$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: 99XnELMe1pWVAAFOm9Xq2IK/y8mJQhDlrG5OS2QUafw= Subject key identifier: 37:3A:A7:01:29:8B:71:2E:B4:BD:02:F4:36:78:C8:62:CF:92:CE:7B Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 242F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 241B Signing time: Sat 18 May 2024 16:05:31 +0000 Manifest this update: Sat 18 May 2024 16:05:30 +0000 Manifest next update: Sat 25 May 2024 16:05:30 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: 6xZ8ObYAfRFYdI4CA0Hgea0BoMrk6C9dqB6A5ihsdjI=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: 0733UsCseVDe/8K7ETFC6o7bBdf81QYokPJegssCSLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9263 (0x242f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: May 18 16:05:30 2024 GMT Not After : May 25 16:05:30 2024 GMT Subject: CN=6648d1ca-9ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:eb:8f:3f:ed:38:1a:47:eb:75:5f:b9:28: 92:63:92:3d:5f:8c:37:88:bf:c4:5d:d6:2f:93:c6: c8:2a:1e:2d:04:63:5f:c9:4a:4a:a3:e4:14:95:86: 00:ff:81:85:20:e2:bf:5d:c9:ed:09:3e:fe:5e:de: fc:38:d6:d0:18:88:ea:4d:e1:11:19:2f:eb:74:03: d5:bf:cb:5f:27:c2:f3:84:f7:e7:6f:8e:49:8b:4b: 6a:9c:ac:a3:91:28:f8:e7:8b:68:8c:ba:fe:d5:eb: 6e:ed:f4:5c:3c:cb:0a:3d:4f:fa:90:c4:09:74:4a: a8:f6:be:17:fa:be:0a:d0:32:86:d9:e3:91:62:ea: b7:c8:8f:b5:fc:ba:c2:19:6b:7f:78:5a:e2:7e:60: cd:b4:c1:29:59:9d:1c:20:a0:b3:39:fd:90:7f:df: a0:6d:be:d3:cf:e6:69:40:a5:a5:7f:e7:cc:0b:9a: 1a:9d:43:8f:58:4c:84:8e:70:c6:34:ef:21:c2:1c: 9b:ab:c3:bf:0f:9a:e8:7c:e0:79:30:6f:03:2f:12: 56:47:7d:91:c8:41:82:0e:77:6c:38:43:2f:d5:19: 05:1b:da:34:98:11:3c:8e:91:36:6e:fc:79:c1:fa: 56:4c:17:35:3d:bb:63:a3:5c:0b:71:46:ef:b6:a4: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3A:A7:01:29:8B:71:2E:B4:BD:02:F4:36:78:C8:62:CF:92:CE:7B X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ac:47:bd:88:46:61:ce:16:c5:92:02:7f:b7:08:01:67:5f: a4:95:73:3d:4b:64:66:c8:34:3b:5d:64:b1:59:fc:70:4b:94: 2a:e0:58:d4:9e:0d:88:5e:cc:51:4a:a3:b6:14:66:ad:41:39: 01:36:58:5c:7b:fe:8d:89:d2:74:f5:d2:99:4e:23:3c:b3:be: ae:fc:5d:46:bb:a1:ed:ff:1b:05:38:fb:26:6d:42:d6:c2:07: da:23:e7:36:cd:d2:14:1b:d3:4e:5b:e3:c6:2c:fe:28:a1:a1: a3:92:f6:fd:e7:a3:9a:e2:d0:ec:6b:cf:e7:bd:3b:58:bb:65: 50:bc:74:61:ab:f8:67:56:bc:2e:54:ad:46:99:28:5d:94:ea: f0:33:77:1a:2e:b7:ff:17:7b:23:65:0f:8e:57:a8:49:22:c8: df:c7:0a:46:2c:7a:70:28:90:3b:a9:ca:9e:86:c3:af:0b:fc: 4d:6f:6a:3e:86:3f:89:be:03:10:11:12:c3:7b:16:69:c0:4a: 3a:a9:3f:07:6d:e0:3d:e6:cc:55:ae:d0:14:0b:99:68:54:03: 05:9a:38:40:59:c2:7a:75:74:54:bf:76:b9:3d:42:df:a0:48: 3b:55:12:76:81:d4:98:12:89:69:fc:55:ef:00:e1:04:b3:7b: e2:31:f1:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjQwNTE4MTYwNTMwWhcNMjQwNTI1MTYwNTMwWjAYMRYwFAYD VQQDEw02NjQ4ZDFjYS05ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7Prjz/tOBpH63VfuSiSY5I9X4w3iL/EXdYvk8bIKh4tBGNfyUpKo+QUlYYA /4GFIOK/XcntCT7+Xt78ONbQGIjqTeERGS/rdAPVv8tfJ8LzhPfnb45Ji0tqnKyj kSj454tojLr+1etu7fRcPMsKPU/6kMQJdEqo9r4X+r4K0DKG2eORYuq3yI+1/LrC GWt/eFrifmDNtMEpWZ0cIKCzOf2Qf9+gbb7Tz+ZpQKWlf+fMC5oanUOPWEyEjnDG NO8hwhybq8O/D5rofOB5MG8DLxJWR32RyEGCDndsOEMv1RkFG9o0mBE8jpE2bvx5 wfpWTBc1Pbtjo1wLcUbvtqTjnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc6pwEp i3EutL0C9DZ4yGLPks57MB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyrEe9iEZhzhbFkgJ/twgBZ1+klXM9S2RmyDQ7XWSxWfxwS5Qq4FjU ng2IXsxRSqO2FGatQTkBNlhce/6NidJ09dKZTiM8s76u/F1Gu6Ht/xsFOPsmbULW wgfaI+c2zdIUG9NOW+PGLP4ooaGjkvb956Oa4tDsa8/nvTtYu2VQvHRhq/hnVrwu VK1GmShdlOrwM3caLrf/F3sjZQ+OV6hJIsjfxwpGLHpwKJA7qcqehsOvC/xNb2o+ hj+JvgMQERLDexZpwEo6qT8HbeA95sxVrtAUC5loVAMFmjhAWcJ6dXRUv3a5PULf oEg7VRJ2gdSYEolp/FXvAOEEs3viMfE2 -----END CERTIFICATE-----Generated at Sat May 18 17:20:05 2024 by rpki-client on console-ams.rpki-client.org