$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: pfE8h/vMU+3t7NJOqoX5janYDILiT6rhEWNGMyKbEVg= Subject key identifier: 20:51:76:96:05:24:1A:7B:88:76:90:7A:A6:05:47:42:EF:B6:85:5A Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0C9D Signing time: Sat 18 May 2024 18:50:14 +0000 Manifest this update: Sat 18 May 2024 18:50:14 +0000 Manifest next update: Sat 25 May 2024 18:50:14 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: QwwA///foTb2rZ0TNHG6I0IbX2v5gfEDq/INs0+RXXQ=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: JFExDB3UWM+6oY9L9unkAkDMZqR6L7xjp+IepzjKJ/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: May 18 18:50:14 2024 GMT Not After : May 25 18:50:14 2024 GMT Subject: CN=6648f866-f1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:b3:9b:09:e7:19:8e:9b:60:17:d4:83:18: da:01:d6:27:84:f1:1c:a6:ae:4c:5b:78:78:f6:6b: 22:f7:ec:66:ba:4d:34:fa:52:ff:2e:67:c3:0b:73: 01:d1:68:2c:53:06:ad:a5:34:71:07:0f:14:6e:f9: 79:6f:05:82:81:63:32:da:60:b8:6b:76:68:ef:e0: b2:96:8e:39:80:88:26:ec:3d:35:b8:b9:23:92:57: b4:74:f3:97:d7:44:69:b5:3c:a7:a4:59:3a:8c:50: 95:54:14:bf:ab:9f:34:28:34:58:46:37:f5:07:9c: 0a:aa:e7:a3:6b:bc:9c:70:ea:af:5c:05:df:ee:42: 3c:67:62:06:7b:e6:56:31:13:41:aa:fd:04:a0:f4: 9e:b6:a5:cf:be:18:79:b9:a5:19:06:d2:16:64:92: df:54:09:6c:cd:a0:7c:cb:32:ac:ad:90:b9:f8:a2: b4:6c:92:9d:2f:98:ab:f0:43:f3:01:9c:9d:49:1a: 77:55:ea:00:03:e9:01:cf:4e:35:02:b9:8f:75:75: 87:0c:78:50:66:57:34:5c:f2:32:23:d7:cb:bc:5b: c5:f5:d4:36:8f:9d:bc:64:99:4c:17:b6:fe:38:35: b4:df:7b:be:cc:74:f6:b6:99:48:55:ab:cd:d3:08: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:51:76:96:05:24:1A:7B:88:76:90:7A:A6:05:47:42:EF:B6:85:5A X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:cc:5c:54:1a:89:7f:2c:db:17:0f:bd:8a:86:af:d7:01:7e: 1c:31:aa:75:c2:b1:78:e7:cb:d5:db:f3:1d:93:96:f9:74:ac: a5:91:4a:9f:cd:32:c9:dd:56:74:83:15:db:70:25:68:04:dc: 13:c5:52:8b:15:74:fa:ff:8d:fe:bb:f4:fc:96:d5:49:f4:5d: de:3d:38:ac:cd:b4:70:63:1c:63:6f:7a:96:9b:eb:e7:7e:56: 0e:f8:71:cf:02:4a:91:81:72:16:21:8a:f3:75:3a:3f:99:dd: 18:dd:f9:c4:38:32:69:a1:68:4d:2e:88:43:0c:dd:af:01:79: 41:5e:5a:65:69:6e:b2:f3:1b:0f:3b:22:2b:22:6d:67:c4:82: 45:24:08:72:46:64:46:0c:3d:92:e7:7d:a5:88:c1:72:67:f2: 6a:4e:9f:0d:d4:9b:8f:03:ed:d1:11:e7:0b:c5:af:98:b2:08: 7c:ad:3b:f0:62:de:11:ee:be:52:cc:83:af:c0:2b:9f:03:2b: 0e:55:43:9d:4b:ce:61:d3:e5:21:68:ac:49:58:c3:01:57:79: e4:90:bf:d3:09:7e:62:59:95:05:5e:25:13:22:f9:54:ce:39: 78:68:d6:f4:71:43:92:5e:2c:3f:1e:87:3d:47:54:6f:96:30: 6f:04:d8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjQwNTE4MTg1MDE0WhcNMjQwNTI1MTg1MDE0WjAYMRYwFAYD VQQDEw02NjQ4Zjg2Ni1mMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQazmwnnGY6bYBfUgxjaAdYnhPEcpq5MW3h49msi9+xmuk00+lL/LmfDC3MB 0WgsUwatpTRxBw8Ubvl5bwWCgWMy2mC4a3Zo7+Cylo45gIgm7D01uLkjkle0dPOX 10RptTynpFk6jFCVVBS/q580KDRYRjf1B5wKqueja7yccOqvXAXf7kI8Z2IGe+ZW MRNBqv0EoPSetqXPvhh5uaUZBtIWZJLfVAlszaB8yzKsrZC5+KK0bJKdL5ir8EPz AZydSRp3VeoAA+kBz041ArmPdXWHDHhQZlc0XPIyI9fLvFvF9dQ2j528ZJlMF7b+ ODW033u+zHT2tplIVavN0wg+JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBRdpYF JBp7iHaQeqYFR0LvtoVaMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFzFxUGol/LNsXD72Khq/XAX4cMap1wrF458vV2/Mdk5b5dKylkUqf zTLJ3VZ0gxXbcCVoBNwTxVKLFXT6/43+u/T8ltVJ9F3ePTiszbRwYxxjb3qWm+vn flYO+HHPAkqRgXIWIYrzdTo/md0Y3fnEODJpoWhNLohDDN2vAXlBXlplaW6y8xsP OyIrIm1nxIJFJAhyRmRGDD2S532liMFyZ/JqTp8N1JuPA+3REecLxa+Ysgh8rTvw Yt4R7r5SzIOvwCufAysOVUOdS85h0+UhaKxJWMMBV3nkkL/TCX5iWZUFXiUTIvlU zjl4aNb0cUOSXiw/Hoc9R1RvljBvBNhn -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org