$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: LIfTh10rroDXe6VeBe+OY7oLhNTSRiIqaJ2LCEX3a9c= Subject key identifier: 3B:84:77:6B:30:1C:05:75:FE:A2:A9:B9:AF:2F:04:49:BD:A5:8A:9B Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 1301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 12F7 Signing time: Fri 31 May 2024 17:50:08 +0000 Manifest this update: Fri 31 May 2024 17:50:08 +0000 Manifest next update: Fri 07 Jun 2024 17:50:08 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: 3gmB68cOSLdcIrKTFSOuXEvv4ibKG1F8a5J7zLb2fX0=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: gD7hSblOpRT499LH/Yf2BpXTZO30eKU9cZJCj5bNoqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4865 (0x1301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: May 31 17:50:08 2024 GMT Not After : Jun 7 17:50:08 2024 GMT Subject: CN=665a0dd0-ae44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6d:aa:86:fe:2a:9a:bf:5f:15:b8:e1:82:17: df:60:a6:5a:0e:be:91:29:6a:c8:84:cc:7e:1b:06: 36:90:61:39:40:c4:7b:fc:54:57:c5:59:bd:0e:7d: dd:d1:91:b4:c9:e4:f5:7e:5f:21:95:02:af:de:bf: 81:9f:dc:f5:e1:5d:ef:ae:ee:dc:4c:73:c7:14:7e: d9:80:c3:34:1b:1b:d6:be:41:53:80:b0:27:d8:c8: b3:9f:fb:21:ff:42:d8:50:6d:d5:86:94:12:4b:32: 4d:84:b5:4f:6b:85:7f:5d:ad:90:ca:40:ce:a3:af: d7:41:e0:c2:f0:b9:95:68:6c:dc:d9:cc:db:05:6c: 8e:58:8e:d3:87:ef:da:9e:b4:75:c9:d9:72:6e:39: fc:33:21:2f:d8:44:ec:da:b0:f7:c9:dc:b1:c9:17: 62:76:5d:df:7e:4a:bf:e9:83:83:57:71:77:d2:03: f7:31:cc:14:2c:71:07:4a:a0:a4:b3:c5:0a:dd:4e: 6b:9b:29:07:54:f2:1c:3d:21:43:a3:4a:c9:4e:e7: 29:85:b4:43:d2:e9:42:f4:0d:02:8d:e3:72:e2:03: cc:cf:31:45:99:72:fb:74:ae:01:61:dc:13:ef:95: 27:e3:e2:a8:a9:88:81:d3:48:2a:b0:f2:83:6c:fb: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:84:77:6B:30:1C:05:75:FE:A2:A9:B9:AF:2F:04:49:BD:A5:8A:9B X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:2d:47:68:e8:3e:ae:15:c6:b9:e4:7f:21:d2:09:ce:69: b1:0d:cd:bd:c7:fb:54:7c:3c:e5:96:6f:f8:e3:28:ab:34:a6: 1b:e7:7c:fe:04:ca:53:76:1b:4a:ca:52:82:e1:83:87:7e:aa: 42:77:1f:75:cb:62:22:ec:73:00:a2:c5:4b:8b:c9:d1:75:4b: b6:ae:d7:eb:23:67:66:ff:e3:0c:a7:ad:5d:a3:14:51:fc:89: c1:c2:ea:c9:fc:a2:3c:bf:61:3d:07:21:b3:f9:a3:9c:67:73: 1a:3f:c9:40:40:68:e8:36:99:77:55:e0:81:60:56:79:74:dd: 84:8b:0d:f1:eb:92:87:bd:b3:50:37:84:ed:7e:ad:25:23:87: 9e:77:bf:cd:6e:e9:19:90:9e:d2:3a:82:7f:3b:74:76:12:c4: 9b:d8:23:a2:38:65:76:03:77:87:54:6e:6c:16:8b:74:ae:34: e6:53:e9:7a:96:b0:d4:a0:e9:e0:bd:8d:55:f8:28:96:52:c5: e2:84:90:9e:dc:f9:83:e8:01:41:e9:28:91:80:f3:7a:f7:76: eb:8b:e4:50:f6:9a:42:1d:17:4b:ab:00:54:30:2d:f6:db:9f: da:d5:f1:09:c1:3b:38:a3:cf:7a:6c:ba:3c:4a:68:85:54:09: db:d4:64:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjQwNTMxMTc1MDA4WhcNMjQwNjA3MTc1MDA4WjAYMRYwFAYD VQQDEw02NjVhMGRkMC1hZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6m2qhv4qmr9fFbjhghffYKZaDr6RKWrIhMx+GwY2kGE5QMR7/FRXxVm9Dn3d 0ZG0yeT1fl8hlQKv3r+Bn9z14V3vru7cTHPHFH7ZgMM0GxvWvkFTgLAn2Mizn/sh /0LYUG3VhpQSSzJNhLVPa4V/Xa2QykDOo6/XQeDC8LmVaGzc2czbBWyOWI7Th+/a nrR1ydlybjn8MyEv2ETs2rD3ydyxyRdidl3ffkq/6YODV3F30gP3McwULHEHSqCk s8UK3U5rmykHVPIcPSFDo0rJTucphbRD0ulC9A0CjeNy4gPMzzFFmXL7dK4BYdwT 75Un4+KoqYiB00gqsPKDbPujLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuEd2sw HAV1/qKpua8vBEm9pYqbMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXCC1HaOg+rhXGueR/IdIJzmmxDc29x/tUfDzllm/44yirNKYb53z+ BMpTdhtKylKC4YOHfqpCdx91y2Ii7HMAosVLi8nRdUu2rtfrI2dm/+MMp61doxRR /InBwurJ/KI8v2E9ByGz+aOcZ3MaP8lAQGjoNpl3VeCBYFZ5dN2Eiw3x65KHvbNQ N4Ttfq0lI4eed7/NbukZkJ7SOoJ/O3R2EsSb2COiOGV2A3eHVG5sFot0rjTmU+l6 lrDUoOngvY1V+CiWUsXihJCe3PmD6AFB6SiRgPN693bri+RQ9ppCHRdLqwBUMC32 25/a1fEJwTs4o896bLo8SmiFVAnb1GQO -----END CERTIFICATE-----Generated at Fri May 31 20:34:17 2024 by rpki-client on console-ams.rpki-client.org