$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: hHHELUM9A79/e8Dwsl5QxYZVAmL4JSCCqeRh7lchJQE= Subject key identifier: 6B:FC:CF:A3:41:35:2E:75:7C:74:48:9B:81:83:75:A0:5F:C8:C2:0E Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 0671 Signing time: Tue 14 May 2024 23:35:38 +0000 Manifest this update: Tue 14 May 2024 23:35:37 +0000 Manifest next update: Tue 21 May 2024 23:35:37 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: eO2+4dh6VBHZaANhw0rkBwhLhi4AcHibCtIc1yh5sbw=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: Ii70CLVt7TySUHN/1bK+N/jJYtwbSV5rRTFy8thyAAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: May 14 23:35:37 2024 GMT Not After : May 21 23:35:37 2024 GMT Subject: CN=6643f549-d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:38:a5:12:8b:61:2c:75:ab:3c:88:75:1b: 95:b3:9a:1e:40:56:a4:60:c2:19:26:d6:a1:62:fe: c4:18:97:9a:e9:c9:c8:6d:b0:0e:93:31:34:e5:53: 08:ce:95:fb:ba:ac:36:59:1e:2d:2f:a8:74:cc:9d: ac:b7:d4:bd:85:89:e8:62:ba:5c:2a:5f:d9:3d:b2: 8e:8d:05:85:78:5d:9f:5d:75:b5:e1:33:4f:73:89: a7:05:94:1d:68:f4:f9:06:1e:20:a0:c5:1c:3b:f9: 92:c8:3e:6c:fd:e7:d4:40:67:0c:63:88:f8:19:b1: 08:e4:da:93:f7:64:ae:18:17:1c:ca:d8:91:de:e4: 9a:33:21:11:93:0a:ca:d4:41:5b:76:04:d3:d5:04: 6c:5f:f7:cf:d1:e5:62:b8:50:e6:58:ca:48:b1:b3: 4b:77:3e:70:92:de:52:85:c2:df:7e:ec:2e:5a:26: 33:d3:83:d6:87:65:34:f5:8d:49:d4:7f:40:02:5a: 99:8d:91:41:ec:09:7c:8f:9a:5d:5d:bd:7e:ea:46: 6f:ac:24:8b:06:78:1a:b8:bd:67:29:eb:a6:64:55: ac:9b:ba:94:6d:3b:a8:22:30:ab:9d:d8:82:d6:53: 11:fd:19:2b:09:99:d3:ff:9f:4e:ec:88:d8:01:95: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:CF:A3:41:35:2E:75:7C:74:48:9B:81:83:75:A0:5F:C8:C2:0E X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b7:6f:a8:c6:f7:6f:46:dd:4e:2b:c1:ab:84:71:50:6e:f4: d0:0b:77:05:ee:c6:59:a9:a8:a4:87:67:4e:c9:cb:73:03:ec: 86:30:ac:16:6c:cb:27:e3:5e:31:8a:f2:be:3d:fd:ce:9b:3b: fc:5a:d3:8a:b6:6c:92:78:14:e6:ec:15:62:c6:f1:5e:d8:ba: c0:a2:58:c7:2a:12:9e:68:a4:c1:65:e4:a5:70:aa:d2:92:0b: b6:c4:5d:c9:68:e2:41:e0:b3:02:60:ed:34:4c:7d:2d:0f:fc: ae:25:4d:f2:18:8e:d5:3b:78:90:54:fe:38:97:a4:f7:69:a0: 19:0b:6e:b8:e2:ff:84:8e:b4:80:04:78:44:37:89:db:a6:6f: a2:82:77:11:16:b3:fe:0e:27:c0:8d:e6:1e:33:f7:2c:8b:e8: bf:08:3f:e2:c1:02:95:43:a7:5a:c4:12:d1:8f:3d:43:c8:bd: 1f:32:bc:52:de:4e:97:ed:5e:0c:86:d1:de:c7:de:14:3b:75: 67:44:57:8e:ce:e9:ac:92:67:7f:6e:54:1f:8b:c7:02:9a:b4: d0:36:e5:f9:5e:23:ff:87:4a:6b:d8:6d:c4:9a:b8:5f:6d:31: b1:af:d4:5b:b4:44:56:49:b5:08:6e:b8:bb:83:f7:79:74:ab: 97:10:3f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjQwNTE0MjMzNTM3WhcNMjQwNTIxMjMzNTM3WjAYMRYwFAYD VQQDEw02NjQzZjU0OS1kNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxQ4pRKLYSx1qzyIdRuVs5oeQFakYMIZJtahYv7EGJea6cnIbbAOkzE05VMI zpX7uqw2WR4tL6h0zJ2st9S9hYnoYrpcKl/ZPbKOjQWFeF2fXXW14TNPc4mnBZQd aPT5Bh4goMUcO/mSyD5s/efUQGcMY4j4GbEI5NqT92SuGBccytiR3uSaMyERkwrK 1EFbdgTT1QRsX/fP0eViuFDmWMpIsbNLdz5wkt5ShcLffuwuWiYz04PWh2U09Y1J 1H9AAlqZjZFB7Al8j5pdXb1+6kZvrCSLBngauL1nKeumZFWsm7qUbTuoIjCrndiC 1lMR/RkrCZnT/59O7IjYAZX0wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv8z6NB NS51fHRIm4GDdaBfyMIOMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBft2+oxvdvRt1OK8GrhHFQbvTQC3cF7sZZqaikh2dOyctzA+yGMKwW bMsn414xivK+Pf3Omzv8WtOKtmySeBTm7BVixvFe2LrAoljHKhKeaKTBZeSlcKrS kgu2xF3JaOJB4LMCYO00TH0tD/yuJU3yGI7VO3iQVP44l6T3aaAZC2644v+EjrSA BHhEN4nbpm+igncRFrP+DifAjeYeM/csi+i/CD/iwQKVQ6daxBLRjz1DyL0fMrxS 3k6X7V4MhtHex94UO3VnRFeOzumskmd/blQfi8cCmrTQNuX5XiP/h0pr2G3Emrhf bTGxr9RbtERWSbUIbri7g/d5dKuXED8y -----END CERTIFICATE-----Generated at Wed May 15 02:26:51 2024 by rpki-client on console-fra.rpki-client.org