$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: hi8LCtH6owmnIinBGT/7tvpIN+gm+n+HLejXI++2yZY= Subject key identifier: B7:39:6B:59:66:8F:FD:85:43:5A:7B:9F:FE:A0:9A:A3:E7:A3:41:BD Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 04D3 Signing time: Sun 05 May 2024 01:31:16 +0000 Manifest this update: Sun 05 May 2024 01:31:15 +0000 Manifest next update: Sun 12 May 2024 01:31:15 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: EhbEVmlzebZX+Ec1iaXKxcXtfsLoIDogK5WsCyii5Tk=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: qaeGdkz012FrKWtlkq0B4YBPdMLXCpKw3cBwXCpQET8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: May 5 01:31:15 2024 GMT Not After : May 12 01:31:15 2024 GMT Subject: CN=6636e164-d114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:0f:48:f5:86:27:f8:2e:7d:ee:c6:d7:af: 36:9b:11:5d:4a:30:78:f3:32:a0:02:50:3f:34:43: 54:c7:1a:62:bd:2a:91:e1:cb:13:e3:ca:bb:57:18: 5e:81:33:1c:c4:bc:32:cc:8c:76:96:61:d1:fc:99: 6c:77:6a:96:e9:3e:5e:9c:78:ef:f7:13:62:08:71: cd:d9:08:54:e3:0d:b9:24:dd:0b:6f:f4:e0:b4:6b: 1c:88:da:31:2e:18:22:b8:32:72:53:64:7c:c7:e0: b5:fd:b0:3a:7a:60:1e:5b:aa:e1:5a:66:e0:76:3b: 7f:55:aa:83:12:41:7c:9b:54:fb:17:33:f7:d0:d3: 4e:b5:56:04:ba:bc:7b:b7:02:bb:f9:fa:a3:b3:7c: ab:31:e2:ab:fe:87:35:a0:cd:ad:6d:e2:7e:b6:86: f4:e0:09:6e:78:53:c5:0d:fd:84:21:41:59:47:06: a1:85:6a:0a:97:5c:f4:b6:5c:c0:52:15:01:20:56: 6b:d1:95:6c:b1:bd:be:35:14:88:64:1a:4c:b8:bf: a6:db:e4:a1:be:44:1a:8d:ee:49:73:f9:a4:77:06: 07:52:c0:67:b8:99:2d:87:7d:3a:e4:67:fd:bf:93: 64:8a:e5:fb:00:41:80:0e:47:a1:59:c6:c5:61:84: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:39:6B:59:66:8F:FD:85:43:5A:7B:9F:FE:A0:9A:A3:E7:A3:41:BD X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:23:e2:f3:b9:cb:05:41:0b:be:04:c5:9e:f6:45:84:01:de: 53:82:f1:4d:fc:50:17:f3:06:f0:a5:f4:af:9d:f3:3b:97:4c: 4e:e2:02:73:71:bb:e6:af:68:df:d7:0d:9b:6d:18:b3:75:df: 8d:f2:2c:4c:79:93:3a:5c:97:10:29:8f:f0:c1:3f:74:09:66: 7e:dc:19:e7:1c:26:c9:72:06:1e:99:b2:fd:1b:39:80:55:94: ff:09:76:87:4f:e2:65:8a:c9:77:7a:f5:d0:45:f8:2b:60:56: cc:41:1c:90:3b:ad:eb:43:b6:29:1b:81:df:6c:bc:b5:9a:a4: d7:2c:8e:ea:9b:fc:9d:0e:16:47:fd:b1:7a:d1:b3:84:53:78: 61:68:64:8c:72:ba:54:ff:57:60:87:f7:a6:9f:9f:94:64:0a: 75:82:f5:a9:78:39:c3:2d:16:b3:c0:5b:3b:03:01:14:e3:84: 2e:e3:9c:73:e1:79:da:70:26:9d:42:00:23:3a:76:ed:c1:53: 5b:00:ef:8d:62:87:ae:98:3b:f2:0d:30:99:03:f5:41:00:27: d1:df:54:0e:ea:5c:39:d3:85:b5:ac:0d:82:f4:c5:74:33:f1: 6d:58:8d:71:35:38:5a:b4:69:b6:c7:cf:38:c1:77:64:16:2e: 96:05:03:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjQwNTA1MDEzMTE1WhcNMjQwNTEyMDEzMTE1WjAYMRYwFAYD VQQDEw02NjM2ZTE2NC1kMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc4PSPWGJ/gufe7G1682mxFdSjB48zKgAlA/NENUxxpivSqR4csT48q7Vxhe gTMcxLwyzIx2lmHR/Jlsd2qW6T5enHjv9xNiCHHN2QhU4w25JN0Lb/TgtGsciNox LhgiuDJyU2R8x+C1/bA6emAeW6rhWmbgdjt/VaqDEkF8m1T7FzP30NNOtVYEurx7 twK7+fqjs3yrMeKr/oc1oM2tbeJ+tob04AlueFPFDf2EIUFZRwahhWoKl1z0tlzA UhUBIFZr0ZVssb2+NRSIZBpMuL+m2+ShvkQaje5Jc/mkdwYHUsBnuJkth3065Gf9 v5NkiuX7AEGADkehWcbFYYR4VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc5a1lm j/2FQ1p7n/6gmqPno0G9MB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKI+LzucsFQQu+BMWe9kWEAd5TgvFN/FAX8wbwpfSvnfM7l0xO4gJz cbvmr2jf1w2bbRizdd+N8ixMeZM6XJcQKY/wwT90CWZ+3BnnHCbJcgYembL9GzmA VZT/CXaHT+Jlisl3evXQRfgrYFbMQRyQO63rQ7YpG4HfbLy1mqTXLI7qm/ydDhZH /bF60bOEU3hhaGSMcrpU/1dgh/emn5+UZAp1gvWpeDnDLRazwFs7AwEU44Qu45xz 4XnacCadQgAjOnbtwVNbAO+NYoeumDvyDTCZA/VBACfR31QO6lw504W1rA2C9MV0 M/FtWI1xNThatGm2x884wXdkFi6WBQPR -----END CERTIFICATE-----Generated at Sun May 5 02:33:35 2024 by rpki-client on console-fra.rpki-client.org