$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft File: lCJM-heqoN5UOrYQifwdOdGZDj4.mft (raw, json) Hash identifier: lIpqSWnp9W3Rv4y+wYF+zw+C3ppBaqwZcb3Njjgej3E= Subject key identifier: 92:23:AC:04:C1:47:54:E1:0D:8B:F0:08:95:3B:5A:A7:14:3B:E1:56 Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Certificate serial: 2045 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft Manifest number: 2045 Signing time: Sat 18 May 2024 16:18:41 +0000 Manifest this update: Sat 18 May 2024 16:18:40 +0000 Manifest next update: Sat 25 May 2024 16:18:40 +0000 Files and hashes: 1: lCJM-heqoN5UOrYQifwdOdGZDj4.crl (hash: BgQh7chIaLNpXckwCpDgQBDhZpz0cyFrdkGB8vI3QDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8261 (0x2045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E Validity Not Before: May 18 16:18:40 2024 GMT Not After : May 25 16:18:40 2024 GMT Subject: CN=6648d4e0-6075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:63:9b:40:d2:0b:9d:f5:87:33:cd:b8:5d: 7d:03:a9:e8:68:86:c0:98:be:b2:4f:77:4f:39:2f: fe:de:6f:be:11:93:14:ba:67:a0:21:7c:a0:6a:e3: 8a:1a:ed:1f:85:4a:fb:dd:bb:f1:53:83:06:cf:65: c0:17:5d:b3:68:cd:7e:ed:51:0d:6b:b6:3c:5a:f2: d8:34:59:67:38:11:0e:c7:71:33:fa:c3:28:53:3e: d9:e6:fc:0f:ab:62:cb:e7:cf:9d:e8:67:b4:df:7e: 67:49:a1:3d:33:5a:f4:c8:6f:4e:00:68:cd:e3:a6: 4d:88:3a:9b:8e:b2:3c:a4:57:b0:4b:44:2f:3a:3f: 2e:d9:3a:8d:50:da:3c:69:64:67:65:71:9c:2d:f2: 64:cf:df:1b:ef:df:0a:4e:b3:d2:0b:60:42:b4:ee: 87:19:ad:ac:0c:70:e3:67:6f:94:2f:10:20:92:41: f8:b4:87:6a:5b:57:84:4f:86:bc:b5:1a:3d:3e:56: f0:6b:aa:30:92:97:1c:74:6b:55:f0:31:dc:9b:fe: 65:79:57:61:18:1a:b9:a1:b5:10:8c:b0:31:8a:33: 2f:91:f5:f9:ee:b0:2e:14:91:90:f4:7c:51:21:8b: df:24:5d:b3:72:70:68:9e:f1:7a:4f:5b:33:7d:0c: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:AC:04:C1:47:54:E1:0D:8B:F0:08:95:3B:5A:A7:14:3B:E1:56 X509v3 Authority Key Identifier: keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:e6:0e:9f:07:b3:a7:26:1e:a7:72:d4:e0:47:ef:94:e7: 9e:48:f3:95:06:99:9f:dc:cf:89:5b:b2:67:c5:cc:42:ea:e4: ff:14:f6:8d:dd:0a:08:11:26:a4:a2:d9:60:79:d0:d4:c0:2e: a6:d2:c0:1d:76:cb:db:59:a5:2d:d0:7e:c2:f0:23:98:e0:24: a3:63:85:f4:83:64:64:a9:d1:cc:fb:02:92:1b:05:a0:3a:4a: e8:ea:04:37:7f:40:a8:f3:9d:fd:2b:05:85:a2:55:27:9e:25: 96:21:07:17:42:93:5a:5f:a0:4b:7c:ad:b6:15:17:58:12:24: 18:77:15:06:6b:71:6b:69:f4:4a:e9:ea:83:8b:e7:fe:d9:f4: 08:b5:da:a9:cb:23:a4:e5:59:84:24:9f:d3:ca:93:98:f1:98: 3b:ad:02:2e:17:89:83:c3:3d:04:8c:db:db:a3:da:79:a7:05: 4a:27:44:76:0a:73:f7:cd:36:e4:75:e5:05:6b:b6:53:51:90: c9:b7:76:e2:84:e7:57:1e:9c:9c:b3:9f:93:cc:da:30:81:02: da:b4:93:cf:5d:66:5f:74:6c:ea:10:ef:53:14:f4:0c:7c:dd: c4:a2:73:10:4c:6b:ce:3a:2c:91:c3:89:28:cc:fc:1f:fa:82: 6e:e4:2a:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5 RDE5OTBFM0UwHhcNMjQwNTE4MTYxODQwWhcNMjQwNTI1MTYxODQwWjAYMRYwFAYD VQQDEw02NjQ4ZDRlMC02MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LZjm0DSC531hzPNuF19A6noaIbAmL6yT3dPOS/+3m++EZMUumegIXygauOK Gu0fhUr73bvxU4MGz2XAF12zaM1+7VENa7Y8WvLYNFlnOBEOx3Ez+sMoUz7Z5vwP q2LL58+d6Ge0335nSaE9M1r0yG9OAGjN46ZNiDqbjrI8pFewS0QvOj8u2TqNUNo8 aWRnZXGcLfJkz98b798KTrPSC2BCtO6HGa2sDHDjZ2+ULxAgkkH4tIdqW1eET4a8 tRo9Plbwa6owkpccdGtV8DHcm/5leVdhGBq5obUQjLAxijMvkfX57rAuFJGQ9HxR IYvfJF2zcnBonvF6T1szfQxt9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIjrATB R1ThDYvwCJU7WqcUO+FWMB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80RUQyMkZEMkYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9O NVVPcllRaWZ3ZE9kR1pEajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo1OYOnwezpyYep3LU4EfvlOeeSPOVBpmf3M+JW7JnxcxC6uT/FPaN 3QoIESakotlgedDUwC6m0sAddsvbWaUt0H7C8COY4CSjY4X0g2RkqdHM+wKSGwWg Okro6gQ3f0Co8539KwWFolUnniWWIQcXQpNaX6BLfK22FRdYEiQYdxUGa3FrafRK 6eqDi+f+2fQItdqpyyOk5VmEJJ/TypOY8Zg7rQIuF4mDwz0EjNvbo9p5pwVKJ0R2 CnP3zTbkdeUFa7ZTUZDJt3bihOdXHpycs5+TzNowgQLatJPPXWZfdGzqEO9TFPQM fN3EonMQTGvOOiyRw4kozPwf+oJu5Cor -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org