$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: Md9duKtOf1ruxg4JDugsp/wDq/r2IBZZPS/7iu7MzaY= Subject key identifier: 97:95:B8:8F:5E:30:3D:1A:62:B5:3B:25:0D:17:21:5A:B6:18:51:6E Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: BF Signing time: Sun 19 May 2024 06:22:43 +0000 Manifest this update: Sun 19 May 2024 06:22:43 +0000 Manifest next update: Sun 26 May 2024 06:22:43 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: MoHaa9uIZDyVk5VvjuAsouvdi4PL6DrKD2mDXDVgvhM=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: IYx1TDG7UVS4DKT/gzqa1jCNyLGkM4V/xsDoUQ0DioM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: May 19 06:22:43 2024 GMT Not After : May 26 06:22:43 2024 GMT Subject: CN=66499ab3-8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:b5:9f:20:e1:50:c7:76:46:16:91:16:48: 6c:dc:17:1b:c5:eb:18:9c:ab:f1:1d:3a:db:5f:1b: 1d:e7:39:0d:72:80:09:68:df:be:d2:e2:f9:d5:16: dc:51:be:bf:0d:6b:69:f4:2d:5b:c4:ed:9a:29:c7: a6:aa:f8:ec:7b:c5:22:af:ed:fa:fe:51:ab:89:df: a1:f3:1f:00:37:4e:6c:4d:10:38:30:07:ea:83:67: 79:c3:de:af:95:e2:91:23:6e:bd:f7:54:d3:10:2c: 71:c3:fd:c1:55:8d:c1:de:8a:25:58:2c:52:13:ab: cf:3a:65:b7:8b:1d:84:01:ac:52:93:60:44:2b:ad: 00:f6:f3:67:d7:3d:9c:84:d1:ee:a4:d1:5c:fd:59: c0:c9:5e:6c:ea:98:be:f7:b2:c9:c8:f4:80:4e:72: 4c:41:e0:ca:68:28:cd:ad:5d:13:2d:30:91:87:07: 53:49:76:52:f8:eb:e3:4f:c1:50:71:f7:65:74:3e: 17:86:d9:d0:6d:1f:62:7b:05:77:27:2f:3e:3c:66: 9f:d2:f5:70:d4:61:45:7f:af:c2:27:58:64:02:f1: 6d:c8:6e:d7:e5:73:ce:63:15:29:5c:78:02:63:35: 1c:09:52:dc:c1:aa:38:cf:5a:eb:90:da:62:8e:34: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:B8:8F:5E:30:3D:1A:62:B5:3B:25:0D:17:21:5A:B6:18:51:6E X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:6f:34:1c:f2:59:86:c4:03:37:df:b5:72:8d:72:0f:70: 0a:25:dc:7f:25:d7:4e:a0:dc:ff:5f:82:47:3d:37:0e:5e:19: e9:ed:5a:80:04:f2:b3:94:02:d9:59:e9:22:7d:a9:1f:05:58: 06:65:5c:6f:ed:6f:46:15:de:1b:a2:5a:3c:87:fb:d4:31:6e: e4:51:7c:5c:0d:04:a8:23:6c:cd:63:ed:f2:2d:33:b0:a1:22: f1:96:96:81:58:4a:53:bd:a3:bb:e9:5f:ee:f2:1c:d2:5a:02: 90:1e:01:3a:1c:a6:66:c4:74:ef:12:bf:44:a5:76:fc:88:53: 80:cb:c9:94:98:4d:a6:bd:84:3c:b1:a6:ea:20:b1:a5:44:24: 43:c6:35:24:f5:50:06:3e:84:80:49:fd:78:64:9c:9b:d7:12: 06:8f:ed:e2:c0:a3:40:49:81:c1:d8:68:f6:0d:8c:99:49:0e: 48:fe:55:ac:7c:d9:32:bc:9e:00:e9:10:c1:e4:16:1e:d6:c0: ae:1e:1c:f5:26:4f:cb:b9:f9:02:66:cb:3a:a0:4b:dd:10:fa: c1:a9:42:10:c6:fc:a5:c4:dc:45:2b:a7:19:64:0e:8e:a0:43: c1:c0:67:70:77:fa:e9:89:c4:3f:e3:6b:55:44:ba:24:cb:ad: 8a:bf:42:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjQwNTE5MDYyMjQzWhcNMjQwNTI2MDYyMjQzWjAYMRYwFAYD VQQDEw02NjQ5OWFiMy04YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Pu1nyDhUMd2RhaRFkhs3BcbxesYnKvxHTrbXxsd5zkNcoAJaN++0uL51Rbc Ub6/DWtp9C1bxO2aKcemqvjse8Uir+36/lGrid+h8x8AN05sTRA4MAfqg2d5w96v leKRI26991TTECxxw/3BVY3B3oolWCxSE6vPOmW3ix2EAaxSk2BEK60A9vNn1z2c hNHupNFc/VnAyV5s6pi+97LJyPSATnJMQeDKaCjNrV0TLTCRhwdTSXZS+OvjT8FQ cfdldD4XhtnQbR9iewV3Jy8+PGaf0vVw1GFFf6/CJ1hkAvFtyG7X5XPOYxUpXHgC YzUcCVLcwao4z1rrkNpijjResQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeVuI9e MD0aYrU7JQ0XIVq2GFFuMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTAG80HPJZhsQDN9+1co1yD3AKJdx/JddOoNz/X4JHPTcOXhnp7VqA BPKzlALZWekifakfBVgGZVxv7W9GFd4bolo8h/vUMW7kUXxcDQSoI2zNY+3yLTOw oSLxlpaBWEpTvaO76V/u8hzSWgKQHgE6HKZmxHTvEr9EpXb8iFOAy8mUmE2mvYQ8 sabqILGlRCRDxjUk9VAGPoSASf14ZJyb1xIGj+3iwKNASYHB2Gj2DYyZSQ5I/lWs fNkyvJ4A6RDB5BYe1sCuHhz1Jk/LufkCZss6oEvdEPrBqUIQxvylxNxFK6cZZA6O oEPBwGdwd/rpicQ/42tVRLoky62Kv0Lu -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org