$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: lR1goOhD9ZuYWmjhfza+vZIlIWN34+L2PIOeExvZcPk= Subject key identifier: 59:13:CE:C6:1A:97:A0:36:7C:55:C0:07:7B:3A:2A:71:F7:AF:CE:BD Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 061F Signing time: Wed 29 May 2024 00:02:09 +0000 Manifest this update: Wed 29 May 2024 00:02:08 +0000 Manifest next update: Wed 05 Jun 2024 00:02:08 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: tSwSzBafkqpQXsDuqiFMnnDZUNQY3lN7GZR1uBaCTy4=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: FM7yDHlJcJDZzdbkKfFhR30NkATmp1gUFaWCKDL44ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: May 29 00:02:08 2024 GMT Not After : Jun 5 00:02:08 2024 GMT Subject: CN=66567080-e4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:0f:a0:66:bd:0e:22:19:52:09:7e:53:29: 63:8a:a7:9e:e6:9e:79:0b:c8:29:75:6f:99:9b:fd: de:04:b7:72:0c:f0:9b:1d:7b:f0:96:c8:24:f9:df: 43:a3:72:03:27:5b:56:50:86:02:d0:1a:0a:da:98: 7c:0a:e1:e4:02:74:16:85:e9:ec:c3:1d:20:d9:6f: 4d:f3:99:d3:5b:be:e5:8a:3f:c5:d7:b0:3d:cc:f7: f9:8a:57:a0:46:5f:7d:fc:d5:99:0c:27:61:e2:36: 38:3f:c9:ff:8b:94:52:57:68:5d:2f:ea:f9:3f:6b: 9e:29:c0:dc:2c:56:ed:bf:6f:39:bd:d7:b5:16:3c: 5f:1b:7b:70:87:e5:62:20:23:96:d7:33:89:8d:ba: a8:7c:b4:10:7f:c7:68:3e:cf:c0:c9:14:26:7f:7e: 53:c5:22:64:50:06:5d:03:1f:1f:62:54:6c:3c:a5: 55:69:80:24:40:5a:ae:e5:f4:5f:ed:b5:c6:5f:7b: 76:47:52:69:69:7c:bb:d0:18:1b:1f:53:37:59:c7: 1f:9c:23:b5:f2:8c:0e:3b:aa:32:52:04:27:cb:7a: 44:09:6d:cc:57:43:64:7a:a6:86:45:74:00:33:7b: e1:76:f7:06:06:b0:a2:37:54:a7:00:e4:30:3c:96: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:CE:C6:1A:97:A0:36:7C:55:C0:07:7B:3A:2A:71:F7:AF:CE:BD X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:52:ba:ec:d8:13:2e:1f:40:80:ab:ed:22:3d:91:20:db:56: 2e:91:23:fd:ba:12:9b:fc:16:94:9e:db:61:d1:7f:cc:d7:32: 7f:02:4e:e9:18:5c:cb:e6:5b:4a:11:33:db:10:38:c4:55:b9: 7e:34:be:88:55:a7:24:26:5d:77:43:49:07:37:25:34:50:67: f1:d4:d8:6c:b4:eb:4f:10:98:8c:41:32:60:20:2e:c2:01:f2: 7a:1b:74:03:75:50:c0:78:49:5d:c1:2e:21:58:be:5c:61:32: 90:3c:92:5c:6b:ae:59:93:e0:bc:96:41:cb:84:fe:b6:19:4e: 36:ff:d0:e0:37:71:d5:d0:7e:b5:20:92:73:d4:4a:3c:6c:b4: 0d:e0:ac:ee:76:78:75:f8:92:27:54:69:5e:81:43:e5:ff:51: 26:ff:36:cc:37:ca:22:0e:22:f5:fd:43:40:02:be:72:c1:f7: cc:d6:e6:22:ee:81:4d:69:ee:5c:91:9a:ee:30:87:7f:09:5c: a2:ae:44:6b:1f:d4:13:c7:30:ba:50:19:ae:16:ae:83:f8:55: b9:bc:39:71:e0:32:71:27:e9:58:27:cf:8e:d8:b4:ac:6b:3f: 40:1e:db:a3:96:eb:65:38:af:45:8a:ac:13:18:be:1a:63:ea: 9e:18:54:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjQwNTI5MDAwMjA4WhcNMjQwNjA1MDAwMjA4WjAYMRYwFAYD VQQDEw02NjU2NzA4MC1lNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RYPoGa9DiIZUgl+Uyljiqee5p55C8gpdW+Zm/3eBLdyDPCbHXvwlsgk+d9D o3IDJ1tWUIYC0BoK2ph8CuHkAnQWhenswx0g2W9N85nTW77lij/F17A9zPf5ileg Rl99/NWZDCdh4jY4P8n/i5RSV2hdL+r5P2ueKcDcLFbtv285vde1FjxfG3twh+Vi ICOW1zOJjbqofLQQf8doPs/AyRQmf35TxSJkUAZdAx8fYlRsPKVVaYAkQFqu5fRf 7bXGX3t2R1JpaXy70BgbH1M3WccfnCO18owOO6oyUgQny3pECW3MV0NkeqaGRXQA M3vhdvcGBrCiN1SnAOQwPJaqdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkTzsYa l6A2fFXAB3s6KnH3r869MB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdUrrs2BMuH0CAq+0iPZEg21YukSP9uhKb/BaUntth0X/M1zJ/Ak7p GFzL5ltKETPbEDjEVbl+NL6IVackJl13Q0kHNyU0UGfx1NhstOtPEJiMQTJgIC7C AfJ6G3QDdVDAeEldwS4hWL5cYTKQPJJca65Zk+C8lkHLhP62GU42/9DgN3HV0H61 IJJz1Eo8bLQN4Kzudnh1+JInVGlegUPl/1Em/zbMN8oiDiL1/UNAAr5ywffM1uYi 7oFNae5ckZruMId/CVyirkRrH9QTxzC6UBmuFq6D+FW5vDlx4DJxJ+lYJ8+O2LSs az9AHtujlutlOK9FiqwTGL4aY+qeGFTT -----END CERTIFICATE-----Generated at Wed May 29 02:29:32 2024 by rpki-client on console-ams.rpki-client.org