$ rpki-client -vvf rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft File: jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft (raw, json) Hash identifier: mLLpp6A5vJppHgPCXbW+xkVz2n+bi58sveHY9yflwnc= Subject key identifier: 2B:33:AD:D8:33:A7:00:B7:81:93:5B:C0:42:6C:E8:C3:58:31:5D:40 Authority key identifier: 8C:99:F2:E5:0A:3D:AA:96:2F:1C:B7:75:B4:59:67:01:51:6A:0A:C1 Certificate issuer: /CN=A915B373/serialNumber=8C99F2E50A3DAA962F1CB775B4596701516A0AC1 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft Manifest number: 0114 Signing time: Sun 19 May 2024 05:19:59 +0000 Manifest this update: Sun 19 May 2024 05:19:59 +0000 Manifest next update: Sun 26 May 2024 05:19:59 +0000 Files and hashes: 1: jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl (hash: 0hifp5yIAmLz3PU1vAo2Y5q5cG7Y8U64mx1ZhaU3m9g=) 2: 5020EAB4771611EDB65FBF71C4F9AE02.roa (hash: ezVWqt4lKiKasE2xngP4ghkwOjGorI9YBOEqUBWnhsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B373/serialNumber=8C99F2E50A3DAA962F1CB775B4596701516A0AC1 Validity Not Before: May 19 05:19:59 2024 GMT Not After : May 26 05:19:59 2024 GMT Subject: CN=66498bff-c5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:99:d8:a5:36:3d:fe:c3:74:f9:74:ce:be: e6:dc:24:5f:0e:33:f8:7f:a5:c5:a5:cf:73:15:81: 29:85:57:2f:35:8f:04:9d:c6:7c:dd:ad:be:70:66: b9:bd:d9:35:25:86:a9:c0:21:dd:be:9d:89:79:a9: 03:34:82:36:96:ce:86:d3:af:af:43:df:bc:93:13: 05:19:66:9d:ec:a8:e8:7f:a7:3b:65:b0:ae:52:7c: 3c:1c:93:5e:91:39:cb:38:86:a3:b1:2a:47:f1:4b: 9a:65:a1:69:af:0b:e3:f9:9e:c8:98:29:ff:98:49: b1:73:ba:ea:ea:c1:4e:6e:53:04:b6:ea:d5:32:64: b8:f6:bc:94:9a:22:91:fc:a9:89:23:24:50:b7:f7: 1c:b5:d9:78:6c:bc:73:2f:04:5f:eb:0b:a2:8d:f8: 7e:7a:5e:b0:f6:06:4e:c2:59:5d:ae:2c:45:49:fc: 7e:77:fb:db:9d:96:7f:f4:98:0e:43:3a:d4:58:8f: ac:5f:5b:2d:df:bc:b9:95:cf:54:41:b8:c6:e1:59: 02:71:ad:cf:c0:5f:51:c4:91:4a:13:8f:6c:91:8a: 99:b3:99:91:c4:03:56:4c:a4:9f:7b:28:b6:dc:7e: 85:75:b0:cd:76:63:07:03:4f:0a:90:7f:50:fb:f3: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:AD:D8:33:A7:00:B7:81:93:5B:C0:42:6C:E8:C3:58:31:5D:40 X509v3 Authority Key Identifier: keyid:8C:99:F2:E5:0A:3D:AA:96:2F:1C:B7:75:B4:59:67:01:51:6A:0A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJny5Qo9qpYvHLd1tFlnAVFqCsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B373/6372E5CA6E2611EDB0794F6FC4F9AE02/jJny5Qo9qpYvHLd1tFlnAVFqCsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4e:01:85:58:e2:66:29:09:56:51:93:34:f5:b3:63:fc:e8: 36:73:7a:36:ac:94:bd:96:6b:f8:fb:83:8e:44:2a:b5:30:70: 87:e2:6c:c4:fb:40:a8:b7:7d:16:96:50:6d:a0:b7:9d:b8:d6: 6b:09:21:5a:fd:17:16:1d:4f:15:05:6c:92:eb:70:58:b8:da: 04:13:97:cd:d6:04:2a:0f:2e:d8:fa:a3:e2:a2:79:a8:e4:c7: 9e:a3:d0:f9:fb:57:a7:a9:e5:9f:b3:e3:75:b3:90:3b:34:79: 8f:13:6b:d2:72:5a:f0:81:79:b1:3e:10:e5:54:13:0c:26:cb: 1e:02:58:2d:be:2f:a9:e7:b9:ff:eb:bb:73:bf:24:d1:5e:66: f8:d7:4e:72:01:6d:3a:6a:9b:99:07:62:e1:18:59:f8:9a:ea: c2:69:e4:91:5d:c7:6f:e6:de:c0:9c:65:3f:cb:cd:5a:c3:8c: dd:ef:3f:0e:10:1a:99:c1:c5:86:de:88:fd:c0:37:aa:b0:8f: dc:b7:1f:04:c4:14:f7:9f:e3:03:8f:f4:4c:28:eb:20:dc:38: 9d:13:24:57:1f:85:39:b0:44:d5:31:c1:d1:d3:18:1b:91:b3: 8d:1d:29:57:84:34:c1:72:55:95:17:72:09:93:ca:8d:2a:f0: 14:bd:cf:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNzMxMTAvBgNVBAUTKDhDOTlGMkU1MEEzREFBOTYyRjFDQjc3NUI0NTk2NzAx NTE2QTBBQzEwHhcNMjQwNTE5MDUxOTU5WhcNMjQwNTI2MDUxOTU5WjAYMRYwFAYD VQQDEw02NjQ5OGJmZi1jNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusKZ2KU2Pf7DdPl0zr7m3CRfDjP4f6XFpc9zFYEphVcvNY8EncZ83a2+cGa5 vdk1JYapwCHdvp2JeakDNII2ls6G06+vQ9+8kxMFGWad7Kjof6c7ZbCuUnw8HJNe kTnLOIajsSpH8UuaZaFprwvj+Z7ImCn/mEmxc7rq6sFOblMEturVMmS49ryUmiKR /KmJIyRQt/cctdl4bLxzLwRf6wuijfh+el6w9gZOwlldrixFSfx+d/vbnZZ/9JgO QzrUWI+sX1st37y5lc9UQbjG4VkCca3PwF9RxJFKE49skYqZs5mRxANWTKSfeyi2 3H6FdbDNdmMHA08KkH9Q+/MJ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCszrdgz pwC3gZNbwEJs6MNYMV1AMB8GA1UdIwQYMBaAFIyZ8uUKPaqWLxy3dbRZZwFRagrB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM3My82MzcyRTVDQTZF MjYxMUVEQjA3OTRGNkZDNEY5QUUwMi9qSm55NVFvOXFwWXZITGQxdEZsbkFWRnFD c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKbnk1UW85cXBZdkhMZDF0RmxuQVZGcUNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM3My82MzcyRTVDQTZFMjYxMUVEQjA3OTRGNkZDNEY5QUUwMi9qSm55NVFvOXFw WXZITGQxdEZsbkFWRnFDc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpTgGFWOJmKQlWUZM09bNj/Og2c3o2rJS9lmv4+4OORCq1MHCH4mzE +0Cot30WllBtoLeduNZrCSFa/RcWHU8VBWyS63BYuNoEE5fN1gQqDy7Y+qPionmo 5Meeo9D5+1enqeWfs+N1s5A7NHmPE2vSclrwgXmxPhDlVBMMJsseAlgtvi+p57n/ 67tzvyTRXmb4105yAW06apuZB2LhGFn4murCaeSRXcdv5t7AnGU/y81aw4zd7z8O EBqZwcWG3oj9wDeqsI/ctx8ExBT3n+MDj/RMKOsg3DidEyRXH4U5sETVMcHR0xgb kbONHSlXhDTBclWVF3IJk8qNKvAUvc9j -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org