$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: dm7pf97hQJHt0fWy6nGLe3jqJ+Uw+2Am/O/mTO6+/Gg= Subject key identifier: 97:EC:1E:D7:68:BB:21:7D:19:AA:44:2E:BE:2E:C8:C5:E3:4D:A4:74 Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 076C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 075F Signing time: Thu 02 May 2024 22:27:46 +0000 Manifest this update: Thu 02 May 2024 22:27:46 +0000 Manifest next update: Thu 09 May 2024 22:27:46 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: ZHRlkNqSEYKGUKgCVz+qD1MrvidIph2H7So00xuTgo0=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: 55v8+5WnNCdQgy/pYZyJsyT33va4H3HoMwf1KQsvvdg=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: S9nY3Sl7EDqBHlCNRNgF0IQF6K39qge4nOXqDi55XVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: May 2 22:27:46 2024 GMT Not After : May 9 22:27:46 2024 GMT Subject: CN=66341362-3ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:b6:22:9d:92:77:2a:04:fa:b2:6c:7d:16: bf:36:1d:f9:78:ee:ba:d0:8f:61:34:99:bc:ec:06: f8:c1:1f:a0:13:ba:e8:06:dc:ea:f3:54:6e:16:47: 14:53:b1:9b:6b:3a:74:92:83:a3:ac:fc:61:83:58: be:d1:b0:57:dd:36:ac:88:f4:93:59:49:98:ec:13: 53:6f:80:ca:a1:42:8b:4a:8d:e6:fc:27:02:b3:ed: f5:ca:1c:1d:a2:91:ed:ae:d1:fc:a0:f9:df:78:c2: 7c:77:91:26:7b:c1:cb:80:66:7f:cd:49:46:ad:75: 0c:5e:bb:7d:df:9d:89:61:ad:29:fc:5b:c7:ae:a3: 84:72:1b:e5:5c:5d:85:b7:a9:2a:33:84:18:8a:37: 5a:f8:22:6b:a5:9a:04:58:a9:8b:d3:14:1b:24:dd: 4e:ac:2f:eb:36:2d:15:76:f0:d9:00:2a:8f:25:19: d6:da:8f:c3:b0:0f:37:12:a4:ab:c2:f2:ab:43:7e: 3e:52:21:3e:02:90:cf:28:7a:45:2c:6f:9a:e6:16: 5b:7f:55:56:e2:31:63:e5:44:52:70:47:54:9e:ac: 50:26:fa:da:89:82:28:e2:46:4c:88:5c:fe:f0:a8: 95:db:55:12:a1:2b:cd:3a:18:b0:45:9b:b8:48:91: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:1E:D7:68:BB:21:7D:19:AA:44:2E:BE:2E:C8:C5:E3:4D:A4:74 X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:84:95:b9:b9:46:1e:d4:05:0a:32:96:2d:52:d9:4b:10:03: 65:91:62:ec:ba:7c:29:3e:a0:c2:2d:c2:a9:bd:bc:df:1f:d5: bd:fa:12:3f:e2:61:47:8b:7d:bf:59:51:20:61:8f:9b:40:2f: f0:49:11:98:ee:a3:6a:07:8b:58:2f:09:84:78:79:66:97:1b: 7e:cf:bd:58:1e:ef:c9:13:9b:e0:fb:2a:a7:a3:7e:e9:b8:0f: a4:7a:38:61:a4:ae:24:70:10:dc:fa:f1:63:a7:a2:d4:83:73: a1:1b:15:de:57:7e:1d:bb:ab:51:55:31:06:fc:aa:4b:aa:7b: 27:79:31:1d:ff:44:d8:e2:ee:bf:41:7c:dd:af:29:f4:64:17: 5b:82:c3:5a:60:47:0e:66:8e:dc:58:1a:88:a9:39:0a:23:f7: c1:98:7c:02:77:65:25:53:45:43:ca:05:f0:c9:6a:fd:45:2c: 85:9f:07:9e:9a:1b:67:79:3e:21:4a:cc:5d:eb:d1:0e:8c:39: 69:81:d7:7b:fe:2b:d6:2c:f0:3c:c2:8b:4a:c1:aa:b9:0d:e1: 98:2a:a3:dd:93:7a:66:42:a3:5c:5e:ac:77:d9:a0:8b:f9:70: 79:d3:e3:44:22:6f:66:b6:ea:bb:47:9a:c5:7a:76:17:51:fa: 77:77:06:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjQwNTAyMjIyNzQ2WhcNMjQwNTA5MjIyNzQ2WjAYMRYwFAYD VQQDEw02NjM0MTM2Mi0zY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynS2Ip2SdyoE+rJsfRa/Nh35eO660I9hNJm87Ab4wR+gE7roBtzq81RuFkcU U7Gbazp0koOjrPxhg1i+0bBX3TasiPSTWUmY7BNTb4DKoUKLSo3m/CcCs+31yhwd opHtrtH8oPnfeMJ8d5Eme8HLgGZ/zUlGrXUMXrt9352JYa0p/FvHrqOEchvlXF2F t6kqM4QYijda+CJrpZoEWKmL0xQbJN1OrC/rNi0VdvDZACqPJRnW2o/DsA83EqSr wvKrQ34+UiE+ApDPKHpFLG+a5hZbf1VW4jFj5URScEdUnqxQJvraiYIo4kZMiFz+ 8KiV21USoSvNOhiwRZu4SJGvNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfsHtdo uyF9GapELr4uyMXjTaR0MB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4hJW5uUYe1AUKMpYtUtlLEANlkWLsunwpPqDCLcKpvbzfH9W9+hI/ 4mFHi32/WVEgYY+bQC/wSRGY7qNqB4tYLwmEeHlmlxt+z71YHu/JE5vg+yqno37p uA+kejhhpK4kcBDc+vFjp6LUg3OhGxXeV34du6tRVTEG/KpLqnsneTEd/0TY4u6/ QXzdryn0ZBdbgsNaYEcOZo7cWBqIqTkKI/fBmHwCd2UlU0VDygXwyWr9RSyFnwee mhtneT4hSsxd69EOjDlpgdd7/ivWLPA8wotKwaq5DeGYKqPdk3pmQqNcXqx32aCL +XB50+NEIm9mtuq7R5rFenYXUfp3dwZF -----END CERTIFICATE-----Generated at Thu May 2 23:03:11 2024 by rpki-client on console-fra.rpki-client.org