OBR2F/SKUKFUfoPJJK B+V/wzSkncmsWwrWVu3gtP5JEmIXJBcB2l4awzw+N1b+hNrSDOoIlmlaoQHSqnIa FWa66G1jzT1Ihcm/hBTLU1y+CJBz7nENhHHXUohFinlrzipGZyz5oM3ckR9WPs7o aARWdrwKdUvkC4xqCuhoOX/Lvi42LZY4Sg+D82l212N5FBvsvtt9DuGrbsf2fo5B vNNg4EuglZQVYJ41OS0aHGxROZxizycyy4oT3fhU8kJB8Yi5m1v1XskpLBOajWM3 KpIvcw7pOzvx2aHLU5mu3CHSPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClWALNb 7CiAbmk8mICtFFiLBPrsMB8GA1UdIwQYMBaAFDI5wKyC2UJypqCd+yqQpmcwmzhz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY0My83MzgwNTJBRTU3 NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFuS21vSjM3S3BDbVp6Q2JP SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01qbkFySUxaUW5LbW9KMzdLcENtWnpDYk9ITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY0My83MzgwNTJBRTU3NDgxMUVDQjQyNTJCODZDNEY5QUUwMi9Nam5BcklMWlFu S21vSjM3S3BDbVp6Q2JPSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARJwKNSJg4wkJPBUt9mFqLbhgzmcJgJVWFjSwavlzguY3KABYoFXzI FMvo2sZ8/2qhnTJ/HnA3CTy0J9LYPEiKubKIYZpiMhy7bFtJxGWR66G1AY2u9B+B sYB3qx8XNTARdjzGielnXdb8PrysLoGwKb5f1A6jtntVl4yNSKIJQMkqR3EiNyKt qoaRUi/C/clLINlce9xbQwitD1LLFhxhi4eqIQ0e8PudD+a7k4l0zhH7IW/t0Ao+ r5gx1wvGfvO/8QLrcdq36xgdJjYD3wDj5lecgkLTdSoxUgN9SC9MTLXnciU/hxUu iVOGsAx/ktkb4jgGx5Xlae+aVImt53Ib -----END CERTIFICATE-----Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org