$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: ZFp4/WuyqzJ0OJCPfQtwPEZQUVmFw6rr8cPFCgwJUag= Subject key identifier: BC:CA:82:69:24:0C:6D:2E:54:0D:5B:DF:59:AC:E1:E9:16:5E:14:3C Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 0784 Signing time: Tue 30 Apr 2024 22:31:48 +0000 Manifest this update: Tue 30 Apr 2024 22:31:47 +0000 Manifest next update: Tue 07 May 2024 22:31:47 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: mx3WS0kdHFO228tacKxh17Iod0dLlFInbmrJDUktTYE=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: 1PEJ4sy6m3jD5n86rE6dAKdWlwIOSXY6DJ5I2/lZi8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Apr 30 22:31:47 2024 GMT Not After : May 7 22:31:47 2024 GMT Subject: CN=66317154-7e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:2c:ec:95:b4:20:75:f2:30:65:67:7c:ee: e2:92:52:a4:01:9b:23:7e:da:80:78:bf:eb:33:74: 88:16:4b:19:25:2e:36:74:89:2c:a1:67:30:0f:60: fe:93:bb:61:0a:0a:a0:8e:83:34:d3:9b:96:93:89: 41:47:37:11:a3:f4:e4:a5:ed:c6:94:8b:67:66:a7: 47:cc:e5:bb:cb:52:4a:60:7b:8c:0b:b7:69:97:9f: 1c:4d:57:11:61:5a:82:55:d7:93:95:0a:1c:84:9e: 58:a4:0e:99:e1:0e:61:8d:03:53:45:1f:58:99:62: f1:b3:e3:2c:1a:10:ed:98:65:4d:5d:8f:26:3b:d6: d8:0b:14:bd:80:8c:93:38:03:96:ac:f7:f0:fc:5f: 7f:ad:80:4b:18:a9:8d:8c:b8:0a:3b:f0:fa:e7:5a: 68:00:18:0b:80:4b:8a:9c:c6:f6:06:4a:f2:6b:04: 34:d0:6e:26:fa:00:55:2a:01:08:c7:29:52:7c:61: 5e:0d:93:ac:dc:6b:95:76:34:1e:15:b1:b0:7a:c6: 4e:20:c5:3b:9e:04:96:a8:e3:fe:fd:77:d9:61:65: 85:bf:77:47:8f:57:eb:41:23:f7:07:51:04:c7:1a: 5e:2c:f7:e9:93:15:b2:bc:18:78:04:10:c6:54:28: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:82:69:24:0C:6D:2E:54:0D:5B:DF:59:AC:E1:E9:16:5E:14:3C X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8f:c5:6f:08:50:30:3a:7a:a2:d5:c4:e9:89:92:2a:5f:ea: 38:aa:1c:96:b1:de:ce:69:f6:11:d5:d9:b9:ef:50:bf:f0:97: 2e:46:19:ce:f0:9d:aa:10:cd:03:0b:e4:12:52:35:a5:3c:f2: ea:5f:4e:e3:36:cc:18:0f:f5:2c:3f:91:f0:14:46:a5:2d:92: 74:1b:8d:88:bb:38:51:ef:0d:ca:13:cf:52:17:79:d8:7b:dc: 37:84:33:d8:14:f3:c2:a3:a1:86:57:fb:e7:7a:c3:80:32:4c: 88:20:4e:21:06:8d:26:f0:ca:15:d4:36:a6:5e:f0:e8:a6:70: 9e:ed:b1:68:12:ce:73:c6:96:fb:c6:9a:44:93:55:9c:34:cd: 33:c6:b0:46:3a:16:12:3d:21:c7:e2:cf:78:50:65:33:ee:29: 64:8a:05:06:15:cb:f3:fd:08:79:59:2e:56:f0:00:ea:fc:c5: 00:6f:47:a6:5a:d9:ef:52:4e:a9:69:f5:7c:df:b6:fb:66:f2: f4:5c:77:4d:10:9f:ae:a8:0c:b7:2a:28:ee:4a:3b:02:4c:7e: 16:66:4c:e6:e3:46:4f:3c:63:a3:c2:38:dc:86:07:6e:46:04: 3b:e4:72:37:c3:7b:be:73:39:5d:63:06:7f:09:08:0b:87:c8: dc:1f:64:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjQwNDMwMjIzMTQ3WhcNMjQwNTA3MjIzMTQ3WjAYMRYwFAYD VQQDEw02NjMxNzE1NC03ZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgcs7JW0IHXyMGVnfO7iklKkAZsjftqAeL/rM3SIFksZJS42dIksoWcwD2D+ k7thCgqgjoM005uWk4lBRzcRo/Tkpe3GlItnZqdHzOW7y1JKYHuMC7dpl58cTVcR YVqCVdeTlQochJ5YpA6Z4Q5hjQNTRR9YmWLxs+MsGhDtmGVNXY8mO9bYCxS9gIyT OAOWrPfw/F9/rYBLGKmNjLgKO/D651poABgLgEuKnMb2BkryawQ00G4m+gBVKgEI xylSfGFeDZOs3GuVdjQeFbGwesZOIMU7ngSWqOP+/XfZYWWFv3dHj1frQSP3B1EE xxpeLPfpkxWyvBh4BBDGVChQUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzKgmkk DG0uVA1b31ms4ekWXhQ8MB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANj8VvCFAwOnqi1cTpiZIqX+o4qhyWsd7OafYR1dm571C/8JcuRhnO 8J2qEM0DC+QSUjWlPPLqX07jNswYD/UsP5HwFEalLZJ0G42IuzhR7w3KE89SF3nY e9w3hDPYFPPCo6GGV/vnesOAMkyIIE4hBo0m8MoV1DamXvDopnCe7bFoEs5zxpb7 xppEk1WcNM0zxrBGOhYSPSHH4s94UGUz7ilkigUGFcvz/Qh5WS5W8ADq/MUAb0em WtnvUk6pafV837b7ZvL0XHdNEJ+uqAy3KijuSjsCTH4WZkzm40ZPPGOjwjjchgdu RgQ75HI3w3u+czldYwZ/CQgLh8jcH2QN -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:06 2024 by rpki-client on console-ams.rpki-client.org