$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: kPpbXm5cEU4P3pfblF5QlhDFp+9+u7iEmW/jn86pF20= Subject key identifier: 6E:18:FC:C8:D6:E9:21:8A:5C:AA:80:91:73:48:82:59:7E:B4:29:50 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 03CA Signing time: Fri 03 May 2024 02:29:53 +0000 Manifest this update: Fri 03 May 2024 02:29:53 +0000 Manifest next update: Fri 10 May 2024 02:29:52 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: DT4DOPxWesA7evi35fVlkcmub8ZGUZ6ZUhR50rquKkU=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: XAafIwpwnRJtcl7yWvt5zKszR8hXThk9kIqKTAzXYLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: May 3 02:29:53 2024 GMT Not After : May 10 02:29:52 2024 GMT Subject: CN=66344c21-dd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:a3:33:27:6b:da:49:54:90:08:77:46:4e: 11:c4:74:32:c1:c0:22:44:6b:f1:c5:81:1c:d4:0b: 80:06:d5:7a:df:63:f3:3d:c1:30:a6:f8:06:ac:8a: db:b5:e4:5d:62:30:3a:e9:db:94:1c:7c:02:d8:b8: 38:bc:43:e7:9f:83:71:95:31:06:93:16:c1:fa:71: 9a:f8:34:2a:a8:8b:08:2f:ab:93:a6:a8:fe:f9:8f: 93:cf:8b:70:b3:f8:0e:fa:71:72:57:9c:8c:9a:0f: 1c:8d:5f:9e:47:98:b6:a6:80:ee:75:53:49:2a:e2: ba:49:0e:9e:4a:db:1e:30:5b:a0:1c:1b:46:e3:e8: 58:b8:bd:e8:4b:9d:2e:44:0d:e1:6d:68:92:d8:78: 85:67:67:c2:c5:fd:71:cb:f3:0a:71:a8:26:4d:80: 38:65:ca:f4:ab:a6:07:b4:23:f5:df:20:d7:fe:1d: fc:ce:e1:1c:48:2d:4c:62:f3:ce:28:ee:5d:28:97: 38:24:ba:cc:4f:27:6d:c4:86:ed:18:6a:7d:6b:ba: 8d:65:12:f6:af:30:cd:15:58:66:3a:6b:48:5b:3a: 84:0f:8a:29:90:11:f5:2f:f0:29:c0:21:0d:ee:69: ea:e4:ef:f7:5d:fe:41:68:87:eb:0d:bb:2b:b5:36: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:18:FC:C8:D6:E9:21:8A:5C:AA:80:91:73:48:82:59:7E:B4:29:50 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:94:59:71:86:d0:f2:dc:67:bf:9f:7d:24:de:71:c2:00: 80:75:75:a8:f3:92:18:3f:ad:d4:65:ef:ad:04:8c:38:93:75: ec:c9:8d:71:42:93:9e:1a:a3:d0:77:1b:fd:00:bc:af:ca:5a: 24:56:7a:ce:4e:e7:85:01:cd:a8:3a:49:c0:95:9d:c9:56:43: 9b:5e:36:3f:34:72:46:8b:52:e6:f5:55:2f:78:0c:66:76:31: d5:ac:4d:fe:53:b0:cb:d7:fc:ca:60:33:c4:25:eb:97:b0:91: 49:22:26:24:fa:bb:f0:03:15:32:37:9c:cc:c6:63:d3:04:bb: c7:fb:ea:77:8a:e1:49:7a:fe:a3:bd:4c:46:b6:04:79:29:c5: 1c:f8:83:03:de:fa:78:de:1b:cd:98:6c:48:ee:6a:d8:57:5d: b7:5a:b1:3c:5e:5e:50:62:91:1d:1e:9e:63:3d:22:14:1b:51: 6b:c0:ad:a3:46:4f:3c:fd:20:e4:d2:57:ab:53:4e:5b:69:49: 7e:24:d6:e5:57:26:66:7b:cc:63:6e:da:10:90:b2:c8:43:70: 86:6b:e8:5d:ba:20:ac:15:cb:8b:a0:6d:a2:9c:12:7e:fb:62: ab:ac:3f:d2:56:d2:f4:49:ab:20:68:41:41:95:b8:54:fe:17: e1:65:90:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjQwNTAzMDIyOTUzWhcNMjQwNTEwMDIyOTUyWjAYMRYwFAYD VQQDEw02NjM0NGMyMS1kZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6+jMydr2klUkAh3Rk4RxHQywcAiRGvxxYEc1AuABtV632PzPcEwpvgGrIrb teRdYjA66duUHHwC2Lg4vEPnn4NxlTEGkxbB+nGa+DQqqIsIL6uTpqj++Y+Tz4tw s/gO+nFyV5yMmg8cjV+eR5i2poDudVNJKuK6SQ6eStseMFugHBtG4+hYuL3oS50u RA3hbWiS2HiFZ2fCxf1xy/MKcagmTYA4Zcr0q6YHtCP13yDX/h38zuEcSC1MYvPO KO5dKJc4JLrMTydtxIbtGGp9a7qNZRL2rzDNFVhmOmtIWzqED4opkBH1L/ApwCEN 7mnq5O/3Xf5BaIfrDbsrtTYQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4Y/MjW 6SGKXKqAkXNIgll+tClQMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvaJRZcYbQ8txnv599JN5xwgCAdXWo85IYP63UZe+tBIw4k3XsyY1x QpOeGqPQdxv9ALyvylokVnrOTueFAc2oOknAlZ3JVkObXjY/NHJGi1Lm9VUveAxm djHVrE3+U7DL1/zKYDPEJeuXsJFJIiYk+rvwAxUyN5zMxmPTBLvH++p3iuFJev6j vUxGtgR5KcUc+IMD3vp43hvNmGxI7mrYV123WrE8Xl5QYpEdHp5jPSIUG1FrwK2j Rk88/SDk0lerU05baUl+JNblVyZme8xjbtoQkLLIQ3CGa+hduiCsFcuLoG2inBJ+ +2KrrD/SVtL0SasgaEFBlbhU/hfhZZAO -----END CERTIFICATE-----Generated at Fri May 3 04:45:15 2024 by rpki-client on console-fra.rpki-client.org