$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: Mk2MXXiXp5bs4Uu0+J4w8fl6+5lIrAbc5+lNhVRfCJI= Subject key identifier: 4E:DF:BD:61:86:4E:C5:FD:8E:D7:3B:E6:A0:27:B6:3A:09:EE:29:26 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0773 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 0766 Signing time: Sat 18 May 2024 22:17:40 +0000 Manifest this update: Sat 18 May 2024 22:17:39 +0000 Manifest next update: Sat 25 May 2024 22:17:39 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: ADyeguhDt7EWnJd+vQSCQ29i7LPWtv0ijKpTRp93Zh0=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: 55v8+5WnNCdQgy/pYZyJsyT33va4H3HoMwf1KQsvvdg=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: S9nY3Sl7EDqBHlCNRNgF0IQF6K39qge4nOXqDi55XVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1907 (0x773) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: May 18 22:17:39 2024 GMT Not After : May 25 22:17:39 2024 GMT Subject: CN=66492903-a39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:87:57:bb:56:ce:1a:47:b2:4a:c2:90:33: 2b:00:48:89:fa:b5:c3:9b:b5:b0:6a:34:b1:0c:b7: d5:a6:54:a9:b8:63:83:de:32:a0:40:de:0d:a9:ff: 7c:e7:9f:a8:38:e5:5f:55:f5:00:b3:5b:96:e5:f6: 53:1b:15:c4:fb:b3:6b:bd:86:7c:65:1b:bb:5c:f8: 9d:87:46:f2:8f:b2:f3:26:e7:5b:6d:bd:42:d6:81: 60:46:b9:ba:62:ec:5a:b1:b2:41:5f:f1:e7:70:c4: b2:81:0f:11:69:7c:8e:13:31:00:cd:74:a9:0c:dd: 51:55:86:e1:0e:df:63:10:aa:01:83:a3:fd:17:0e: 78:c7:3f:86:0a:6b:4d:4c:df:8a:fc:24:d3:de:8a: 68:15:4a:26:ec:0c:f5:00:38:64:6a:4c:91:da:6f: 71:df:15:1d:7b:7b:3a:8b:33:ab:f6:a6:5a:61:7a: 6d:c2:72:50:4e:33:75:dc:b0:2d:90:8d:29:77:85: 4b:9f:31:09:aa:a6:d6:ed:8c:e9:91:ee:3c:2a:4a: e8:1b:33:11:50:ab:86:ae:30:7a:b2:41:d2:19:79: 85:84:25:32:51:f4:ae:93:c2:6c:58:84:09:66:0b: 5d:39:04:8a:1b:64:fd:aa:bf:d8:97:9c:a8:92:1c: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DF:BD:61:86:4E:C5:FD:8E:D7:3B:E6:A0:27:B6:3A:09:EE:29:26 X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:25:78:75:53:94:51:40:18:1a:c7:58:e4:1f:d9:30:ba: 21:eb:70:1d:6d:6c:43:82:c4:4e:7b:d5:c4:89:59:cf:f6:bc: 10:c7:6b:bc:e1:bf:21:de:95:f8:50:c9:f2:31:d0:e0:b4:f5: 0c:29:c9:fe:a3:88:68:cd:58:98:82:de:a2:5a:c0:be:87:b4: 08:47:4c:44:5b:49:87:91:a6:9a:1a:ba:7b:a9:9b:ee:0e:ee: 2f:61:3c:e9:79:c4:0a:ef:6d:ed:e6:7b:c9:6f:b3:8e:12:b4: f7:b2:ee:81:de:22:de:3e:e6:38:d0:84:df:ae:a6:2a:09:ef: c9:2b:61:2c:1f:71:dc:3b:26:f9:59:5f:7a:4e:9e:b0:2f:8b: a1:ea:2e:42:37:b5:80:53:47:73:0f:94:9e:04:2a:19:00:cd: e3:c2:b2:c6:d5:c7:0e:c9:c4:0f:ea:ef:4e:a3:39:1d:fd:c0: a4:67:a5:90:5a:c3:60:17:e8:80:e0:1e:64:86:8c:88:d5:28: cc:fe:79:71:81:b4:ee:14:99:84:a4:20:bc:a0:ed:cb:ad:d8: c1:c4:50:3e:19:a8:74:7d:aa:14:c2:51:ed:a2:16:fd:19:29: 8d:bc:1a:87:72:5f:5f:9b:37:06:f1:2e:bd:c2:de:21:3d:90: 2c:9c:5a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjQwNTE4MjIxNzM5WhcNMjQwNTI1MjIxNzM5WjAYMRYwFAYD VQQDEw02NjQ5MjkwMy1hMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdqHV7tWzhpHskrCkDMrAEiJ+rXDm7WwajSxDLfVplSpuGOD3jKgQN4Nqf98 55+oOOVfVfUAs1uW5fZTGxXE+7NrvYZ8ZRu7XPidh0byj7LzJudbbb1C1oFgRrm6 YuxasbJBX/HncMSygQ8RaXyOEzEAzXSpDN1RVYbhDt9jEKoBg6P9Fw54xz+GCmtN TN+K/CTT3opoFUom7Az1ADhkakyR2m9x3xUde3s6izOr9qZaYXptwnJQTjN13LAt kI0pd4VLnzEJqqbW7Yzpke48KkroGzMRUKuGrjB6skHSGXmFhCUyUfSuk8JsWIQJ ZgtdOQSKG2T9qr/Yl5yokhweKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7fvWGG TsX9jtc75qAntjoJ7ikmMB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOyV4dVOUUUAYGsdY5B/ZMLoh63AdbWxDgsROe9XEiVnP9rwQx2u8 4b8h3pX4UMnyMdDgtPUMKcn+o4hozViYgt6iWsC+h7QIR0xEW0mHkaaaGrp7qZvu Du4vYTzpecQK723t5nvJb7OOErT3su6B3iLePuY40ITfrqYqCe/JK2EsH3HcOyb5 WV96Tp6wL4uh6i5CN7WAU0dzD5SeBCoZAM3jwrLG1ccOycQP6u9Oozkd/cCkZ6WQ WsNgF+iA4B5khoyI1SjM/nlxgbTuFJmEpCC8oO3LrdjBxFA+Gah0faoUwlHtohb9 GSmNvBqHcl9fmzcG8S69wt4hPZAsnFoA -----END CERTIFICATE-----Generated at Sun May 19 00:16:14 2024 by rpki-client on console-fra.rpki-client.org