$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: a3t7XTG6HeCSd1iJ6EJfv4cesVGjDTOtfOIW4AOZtmU= Subject key identifier: 57:C7:B2:05:B1:94:B1:11:2B:20:29:01:57:7F:27:4B:94:05:9F:4C Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 042B Signing time: Sun 05 May 2024 02:09:33 +0000 Manifest this update: Sun 05 May 2024 02:09:32 +0000 Manifest next update: Sun 12 May 2024 02:09:32 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: cdeb7uwe48GFHMt4kwi8u0MktlX9VxBy2tUbRwesf+k=) 2: E6B7014C152511ECAD055780C4F9AE02.roa (hash: wY2tWMCpA53Xn4fhz59FHFfOwIeqYMS5pp24NwZTVhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: May 5 02:09:32 2024 GMT Not After : May 12 02:09:32 2024 GMT Subject: CN=6636ea5d-5b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:9f:57:ce:f9:8a:b9:4b:2d:e0:46:1d:6e: ee:92:b3:f2:23:2e:41:e9:a8:38:d3:c9:0f:20:47: fd:e8:9f:77:c1:4a:cd:69:d9:8c:ae:da:0a:6c:56: 43:79:af:e6:77:f9:19:4f:70:86:8c:76:ec:b1:ba: 01:e5:9a:28:ed:73:c9:bc:9d:8c:66:0a:46:2d:ed: 06:98:97:fc:14:75:a5:a3:f4:69:63:3b:ba:32:69: 27:87:83:61:e6:2d:95:55:61:f3:96:bb:1d:a7:f1: 3c:dd:96:e9:8f:24:65:ca:e5:88:93:e4:10:75:4a: 08:7c:04:62:3a:b5:85:31:9a:df:f9:fe:60:83:bb: 79:a9:33:e7:c0:c5:56:d7:1f:a0:c3:4f:05:e6:d5: 9d:c0:0b:d4:c5:a3:df:f0:c5:08:ba:b3:c0:aa:45: 4b:62:29:8c:c5:84:8a:04:a2:80:9e:38:cd:ee:46: 6a:2f:99:00:2c:e6:3f:35:f4:27:dd:c5:27:07:b3: 93:bd:79:62:5c:10:04:8f:51:fc:c6:b3:eb:dc:37: 8e:9a:72:a1:f9:ef:a3:d3:4f:90:d3:e9:cf:f5:cb: b2:db:5b:ff:74:04:38:6a:1d:34:c6:67:18:9c:8b: 31:f9:4b:6e:4a:73:03:5d:5e:ae:d0:85:04:f9:8d: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C7:B2:05:B1:94:B1:11:2B:20:29:01:57:7F:27:4B:94:05:9F:4C X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:73:96:6b:e6:90:10:ab:69:60:ee:3c:10:eb:1d:c8:a6:a2: 15:c7:45:cb:1e:ef:91:99:33:eb:dc:33:ea:67:71:c0:63:07: 9c:54:a6:b7:48:d1:d9:4c:58:6e:0a:46:cb:f8:fb:31:b7:00: db:fe:e6:d5:26:b4:95:48:18:6d:13:b7:1e:c8:ab:1b:e4:64: 2a:a3:d0:8a:2d:06:c5:68:1c:2a:54:fd:f7:d7:6e:ea:55:97: b6:29:be:ed:6e:a8:b0:8d:af:3e:71:eb:25:61:7b:97:b9:bd: 15:93:25:0d:82:b3:de:51:24:0b:e8:4a:36:c5:13:c3:ee:30: 9f:ae:44:d5:be:52:5c:ec:8e:78:f2:e3:bf:d1:66:2c:48:b0: 67:47:a8:1e:59:8b:9a:09:60:5b:3a:fe:26:93:aa:d8:a7:85: 4b:32:54:f4:39:49:06:01:4d:95:1c:09:3c:23:2e:0f:be:25: 3e:51:4d:61:49:53:16:89:1a:dd:16:b4:97:3f:b5:42:4a:51: 2c:63:ef:5d:51:4d:d9:64:92:9e:63:d0:c6:ca:fb:f3:87:f3: e9:08:3c:3f:84:b1:03:02:7f:7e:1d:f5:ac:5d:08:9b:d4:73: c8:cb:b3:93:9b:22:93:68:62:e0:38:0a:7d:95:e1:f5:db:5f: 9c:03:8f:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjQwNTA1MDIwOTMyWhcNMjQwNTEyMDIwOTMyWjAYMRYwFAYD VQQDEw02NjM2ZWE1ZC01Yjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SafV875irlLLeBGHW7ukrPyIy5B6ag408kPIEf96J93wUrNadmMrtoKbFZD ea/md/kZT3CGjHbssboB5Zoo7XPJvJ2MZgpGLe0GmJf8FHWlo/RpYzu6Mmknh4Nh 5i2VVWHzlrsdp/E83ZbpjyRlyuWIk+QQdUoIfARiOrWFMZrf+f5gg7t5qTPnwMVW 1x+gw08F5tWdwAvUxaPf8MUIurPAqkVLYimMxYSKBKKAnjjN7kZqL5kALOY/NfQn 3cUnB7OTvXliXBAEj1H8xrPr3DeOmnKh+e+j00+Q0+nP9cuy21v/dAQ4ah00xmcY nIsx+UtuSnMDXV6u0IUE+Y2TfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfHsgWx lLERKyApAVd/J0uUBZ9MMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHc5Zr5pAQq2lg7jwQ6x3IpqIVx0XLHu+RmTPr3DPqZ3HAYwecVKa3 SNHZTFhuCkbL+PsxtwDb/ubVJrSVSBhtE7ceyKsb5GQqo9CKLQbFaBwqVP33127q VZe2Kb7tbqiwja8+ceslYXuXub0VkyUNgrPeUSQL6Eo2xRPD7jCfrkTVvlJc7I54 8uO/0WYsSLBnR6geWYuaCWBbOv4mk6rYp4VLMlT0OUkGAU2VHAk8Iy4PviU+UU1h SVMWiRrdFrSXP7VCSlEsY+9dUU3ZZJKeY9DGyvvzh/PpCDw/hLEDAn9+HfWsXQib 1HPIy7OTmyKTaGLgOAp9leH121+cA49F -----END CERTIFICATE-----Generated at Sun May 5 03:09:53 2024 by rpki-client on console-ams.rpki-client.org