$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: JoWi9QMFNRt1fkfaKpmtJ25v1Biz+ur+uAg9AHfRmq4= Subject key identifier: 6B:36:4B:6F:3E:D6:D8:65:41:E9:4B:EC:28:D7:50:12:D7:4D:4B:E0 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 52 Signing time: Sun 19 May 2024 07:56:31 +0000 Manifest this update: Sun 19 May 2024 07:56:30 +0000 Manifest next update: Sun 26 May 2024 07:56:30 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: jtNFeCkh0am/BqgCZKPxnPOTkk/da0X2qLw/IRb5D14=) 2: FB4C89109B6011EEBD830E11C4F9AE02.roa (hash: a5qFtFKdSxdVlGp8/0f8359/gZ9YcaM4vKpWk0sgGCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: May 19 07:56:30 2024 GMT Not After : May 26 07:56:30 2024 GMT Subject: CN=6649b0af-09f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:79:2a:eb:18:a5:7f:00:33:77:cd:41:90: 66:77:a7:c7:5d:65:20:99:85:e8:c6:a3:26:94:50: f7:68:5e:20:ef:f9:55:25:5e:f9:59:73:65:75:65: d1:9d:dd:7a:b8:73:43:09:1c:ec:a3:9d:fd:5d:d4: 74:76:d2:54:72:16:73:da:38:c2:c1:e4:4d:0e:c3: 32:d2:2c:c1:f3:5a:d8:43:92:17:5f:75:fc:85:7c: 96:d0:41:55:23:e3:03:fa:a2:70:62:43:2f:7e:3b: 8b:35:fc:92:59:2c:62:f2:55:bd:2d:ec:52:c3:4a: 4e:cf:d6:1b:54:55:cc:a9:21:1e:12:92:05:bc:fd: e6:54:57:ee:38:02:0a:e3:c4:f2:11:c6:8a:31:95: 31:a4:f1:1d:e7:71:ca:5d:53:01:e9:6a:d3:70:6e: c8:0c:47:14:d5:be:8a:20:3b:ad:aa:f7:c6:c5:07: 79:d9:f9:40:6b:1d:16:b5:6b:58:aa:2c:42:21:f4: 26:68:fc:6f:ca:b2:5c:34:f5:87:9a:ec:73:25:60: 13:d6:64:63:7a:4e:9c:08:cc:41:a1:ca:1a:ef:16: 72:bb:5c:cc:7c:b8:cf:f1:fe:d8:ae:bf:59:ae:33: 6c:d1:82:fc:e0:ea:ed:4d:0b:89:3f:dd:eb:90:2a: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:4B:6F:3E:D6:D8:65:41:E9:4B:EC:28:D7:50:12:D7:4D:4B:E0 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c8:51:d0:58:d2:fb:cf:17:2c:1d:8c:9f:7a:29:76:1b:96: 30:03:f3:4f:f9:a0:d4:1f:5f:8b:6e:53:ae:8f:b5:94:82:ed: b2:d3:84:cf:d0:0e:b2:eb:c7:7f:b7:ff:c2:0d:05:84:44:6b: 59:81:9f:49:cd:a9:1d:2d:da:2b:cf:29:68:67:9c:f7:49:72: 5a:d3:85:74:ac:2c:2c:81:2d:0d:44:27:42:cc:9d:dd:fd:cc: 8d:6c:6a:22:bb:c5:70:9f:88:00:32:fa:8e:45:7b:7b:8b:19: 23:36:bd:62:fc:38:87:47:ba:6f:26:33:48:a3:cf:97:94:0a: 02:99:48:c3:3b:86:fb:b3:b7:1c:d6:12:8b:de:8b:ca:5c:62: d4:9e:18:11:33:18:83:6d:0d:1a:1b:38:7f:03:3b:c4:56:db: 2b:54:07:f2:5a:ce:76:74:76:4a:fd:28:40:7d:fd:04:d1:90: c1:5a:da:22:73:75:55:3a:66:a0:f5:18:d7:c4:25:19:d3:b7: 8c:3f:fd:99:1e:18:ec:a7:e5:88:83:70:8f:c3:75:f1:f3:64: 1d:a9:7d:91:b4:c9:3e:00:ad:e1:d4:cc:09:34:3e:5e:09:61: 3b:31:32:d7:92:06:a2:d3:35:c3:5b:82:2e:7c:71:44:58:09: 6e:35:32:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTRBMTExMC8GA1UEBRMoMjQ3QjVENkU2MkU0QTQ5RTlERjREQzI0QzMxRUNBNkVE N0E0M0IyODAeFw0yNDA1MTkwNzU2MzBaFw0yNDA1MjYwNzU2MzBaMBgxFjAUBgNV BAMTDTY2NDliMGFmLTA5ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5oXkq6xilfwAzd81BkGZ3p8ddZSCZhejGoyaUUPdoXiDv+VUlXvlZc2V1ZdGd 3Xq4c0MJHOyjnf1d1HR20lRyFnPaOMLB5E0OwzLSLMHzWthDkhdfdfyFfJbQQVUj 4wP6onBiQy9+O4s1/JJZLGLyVb0t7FLDSk7P1htUVcypIR4SkgW8/eZUV+44Agrj xPIRxooxlTGk8R3nccpdUwHpatNwbsgMRxTVvoogO62q98bFB3nZ+UBrHRa1a1iq LEIh9CZo/G/Kslw09Yea7HMlYBPWZGN6TpwIzEGhyhrvFnK7XMx8uM/x/tiuv1mu M2zRgvzg6u1NC4k/3euQKj4LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUazZLbz7W 2GVB6UvsKNdQEtdNS+AwHwYDVR0jBBgwFoAUJHtdbmLkpJ6d9Nwkwx7KbtekOygw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NEExLzc0MDJEOEQ4OUI2 MDExRUU4NkVFMUQxMEM0RjlBRTAyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkh0ZGJtTGtwSjZkOU53a3d4N0tidGVrT3lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NEExLzc0MDJEOEQ4OUI2MDExRUU4NkVFMUQxMEM0RjlBRTAyL0pIdGRibUxrcEo2 ZDlOd2t3eDdLYnRla095Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/IUdBY0vvPFywdjJ96KXYbljAD80/5oNQfX4tuU66PtZSC7bLThM/Q DrLrx3+3/8INBYREa1mBn0nNqR0t2ivPKWhnnPdJclrThXSsLCyBLQ1EJ0LMnd39 zI1saiK7xXCfiAAy+o5Fe3uLGSM2vWL8OIdHum8mM0ijz5eUCgKZSMM7hvuztxzW Eovei8pcYtSeGBEzGINtDRobOH8DO8RW2ytUB/JaznZ0dkr9KEB9/QTRkMFa2iJz dVU6ZqD1GNfEJRnTt4w//ZkeGOyn5YiDcI/DdfHzZB2pfZG0yT4AreHUzAk0Pl4J YTsxMteSBqLTNcNbgi58cURYCW41MtU= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org