$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: DzxLKhzZtXAkPpcsE/vvdf0dWSwFT1ESd0wHdY1B47k= Subject key identifier: 95:90:BF:F8:E7:78:3C:F0:73:E5:5D:47:04:3D:A9:18:3B:19:12:43 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: AD Signing time: Sun 19 May 2024 06:35:01 +0000 Manifest this update: Sun 19 May 2024 06:35:00 +0000 Manifest next update: Sun 26 May 2024 06:35:00 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: hd3xFcrTTDLa2F6dUW2tzqHFUvyDwFnCMGDlb4sLAqE=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: OHxr2hB7crGU69rLV633zyt9NIU01nRPahke+eb5utU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Validity Not Before: May 19 06:35:00 2024 GMT Not After : May 26 06:35:00 2024 GMT Subject: CN=66499d95-c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:2c:7b:a3:cb:d9:6b:d4:79:0c:ff:f1:b6: 44:7f:e5:2d:33:d7:63:05:48:82:31:55:51:9e:99: 6c:4f:57:a8:db:68:92:07:04:3f:7f:ef:d5:2a:57: 70:a7:2b:5c:37:ac:6c:54:ff:ef:54:31:b7:31:02: 78:00:60:4e:ca:f7:43:13:11:48:5b:02:1f:8d:9f: 59:d8:b3:99:fb:4a:37:6c:03:fb:ac:34:88:ef:79: 30:97:d6:51:41:92:98:d0:e1:87:02:4a:b9:00:f4: ea:69:24:20:97:8a:f2:06:cb:05:8a:6e:ad:00:d0: fd:9d:29:31:0e:34:e2:63:6e:a6:67:fe:37:6b:e1: 6e:b7:10:74:8e:df:62:c2:7b:6f:bc:86:fd:78:7e: ca:f7:74:9d:05:26:ea:7e:3a:c2:85:7a:7f:99:60: 33:d2:6d:96:c2:d2:72:7f:eb:49:6b:4b:8d:cb:2f: 55:b9:37:c9:0e:e8:9a:74:4d:71:ab:8c:14:90:17: a8:aa:d0:69:5b:72:b4:57:a5:a9:21:25:27:d3:00: 20:94:cd:fa:80:53:a4:37:60:3a:79:04:ff:3a:32: 06:e3:27:b8:6f:81:05:0c:dd:57:da:5e:6f:ff:12: 85:c9:d1:67:5c:3e:29:47:43:75:e9:12:89:65:7b: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:90:BF:F8:E7:78:3C:F0:73:E5:5D:47:04:3D:A9:18:3B:19:12:43 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7c:2b:54:a9:be:51:ef:e3:f0:37:8e:3e:84:6c:3c:f8:84: fd:3f:12:c1:8a:19:01:6a:03:a1:a2:13:04:fc:c6:61:d4:bf: b0:a9:c2:2b:a7:39:a9:26:ec:33:91:ca:76:37:73:a6:66:91: 49:e4:49:3b:00:9f:15:42:4a:b2:4d:de:15:6d:f3:1b:73:91: de:18:e8:a2:e6:f3:5f:c8:3c:d0:d8:bc:7f:f5:d4:64:63:a3: 5e:b6:28:0b:9f:eb:ed:66:71:8f:8d:5c:6a:9e:f4:d4:9a:3c: d9:28:82:9d:65:5a:db:81:7e:6a:de:a3:be:ce:80:3c:57:55: b1:a2:18:0a:a9:83:92:7a:96:5c:8a:53:b6:15:ff:32:a1:76: 49:31:3f:50:ad:20:2a:55:59:83:83:f8:27:19:17:70:28:99: 3c:61:fc:fa:72:fa:27:8d:26:32:02:bf:63:8f:16:ba:20:e6: 05:69:63:ee:aa:a0:28:99:4f:58:4b:76:19:29:b7:2e:f4:83: 35:bf:43:e5:4c:1d:58:b5:99:24:b5:40:6e:d1:e1:40:b4:5f: 1c:47:7f:83:7b:8a:4b:ac:4e:f2:e5:48:0e:7e:ba:36:13:0c: be:6b:8d:4a:43:dc:54:f9:8e:93:0d:d3:57:59:9b:87:22:78: e2:ba:e6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjQwNTE5MDYzNTAwWhcNMjQwNTI2MDYzNTAwWjAYMRYwFAYD VQQDEw02NjQ5OWQ5NS1jNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuAse6PL2WvUeQz/8bZEf+UtM9djBUiCMVVRnplsT1eo22iSBwQ/f+/VKldw pytcN6xsVP/vVDG3MQJ4AGBOyvdDExFIWwIfjZ9Z2LOZ+0o3bAP7rDSI73kwl9ZR QZKY0OGHAkq5APTqaSQgl4ryBssFim6tAND9nSkxDjTiY26mZ/43a+FutxB0jt9i wntvvIb9eH7K93SdBSbqfjrChXp/mWAz0m2WwtJyf+tJa0uNyy9VuTfJDuiadE1x q4wUkBeoqtBpW3K0V6WpISUn0wAglM36gFOkN2A6eQT/OjIG4ye4b4EFDN1X2l5v /xKFydFnXD4pR0N16RKJZXvEuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWQv/jn eDzwc+VdRwQ9qRg7GRJDMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCfCtUqb5R7+PwN44+hGw8+IT9PxLBihkBagOhohME/MZh1L+wqcIr pzmpJuwzkcp2N3OmZpFJ5Ek7AJ8VQkqyTd4VbfMbc5HeGOii5vNfyDzQ2Lx/9dRk Y6NetigLn+vtZnGPjVxqnvTUmjzZKIKdZVrbgX5q3qO+zoA8V1WxohgKqYOSepZc ilO2Ff8yoXZJMT9QrSAqVVmDg/gnGRdwKJk8Yfz6cvonjSYyAr9jjxa6IOYFaWPu qqAomU9YS3YZKbcu9IM1v0PlTB1YtZkktUBu0eFAtF8cR3+De4pLrE7y5UgOfro2 Ewy+a41KQ9xU+Y6TDdNXWZuHInjiuuYz -----END CERTIFICATE-----Generated at Sun May 19 08:25:05 2024 by rpki-client on console-ams.rpki-client.org