$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: pdSEm/4cHtn9XTtGV2BYPgHpVpGzJ5R/QnijfZTiOtg= Subject key identifier: 28:01:21:7F:77:6D:FA:11:85:85:49:5A:7F:C2:FA:87:52:52:04:28 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 43 Signing time: Sun 19 May 2024 08:08:09 +0000 Manifest this update: Sun 19 May 2024 08:08:09 +0000 Manifest next update: Sun 26 May 2024 08:08:09 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: opnN9qndQIAzyJuZQx+dDIe1icB6FB9R8nRp6kXa3G8=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: 2Qp1SI969/cvH0eoHeDe0WIkcYgdHLLjQ51WxIZ/bQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: May 19 08:08:09 2024 GMT Not After : May 26 08:08:09 2024 GMT Subject: CN=6649b369-1528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:35:08:a8:4f:12:d0:26:81:bf:f1:71:a6: f2:62:72:a2:13:78:c9:4f:5b:f4:ab:59:bf:c0:d3: 99:7b:1a:68:01:e4:2d:81:f9:68:97:f6:60:3b:ff: 6b:bc:fa:0c:a6:82:07:0a:e3:4f:ad:37:d0:69:8f: 0f:51:43:6a:36:57:54:3e:c6:65:36:61:9b:43:6c: f6:ed:93:1c:f2:70:cd:b6:fc:49:2d:12:74:88:b5: 3b:f3:08:1b:e2:73:1a:b8:cd:14:ba:5c:85:bb:e0: db:46:37:28:ae:26:b6:05:0c:b5:70:1c:81:ad:d0: e4:09:d7:03:49:15:73:fb:f0:30:63:90:ae:11:b7: a7:a2:fc:eb:d4:1c:39:66:8a:c0:a1:a7:f0:cc:06: 7d:85:d9:a4:90:ac:55:c7:82:53:6c:20:14:50:be: 74:25:f9:6c:e5:c0:ba:35:38:6e:a4:77:43:a3:27: 2d:e3:2a:36:9c:3e:9a:88:99:38:7a:b7:42:ce:80: 70:b5:eb:6c:0f:bb:0b:0e:65:2c:4d:a4:e8:63:30: d9:97:90:4d:ea:7a:2e:b8:cc:7b:d2:9b:f4:4b:f6: cf:9b:98:d2:25:e5:91:05:b3:62:da:c4:7c:d8:8d: 76:ea:e1:ec:ba:ec:64:76:62:28:83:22:1c:77:56: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:21:7F:77:6D:FA:11:85:85:49:5A:7F:C2:FA:87:52:52:04:28 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7c:f4:81:fd:a5:e8:74:89:6e:db:45:7e:8b:c7:49:c6:d4: 64:52:1c:b1:ab:3a:ef:fb:86:aa:34:1a:f4:f2:66:52:a4:85: 72:cb:61:56:58:df:d4:5a:bc:df:95:3c:54:f0:8d:51:56:f1: 84:f8:35:45:88:90:a1:f8:da:3b:33:86:ed:e1:12:09:d1:ee: be:07:c3:af:0c:11:25:56:5a:31:35:73:2a:d4:99:5b:dc:da: d1:54:8a:e7:f5:c5:69:9d:6c:9b:07:17:26:05:5f:6b:30:47: 5a:93:18:fd:e2:63:59:df:88:c2:b6:e3:84:b2:9f:c6:b5:5d: a6:58:72:fc:3d:c9:2a:95:83:74:a3:f9:4b:1c:1c:64:d3:9c: 4e:4f:21:fe:26:98:de:2c:97:25:39:8b:8f:3b:9f:97:1d:f7: 21:1f:53:13:51:2a:89:6c:c4:0c:39:43:6f:b8:0a:68:cc:6f: 5b:be:3d:1c:5f:99:bb:e9:b1:d2:46:b2:7c:04:f8:90:6a:c9: 45:21:28:ea:a0:95:96:43:44:94:1a:f5:9f:5a:f0:80:8e:24: 63:54:da:f5:b0:b6:70:fc:e1:45:dd:65:01:5a:33:3d:70:0a: da:b7:bf:ad:09:af:e4:54:c9:0b:c4:69:85:61:74:d1:61:67: 34:84:53:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERBRjExMC8GA1UEBRMoMjRCQTI0NDQ0OTQyNzMwRjZBRjJCMDlDQjcyM0U1Qzk2 MzcwRkI4QjAeFw0yNDA1MTkwODA4MDlaFw0yNDA1MjYwODA4MDlaMBgxFjAUBgNV BAMTDTY2NDliMzY5LTE1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSrTUIqE8S0CaBv/FxpvJicqITeMlPW/SrWb/A05l7GmgB5C2B+WiX9mA7/2u8 +gymggcK40+tN9Bpjw9RQ2o2V1Q+xmU2YZtDbPbtkxzycM22/EktEnSItTvzCBvi cxq4zRS6XIW74NtGNyiuJrYFDLVwHIGt0OQJ1wNJFXP78DBjkK4Rt6ei/OvUHDlm isChp/DMBn2F2aSQrFXHglNsIBRQvnQl+WzlwLo1OG6kd0OjJy3jKjacPpqImTh6 t0LOgHC162wPuwsOZSxNpOhjMNmXkE3qei64zHvSm/RL9s+bmNIl5ZEFs2LaxHzY jXbq4ey67GR2YiiDIhx3VikbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKAEhf3dt +hGFhUlaf8L6h1JSBCgwHwYDVR0jBBgwFoAUJLokRElCcw9q8rCctyPlyWNw+4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwREFGL0MyREU2QUU0QjUz MjExRUVCMUMxQkY0REM0RjlBRTAyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkxva1JFbENjdzlxOHJDY3R5UGx5V053LTRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw REFGL0MyREU2QUU0QjUzMjExRUVCMUMxQkY0REM0RjlBRTAyL0pMb2tSRWxDY3c5 cThyQ2N0eVBseVdOdy00cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACl89IH9peh0iW7bRX6Lx0nG1GRSHLGrOu/7hqo0GvTyZlKkhXLLYVZY 39RavN+VPFTwjVFW8YT4NUWIkKH42jszhu3hEgnR7r4Hw68MESVWWjE1cyrUmVvc 2tFUiuf1xWmdbJsHFyYFX2swR1qTGP3iY1nfiMK244Syn8a1XaZYcvw9ySqVg3Sj +UscHGTTnE5PIf4mmN4slyU5i487n5cd9yEfUxNRKolsxAw5Q2+4CmjMb1u+PRxf mbvpsdJGsnwE+JBqyUUhKOqglZZDRJQa9Z9a8ICOJGNU2vWwtnD84UXdZQFaMz1w Ctq3v60Jr+RUyQvEaYVhdNFhZzSEUyU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org