$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft File: jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json) Hash identifier: pl4HJi5Meq9a7wbDf3bTUzu3HOdHs5GRKQFq/+h/CSA= Subject key identifier: E2:75:22:1C:3D:32:F5:00:9D:95:6B:34:1F:08:C1:38:A0:B4:B5:AE Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76 Certificate issuer: /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft Manifest number: 29 Signing time: Wed 15 May 2024 08:40:16 +0000 Manifest this update: Wed 15 May 2024 08:40:16 +0000 Manifest next update: Wed 22 May 2024 08:40:16 +0000 Files and hashes: 1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: 9JM0s3d46nHjuWleLAUCiGgIxLCTo7uKInhwVEj9aPQ=) 2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: T5x6SlXjPX7mxME3pbp1iBlGxmK0O/jrZnmPz8dQ2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76 Validity Not Before: May 15 08:40:16 2024 GMT Not After : May 22 08:40:16 2024 GMT Subject: CN=664474f0-598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:88:f9:64:6f:b2:84:cb:98:73:6e:26:01: e7:ae:fa:91:2e:ca:64:42:fa:ef:87:d4:45:d2:74: 81:60:ad:83:96:9d:cc:d6:35:4a:41:94:1a:93:bb: 39:99:f0:eb:fc:9a:e4:05:2a:6f:24:54:00:d8:a4: 86:21:5f:3e:1b:3e:d6:a8:14:ff:7d:1f:35:13:5b: 49:bf:dd:ad:f9:bc:89:c9:fa:cf:87:ed:38:fb:93: 36:79:aa:b1:87:2f:1c:11:ec:66:e9:91:37:98:2d: 65:e2:48:53:64:5e:b4:45:e0:02:59:77:d8:58:d9: 36:7e:3c:d3:0c:c7:fa:1f:47:34:0a:f8:52:ab:bd: 5d:d3:62:ce:f2:df:92:ad:15:57:14:1f:db:f0:b7: f8:dc:a8:eb:9e:10:12:62:25:ad:b2:45:a1:ea:41: 07:10:06:05:79:36:3e:8b:46:98:34:28:cd:34:5a: fd:20:f6:f5:42:ca:71:3c:64:31:f9:60:d4:11:b1: 0a:2f:05:83:87:b8:63:73:fc:00:b5:23:f7:3e:1a: 9f:1d:97:d8:a4:2f:de:63:2b:b8:ac:d9:dd:c3:a0: f3:af:ea:32:4d:d7:ef:20:d9:9d:60:1d:a2:73:13: 2d:db:fd:0f:6a:34:e0:10:c8:b6:d2:55:17:ca:43: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:75:22:1C:3D:32:F5:00:9D:95:6B:34:1F:08:C1:38:A0:B4:B5:AE X509v3 Authority Key Identifier: keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a3:03:6a:16:2d:25:60:9f:87:3c:ac:86:06:75:ed:1c:dc: 60:70:ab:29:c5:25:b8:c9:77:7f:e6:2b:59:c8:fe:c3:52:38: 1a:f4:b0:a4:31:26:68:fb:48:25:13:76:05:c1:0b:c8:f1:1b: 62:a0:41:a9:e6:d1:6e:d9:6c:9e:6e:75:e1:7f:af:61:ff:d4: d0:7b:26:dc:39:5a:c0:8c:c8:6b:e2:04:02:e3:89:8d:4c:ec: 8f:f8:40:86:1e:ec:f1:28:6a:76:81:8a:c0:a0:6a:5d:a7:04: 37:3b:c3:d2:3e:22:37:a1:c9:62:0c:54:33:2a:7e:5e:08:17: 84:8c:be:02:3a:6e:92:9d:59:84:ff:be:4f:3b:7c:da:7f:54: 6a:35:c5:46:8a:f9:fa:53:a6:6c:35:34:05:fa:99:64:cf:8a: a9:87:0b:7b:d5:95:ed:4f:06:56:7a:09:16:13:f0:67:5f:5c: 94:f4:8a:8b:82:d6:98:07:8e:06:4a:13:2f:67:a3:11:60:e8: d5:08:05:0f:de:db:1a:26:7a:94:f9:89:41:26:46:13:63:03: ed:cf:c6:a1:62:f7:45:96:33:48:e2:41:cb:8f:c8:0b:25:65: 1a:b6:bf:44:c6:03:6e:59:ff:b6:75:79:94:97:e9:99:82:3d: 28:06:94:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUQ5MzExMC8GA1UEBRMoOENDNTNBOTkyOTdGMUNDMEEwQkZCREVCRjI0RTEzMkIw RDg0MUM3NjAeFw0yNDA1MTUwODQwMTZaFw0yNDA1MjIwODQwMTZaMBgxFjAUBgNV BAMTDTY2NDQ3NGYwLTU5OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm1Yj5ZG+yhMuYc24mAeeu+pEuymRC+u+H1EXSdIFgrYOWnczWNUpBlBqTuzmZ 8Ov8muQFKm8kVADYpIYhXz4bPtaoFP99HzUTW0m/3a35vInJ+s+H7Tj7kzZ5qrGH LxwR7GbpkTeYLWXiSFNkXrRF4AJZd9hY2TZ+PNMMx/ofRzQK+FKrvV3TYs7y35Kt FVcUH9vwt/jcqOueEBJiJa2yRaHqQQcQBgV5Nj6LRpg0KM00Wv0g9vVCynE8ZDH5 YNQRsQovBYOHuGNz/AC1I/c+Gp8dl9ikL95jK7is2d3DoPOv6jJN1+8g2Z1gHaJz Ey3b/Q9qNOAQyLbSVRfKQwIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4nUiHD0y 9QCdlWs0HwjBOKC0ta4wHwYDVR0jBBgwFoAUjMU6mSl/HMCgv73r8k4TKw2EHHYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RDkzL0NDQkFBQURBRDZB OTExRUVBQ0QzMTY2OEM0RjlBRTAyL2pNVTZtU2xfSE1DZ3Y3M3I4azRUS3cyRUhI WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak1VNm1TbF9ITUNndjczcjhrNFRLdzJFSEhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 RDkzL0NDQkFBQURBRDZBOTExRUVBQ0QzMTY2OEM0RjlBRTAyL2pNVTZtU2xfSE1D Z3Y3M3I4azRUS3cyRUhIWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSjA2oWLSVgn4c8rIYGde0c3GBwqynFJbjJd3/mK1nI/sNSOBr0sKQx Jmj7SCUTdgXBC8jxG2KgQanm0W7ZbJ5udeF/r2H/1NB7Jtw5WsCMyGviBALjiY1M 7I/4QIYe7PEoanaBisCgal2nBDc7w9I+IjehyWIMVDMqfl4IF4SMvgI6bpKdWYT/ vk87fNp/VGo1xUaK+fpTpmw1NAX6mWTPiqmHC3vVle1PBlZ6CRYT8GdfXJT0iouC 1pgHjgZKEy9noxFg6NUIBQ/e2xomepT5iUEmRhNjA+3PxqFi90WWM0jiQcuPyAsl ZRq2v0TGA25Z/7Z1eZSX6ZmCPSgGlD4= -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org