$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: mu0QP/E953LcfMacqltJ0tPfYqQRc9hU0/XHdlwHC94= Subject key identifier: 45:62:91:54:26:31:65:3C:89:6C:A8:91:F4:29:C9:7B:79:37:20:C9 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0231 Signing time: Sun 19 May 2024 04:02:56 +0000 Manifest this update: Sun 19 May 2024 04:02:56 +0000 Manifest next update: Sun 26 May 2024 04:02:56 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: ARUZtTbaVi24RgaKxXum312vb53hglfVKipwGM2w+qY=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: uI2iVhse4NRPkVsaBb9fpYUDi8yOrHFRhjYHI177+tY=) 3: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: mCano6KzUueBvfY9Xz4WTDEar7H4dlef5+Le1qM7SBU=) 4: D02495BAE0E111ECBFF27B44C4F9AE02.roa (hash: li/7cAZcUyRrZa9udI5NkYiSxx+zPkhpIRp36t7/UYE=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 5cFE2+DHvyy580H7GLu07rQpzF29u5j14knEntbBKDA=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: Vw3MBjP1RuU5tdxt+beNhLzaUjT0qpNMidEvPuJBqP8=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: ROCn87h+nUYMOh/I3nf6jc72/YgblF40f3uoYcWM1Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: May 19 04:02:56 2024 GMT Not After : May 26 04:02:56 2024 GMT Subject: CN=664979f0-852c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:b6:fb:4f:bd:ba:fd:c2:38:02:99:5c:84: 1c:3e:57:d2:9f:f2:00:41:0c:cc:34:5d:39:f8:0d: ea:05:fd:fb:3f:6c:7e:7e:7c:45:b6:6b:99:54:b6: 15:eb:11:f9:38:9c:4c:b1:3b:d7:ee:e7:87:67:ce: a5:3a:d4:e0:dd:b1:e8:d6:f6:05:a2:f8:6a:65:4d: 96:be:e2:ce:3e:bd:dc:74:51:c5:5e:2e:78:60:56: 65:30:b4:2d:39:95:1f:7c:c6:ce:d0:0c:44:ef:e3: 65:a8:14:5d:5f:39:09:18:bf:ca:ff:9e:bf:05:b7: a0:9d:23:f9:65:3e:61:ea:4c:c8:f2:a0:fa:43:49: b4:44:ac:30:48:85:5f:7a:ce:2b:10:76:2e:9f:0a: c8:32:a0:6a:27:b8:d3:3b:30:79:df:15:cf:32:e0: d2:90:eb:80:20:01:a2:c1:0e:83:f9:39:09:4f:fe: 17:90:6d:1b:b4:7f:a6:7a:e5:80:4f:07:05:bd:3a: c9:aa:7c:9c:3c:d1:2f:c1:e4:05:3a:a2:0a:7d:38: c3:04:12:c4:e5:3d:e6:63:71:d2:6f:11:83:d6:c8: 4f:8c:88:f6:a3:b3:db:94:59:a5:6b:4b:b9:3e:88: d9:cd:b8:a9:a2:fd:b1:cb:d9:1f:26:05:9f:60:f1: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:62:91:54:26:31:65:3C:89:6C:A8:91:F4:29:C9:7B:79:37:20:C9 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9c:44:89:a9:65:0e:88:4b:3f:f1:bf:59:d7:e6:bb:99:9b: 80:8f:71:5c:31:ff:25:2a:aa:6a:54:c0:19:08:88:3e:63:bb: ee:ed:c4:23:df:90:3e:aa:66:ef:12:38:61:97:01:4b:cb:50: 3d:a1:ab:6c:87:94:52:08:a9:55:2f:15:92:99:a4:fe:42:e8: 6c:40:93:0c:2d:16:df:bf:6a:6a:8d:53:f7:22:9f:7a:d5:46: 96:ff:8f:ef:67:c9:b2:98:45:6e:6f:0c:b8:a7:9e:a9:8e:2a: e2:17:10:f8:8a:9e:5a:c4:a9:52:ad:3a:4f:ca:45:b1:5b:40: 8c:86:de:16:46:18:f2:59:2b:07:df:d7:de:52:5d:22:6c:98: 70:b0:14:b6:cc:e6:79:ac:3d:e1:c6:86:2e:11:18:94:37:d7: fd:40:81:51:8e:df:dd:c9:89:99:bf:c2:b8:70:27:fd:94:66: be:ef:58:c2:c5:d9:cb:8c:78:8c:54:33:cb:c3:df:71:42:03: 02:76:79:a7:0f:b2:37:f4:b5:8a:06:15:ed:95:cd:6e:2a:9a: d6:77:fb:06:71:d9:c0:22:57:25:58:2c:28:52:d7:85:66:84: 1e:09:5f:f8:03:97:f5:bd:77:3c:df:d3:d0:4f:74:b3:20:37: bf:ec:83:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjQwNTE5MDQwMjU2WhcNMjQwNTI2MDQwMjU2WjAYMRYwFAYD VQQDEw02NjQ5NzlmMC04NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplu2+0+9uv3COAKZXIQcPlfSn/IAQQzMNF05+A3qBf37P2x+fnxFtmuZVLYV 6xH5OJxMsTvX7ueHZ86lOtTg3bHo1vYFovhqZU2WvuLOPr3cdFHFXi54YFZlMLQt OZUffMbO0AxE7+NlqBRdXzkJGL/K/56/BbegnSP5ZT5h6kzI8qD6Q0m0RKwwSIVf es4rEHYunwrIMqBqJ7jTOzB53xXPMuDSkOuAIAGiwQ6D+TkJT/4XkG0btH+meuWA TwcFvTrJqnycPNEvweQFOqIKfTjDBBLE5T3mY3HSbxGD1shPjIj2o7PblFmla0u5 PojZzbipov2xy9kfJgWfYPGx/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVikVQm MWU8iWyokfQpyXt5NyDJMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3nESJqWUOiEs/8b9Z1+a7mZuAj3FcMf8lKqpqVMAZCIg+Y7vu7cQj 35A+qmbvEjhhlwFLy1A9oatsh5RSCKlVLxWSmaT+QuhsQJMMLRbfv2pqjVP3Ip96 1UaW/4/vZ8mymEVubwy4p56pjiriFxD4ip5axKlSrTpPykWxW0CMht4WRhjyWSsH 39feUl0ibJhwsBS2zOZ5rD3hxoYuERiUN9f9QIFRjt/dyYmZv8K4cCf9lGa+71jC xdnLjHiMVDPLw99xQgMCdnmnD7I39LWKBhXtlc1uKprWd/sGcdnAIlclWCwoUteF ZoQeCV/4A5f1vXc839PQT3SzIDe/7IP4 -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org