$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: lfq09UAZo6lrTHjf5iL/jFGUjY0q7HHnaADd3CPiknM= Subject key identifier: BA:06:0A:91:D8:52:AB:A2:01:F9:9D:B5:CF:DD:C8:03:FF:1F:7D:5C Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 06D6 Signing time: Mon 06 May 2024 22:57:12 +0000 Manifest this update: Mon 06 May 2024 22:57:11 +0000 Manifest next update: Mon 13 May 2024 22:57:11 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: tBR5KnvXAYC/5vy8FtP3LMwk+mfWXtqA1jGyRhlm0vs=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: l3VZSK2THtgY7ndsjgKypN+4Gdl6NZ9vi+KTwfT/SI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: May 6 22:57:11 2024 GMT Not After : May 13 22:57:11 2024 GMT Subject: CN=66396047-b4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:c7:8c:5c:e8:c3:4f:de:5c:db:87:4d:e7: 70:74:c6:1a:9b:23:40:6a:64:64:eb:60:3c:c9:4b: 64:e0:a5:ac:36:d2:0f:14:6a:2f:18:77:fb:4e:07: e1:69:88:32:89:1c:3c:e7:9e:f4:d5:4a:b7:66:17: 57:50:2e:4c:bf:f8:c1:b8:d0:b9:4e:cd:2b:81:a5: 43:a0:3b:e8:c6:20:c8:1f:19:a4:8e:d1:75:17:f8: 71:6a:14:2f:df:c6:7e:0e:ed:56:75:a2:38:16:9f: 41:f5:36:ab:b2:f7:63:12:8c:8c:00:4d:5d:f9:d1: 7d:be:77:66:f4:06:d2:3e:15:91:d5:d3:c3:d3:a7: b5:73:a6:31:6e:f6:47:8e:0c:9b:9b:3a:35:34:1d: 6c:1a:1d:da:70:47:b0:51:89:fd:4a:ae:70:1a:c0: 16:0d:d1:fa:35:2c:9b:7b:09:ae:cd:84:61:25:2e: cc:62:9e:6e:73:d3:0d:d9:c7:4e:27:bd:af:9b:19: 94:e8:57:7b:59:eb:81:7f:f3:9c:a7:b6:04:17:8a: 0a:16:f4:3b:73:39:54:30:ff:74:5b:95:f8:1b:37: a8:47:a0:8f:0d:d7:0e:74:08:8a:bc:f7:93:f6:1c: 96:d7:d1:3c:fc:4c:c6:01:85:b8:1a:60:b8:b5:8e: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:0A:91:D8:52:AB:A2:01:F9:9D:B5:CF:DD:C8:03:FF:1F:7D:5C X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4b:76:13:09:bb:bf:67:87:45:1f:0e:95:1d:d8:53:0a:b2: eb:9c:0c:d1:02:0d:55:37:f6:f8:22:b7:59:90:be:17:63:2a: f9:0f:b5:d9:e3:ba:93:e6:5d:f3:e2:fd:65:ba:f9:24:32:32: 38:7f:59:e4:78:90:38:c9:9b:bf:07:0f:0d:ad:48:32:3f:2b: 67:75:a2:40:db:aa:1b:e3:48:9d:40:c2:d1:0c:e0:10:67:30: da:9a:f2:6d:43:c5:57:5b:7b:be:44:58:0d:37:9e:0d:b2:6e: d6:be:d3:8d:da:a2:5d:23:04:15:02:8b:36:dc:2a:e1:05:1a: 82:69:bf:77:7a:97:bb:b8:7a:33:5c:77:78:41:a3:aa:2a:82: 9c:3e:c5:4e:c5:ee:bb:c4:80:fc:21:48:77:9c:42:67:0c:68: 97:39:c2:91:61:a5:4f:bc:67:c9:f2:bd:be:79:fe:8e:d3:9a: 5d:8c:ee:f0:5f:6c:c7:2d:18:e0:3d:69:d8:b2:72:a8:fd:9b: 98:a7:2a:1e:ef:7e:87:fc:1a:5b:e7:a2:d4:32:76:a8:3e:c3: 80:be:3c:92:19:ca:22:e6:6a:bb:28:ef:03:8c:24:8e:3f:04: a4:48:60:62:c5:78:95:e4:81:62:df:40:09:c4:7f:75:99:16: c1:89:57:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjQwNTA2MjI1NzExWhcNMjQwNTEzMjI1NzExWjAYMRYwFAYD VQQDEw02NjM5NjA0Ny1iNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jjHjFzow0/eXNuHTedwdMYamyNAamRk62A8yUtk4KWsNtIPFGovGHf7Tgfh aYgyiRw855701Uq3ZhdXUC5Mv/jBuNC5Ts0rgaVDoDvoxiDIHxmkjtF1F/hxahQv 38Z+Du1WdaI4Fp9B9TarsvdjEoyMAE1d+dF9vndm9AbSPhWR1dPD06e1c6YxbvZH jgybmzo1NB1sGh3acEewUYn9Sq5wGsAWDdH6NSybewmuzYRhJS7MYp5uc9MN2cdO J72vmxmU6Fd7WeuBf/Ocp7YEF4oKFvQ7czlUMP90W5X4GzeoR6CPDdcOdAiKvPeT 9hyW19E8/EzGAYW4GmC4tY7daQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoGCpHY UquiAfmdtc/dyAP/H31cMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVS3YTCbu/Z4dFHw6VHdhTCrLrnAzRAg1VN/b4IrdZkL4XYyr5D7XZ 47qT5l3z4v1luvkkMjI4f1nkeJA4yZu/Bw8NrUgyPytndaJA26ob40idQMLRDOAQ ZzDamvJtQ8VXW3u+RFgNN54Nsm7WvtON2qJdIwQVAos23CrhBRqCab93epe7uHoz XHd4QaOqKoKcPsVOxe67xID8IUh3nEJnDGiXOcKRYaVPvGfJ8r2+ef6O05pdjO7w X2zHLRjgPWnYsnKo/ZuYpyoe736H/Bpb56LUMnaoPsOAvjySGcoi5mq7KO8DjCSO PwSkSGBixXiV5IFi30AJxH91mRbBiVeJ -----END CERTIFICATE-----Generated at Tue May 7 00:53:16 2024 by rpki-client on console-ams.rpki-client.org