$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: IJInf5dZyiKAjXFR1O8XjcQ2UE1173sHnhW7UdwDsH0= Subject key identifier: C4:48:E5:5B:A8:49:44:56:2A:5E:F8:0D:95:CC:7B:B9:47:29:D0:86 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1B33 Signing time: Mon 06 May 2024 16:44:24 +0000 Manifest this update: Mon 06 May 2024 16:44:24 +0000 Manifest next update: Mon 13 May 2024 16:44:24 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: 9jpepVs2fs7JsSyG0nyloBaHYK4eu6Tt5FGkj44Fd58=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: qtRsJHVpnNad1M37BWzQ5GnqWukDmT2uyK4e9+6Jmqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6986 (0x1b4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: May 6 16:44:24 2024 GMT Not After : May 13 16:44:24 2024 GMT Subject: CN=663908e8-d827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:22:b6:8f:ed:d5:95:c3:64:54:cf:16:e9: e3:7f:78:4f:2a:1d:75:af:42:5e:8f:1b:93:ae:e0: a6:da:85:f5:24:9a:84:58:1c:e1:61:fd:6d:64:97: d7:8e:ba:39:8c:9a:46:8b:27:73:96:ac:b1:7c:07: 05:2f:fd:c1:16:60:a3:0c:81:94:0f:ee:79:7c:2b: b7:41:e9:d4:fb:a6:e1:7a:84:a2:c7:dc:b6:2b:ea: f1:c0:4d:44:1d:2e:23:39:42:d5:f4:b6:40:70:98: 73:42:d5:bc:b0:da:c8:eb:88:57:a8:48:75:9e:f7: b2:f4:af:1e:e7:d9:8b:8c:3e:3f:bd:de:46:2c:48: c1:82:a4:ce:2c:2f:c9:cc:fe:ac:4f:79:f3:b0:ac: e4:fd:bd:b8:51:87:5a:ad:6b:ed:ce:e7:5a:d2:f6: d0:c5:5b:f1:4c:b5:86:9b:78:32:39:c5:fd:b7:64: ec:ce:03:b4:2e:9d:a0:f6:50:76:eb:34:c2:78:e3: e0:7b:ea:51:11:16:ac:2b:ef:f8:58:f3:b6:bb:96: 69:71:2a:8c:c5:8b:33:d8:fb:5a:b6:75:ff:18:d8: 4c:fe:d2:7e:f5:62:60:4e:eb:66:d0:29:d7:3e:f9: dc:7d:5e:51:38:9a:6c:1d:ac:61:bf:b6:d8:18:e5: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:E5:5B:A8:49:44:56:2A:5E:F8:0D:95:CC:7B:B9:47:29:D0:86 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ee:44:73:36:7d:0d:df:09:77:f3:1e:5c:35:38:de:8c:56: c3:f2:37:40:10:fe:18:3c:0a:d2:54:9e:b2:56:c1:cf:f4:85: a1:73:62:9e:d8:d8:70:a4:33:49:6b:fc:cd:58:4f:c9:9b:d9: 9a:5e:66:ab:c6:9e:07:a4:bf:50:a2:02:04:7b:88:b7:b5:1d: fc:6b:ea:0b:68:3b:f0:49:d8:13:71:88:da:f5:91:e9:81:e6: 98:bc:2b:1f:86:47:c9:f9:6e:8f:66:ca:1b:3f:63:9b:b3:24: 03:55:c1:0d:f8:53:78:65:a1:ba:fd:7f:ce:9a:4c:a3:fc:25: 36:cb:93:26:8b:c3:8d:93:c6:2c:ab:bd:37:26:5d:0a:dd:36: a9:85:53:c9:70:0e:df:95:89:6b:0d:b9:73:7a:b5:4f:58:1f: 24:2c:b6:25:0b:b2:e3:b7:9c:96:30:4d:3e:d4:5f:1c:2c:0b: a8:4e:56:06:3d:24:09:db:00:57:cc:ad:97:21:b7:44:ad:eb: 93:2f:80:46:d1:8d:3b:7b:32:d5:9d:d7:a2:5d:41:fd:c1:b9: b9:e9:91:7c:2b:0c:51:5d:96:ba:e5:c1:9c:c7:e6:c5:1a:5c: 22:41:7f:2a:94:c0:73:dd:02:a4:61:5e:36:d9:6a:f8:ad:82: 6f:6a:27:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjQwNTA2MTY0NDI0WhcNMjQwNTEzMTY0NDI0WjAYMRYwFAYD VQQDEw02NjM5MDhlOC1kODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJIito/t1ZXDZFTPFunjf3hPKh11r0JejxuTruCm2oX1JJqEWBzhYf1tZJfX jro5jJpGiydzlqyxfAcFL/3BFmCjDIGUD+55fCu3QenU+6bheoSix9y2K+rxwE1E HS4jOULV9LZAcJhzQtW8sNrI64hXqEh1nvey9K8e59mLjD4/vd5GLEjBgqTOLC/J zP6sT3nzsKzk/b24UYdarWvtzuda0vbQxVvxTLWGm3gyOcX9t2TszgO0Lp2g9lB2 6zTCeOPge+pRERasK+/4WPO2u5ZpcSqMxYsz2PtatnX/GNhM/tJ+9WJgTutm0CnX PvncfV5ROJpsHaxhv7bYGOXqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRI5Vuo SURWKl74DZXMe7lHKdCGMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7kRzNn0N3wl38x5cNTjejFbD8jdAEP4YPArSVJ6yVsHP9IWhc2Ke 2NhwpDNJa/zNWE/Jm9maXmarxp4HpL9QogIEe4i3tR38a+oLaDvwSdgTcYja9ZHp geaYvCsfhkfJ+W6PZsobP2ObsyQDVcEN+FN4ZaG6/X/Omkyj/CU2y5Mmi8ONk8Ys q703Jl0K3TaphVPJcA7flYlrDblzerVPWB8kLLYlC7Ljt5yWME0+1F8cLAuoTlYG PSQJ2wBXzK2XIbdEreuTL4BG0Y07ezLVndeiXUH9wbm56ZF8KwxRXZa65cGcx+bF GlwiQX8qlMBz3QKkYV422Wr4rYJvaifs -----END CERTIFICATE-----Generated at Mon May 6 17:35:37 2024 by rpki-client on console-fra.rpki-client.org