$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: Lhz7F3Maf9y9CEO+zsAqRzLt5GYIoTQLQfhfXBxmuMM= Subject key identifier: 39:FD:9F:FE:03:20:BF:B7:55:81:29:39:9D:0C:24:3F:DB:76:46:86 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 2428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 2414 Signing time: Sat 04 May 2024 16:08:23 +0000 Manifest this update: Sat 04 May 2024 16:08:22 +0000 Manifest next update: Sat 11 May 2024 16:08:22 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: voy/gtcgbSLQuxgXr7LhGCi6myhvarfGeY0yrt4eDNM=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: 0733UsCseVDe/8K7ETFC6o7bBdf81QYokPJegssCSLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9256 (0x2428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: May 4 16:08:22 2024 GMT Not After : May 11 16:08:22 2024 GMT Subject: CN=66365d76-675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:93:63:53:73:c7:c9:4d:1c:6c:14:3d:38: f6:bd:35:2a:52:b9:df:02:0c:e6:b9:60:a0:5d:70: ba:4b:f3:6c:d9:2f:ec:98:4d:21:cc:e5:3a:89:07: 1e:66:37:f6:8c:3c:fd:1f:49:32:f1:43:44:b5:3d: 73:3e:55:53:ee:92:5b:46:6f:1b:81:ee:15:7a:a3: 2b:68:55:2c:d4:f0:ae:f1:30:5c:f4:76:76:1b:04: cc:ca:a7:7b:99:86:6e:6a:a2:8e:5e:2f:b6:c7:ba: be:46:58:c5:bb:e0:33:f9:33:76:d0:87:83:6c:60: 95:75:de:97:06:90:68:31:53:fc:8d:e4:13:ff:f3: 74:b5:24:8c:52:64:77:74:48:e6:2c:e7:c2:07:04: a1:ae:f8:1c:f2:86:bd:ad:28:aa:4c:1c:52:e3:1f: 22:7a:d8:e3:13:69:56:bc:9e:82:79:81:72:58:8e: 31:81:34:62:05:08:fa:69:c7:f4:43:9f:ad:39:18: 25:da:58:87:16:ab:d8:4d:44:ba:ba:d9:80:97:fd: e9:7d:5f:2e:69:16:af:b3:ff:87:14:4b:ce:22:a5: 6c:73:14:fc:60:ac:33:9d:fb:92:8e:27:03:f4:a6: b8:1d:b8:f4:df:56:6a:b9:7b:ad:e0:32:4f:f3:06: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FD:9F:FE:03:20:BF:B7:55:81:29:39:9D:0C:24:3F:DB:76:46:86 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:24:42:e1:57:9e:c7:be:ad:30:0f:75:50:8c:6f:6c:75:8b: 06:90:aa:73:69:ff:7b:ef:53:b7:ce:3e:55:aa:9b:3c:74:e0: ed:00:23:45:fe:72:90:41:a7:58:54:a1:06:34:ab:84:80:a5: a6:2b:69:e6:9e:6c:ea:71:8a:19:fb:25:d5:82:03:8e:0f:06: 96:a6:09:27:49:5e:fb:49:36:48:3a:40:13:dd:04:93:ee:6c: c4:dc:50:a4:e2:a0:e4:e9:99:34:a9:fe:37:4f:33:0c:f4:61: 9b:a3:7c:4d:4d:41:3a:e7:66:60:df:bd:08:d9:f6:d1:c0:e0: 08:8d:8c:44:f9:c9:43:77:f0:5c:fc:f3:05:46:6d:63:a4:3a: 99:83:ec:d2:44:e9:1f:20:c7:e6:0d:2f:ed:5f:de:6e:ea:ab: d4:ee:88:85:ba:86:37:0d:1a:2c:95:bd:62:25:01:6f:6d:e7: 23:a0:97:49:4d:2a:fd:b3:4b:be:b3:f7:34:5d:4d:26:0d:aa: 3f:88:96:0b:8d:07:26:c7:e3:e9:de:60:66:b3:db:18:ea:30: a0:bf:36:1f:5e:4a:41:05:82:48:80:97:8b:c5:a9:16:f8:ae: 20:ae:8e:4f:2e:21:cc:70:8c:11:7d:df:c1:dd:fc:68:1d:73: ff:29:6a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjQwNTA0MTYwODIyWhcNMjQwNTExMTYwODIyWjAYMRYwFAYD VQQDEw02NjM2NWQ3Ni02NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznqTY1Nzx8lNHGwUPTj2vTUqUrnfAgzmuWCgXXC6S/Ns2S/smE0hzOU6iQce Zjf2jDz9H0ky8UNEtT1zPlVT7pJbRm8bge4VeqMraFUs1PCu8TBc9HZ2GwTMyqd7 mYZuaqKOXi+2x7q+RljFu+Az+TN20IeDbGCVdd6XBpBoMVP8jeQT//N0tSSMUmR3 dEjmLOfCBwShrvgc8oa9rSiqTBxS4x8ietjjE2lWvJ6CeYFyWI4xgTRiBQj6acf0 Q5+tORgl2liHFqvYTUS6utmAl/3pfV8uaRavs/+HFEvOIqVscxT8YKwznfuSjicD 9Ka4Hbj031ZquXut4DJP8wbSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn9n/4D IL+3VYEpOZ0MJD/bdkaGMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9JELhV57Hvq0wD3VQjG9sdYsGkKpzaf9771O3zj5Vqps8dODtACNF /nKQQadYVKEGNKuEgKWmK2nmnmzqcYoZ+yXVggOODwaWpgknSV77STZIOkAT3QST 7mzE3FCk4qDk6Zk0qf43TzMM9GGbo3xNTUE652Zg370I2fbRwOAIjYxE+clDd/Bc /PMFRm1jpDqZg+zSROkfIMfmDS/tX95u6qvU7oiFuoY3DRoslb1iJQFvbecjoJdJ TSr9s0u+s/c0XU0mDao/iJYLjQcmx+Pp3mBms9sY6jCgvzYfXkpBBYJIgJeLxakW +K4gro5PLiHMcIwRfd/B3fxoHXP/KWrI -----END CERTIFICATE-----Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org