$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: 5psZHnL+mmZyJWVBMUe3OtTnvDL8NsnuljdYBvaZucI= Subject key identifier: B1:CC:4E:A9:5F:FB:A3:1D:3F:75:A7:1E:C7:FD:85:44:A3:94:6F:91 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0558 Signing time: Sun 05 May 2024 01:01:20 +0000 Manifest this update: Sun 05 May 2024 01:01:19 +0000 Manifest next update: Sun 12 May 2024 01:01:19 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: SqaZKaGi7+VeQPwcmciE0QT6epxngnIIqluOSIwJX4w=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: 7qOaYOkc+cJibdAkW9Mq+aeVB2hFaZI/6GtBkIZWFMc=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: E61+CB818GfsXrcJ8gThXhSUGu5GtZCEr7un9E1uU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: May 5 01:01:19 2024 GMT Not After : May 12 01:01:19 2024 GMT Subject: CN=6636da5f-12da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:59:cc:b6:a2:73:45:80:fc:12:6a:ec:36: d1:08:b1:9f:84:92:ed:a2:b9:f7:47:bb:c5:67:cb: b8:4b:b7:2f:a1:4b:9f:c1:05:b2:99:3d:0f:a9:06: ab:6f:cf:04:a0:c2:b6:09:52:71:52:d2:ef:e3:3b: 09:6f:9a:83:d8:0d:54:07:74:97:f5:3c:75:5e:f0: 3f:d0:6d:e2:79:a8:4f:33:82:e5:81:ae:25:65:8f: ed:bd:29:0d:73:37:3d:9a:96:00:cb:75:b0:14:c8: 17:ce:71:1c:84:26:ee:17:10:ae:7e:33:bc:91:6f: fe:10:87:ab:36:78:07:27:58:4a:f0:d6:61:95:3f: 04:6f:db:95:35:70:77:f9:64:00:47:fb:7b:0c:cd: 99:76:9b:08:5e:75:e4:83:00:a9:bf:1b:ed:5d:56: 7d:8b:63:fa:dc:a9:91:2a:10:14:89:0d:8c:db:b4: a7:94:51:cb:39:77:2c:a9:5c:c5:8a:cd:7a:4d:44: 8c:80:72:2b:0d:ca:28:7f:62:2c:bd:39:5f:85:69: 5f:64:8e:b3:25:45:61:f4:eb:ab:88:c0:ff:b9:24: c7:13:49:6e:0d:26:df:aa:59:1d:b7:17:95:8b:9c: 78:41:46:48:2c:f2:3f:d2:fa:f8:b2:5f:0e:38:33: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:4E:A9:5F:FB:A3:1D:3F:75:A7:1E:C7:FD:85:44:A3:94:6F:91 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:73:16:9c:82:62:ca:db:84:65:35:55:6c:ce:eb:fe:75:ec: 24:c4:0a:c9:2e:ea:99:a6:44:b8:04:21:18:bf:db:71:c4:a9: c1:bf:62:ff:80:4e:63:17:c9:b2:bf:91:de:ca:eb:5b:06:0d: 97:34:2b:a2:20:66:9a:c2:96:fe:c5:29:f7:f7:af:9e:40:1b: 47:ae:43:69:c8:a3:86:08:f2:d1:91:76:b3:9b:c6:8c:59:d9: f6:fd:d0:40:4a:7b:d1:ee:a7:c4:7c:30:b2:3d:32:4d:3a:60: 50:76:a0:e6:ab:83:e4:ea:2f:e8:53:b7:90:08:ed:2c:fc:f1: 79:d2:ef:27:36:38:f4:2d:ed:e7:83:8c:bb:38:37:f3:6b:17: f6:4e:54:b7:6b:95:7a:26:d9:fb:a2:5a:9a:08:97:9f:cf:1c: e2:b7:5c:d5:0c:dc:9e:45:6d:e6:76:cc:3e:d6:57:94:f8:cf: 22:81:6e:da:29:1e:b7:19:a0:6a:da:79:67:f5:35:8d:a9:10: 6d:fa:9f:b4:35:08:8d:69:00:93:5b:18:7a:14:6c:33:02:87: 2a:4f:cf:87:88:80:1c:83:f3:0f:f9:4f:65:8c:ee:ba:12:ba: 44:b0:45:a5:c9:17:c6:83:c3:59:0a:f7:f8:2e:70:01:c6:65: ea:d5:3e:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjQwNTA1MDEwMTE5WhcNMjQwNTEyMDEwMTE5WjAYMRYwFAYD VQQDEw02NjM2ZGE1Zi0xMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ClZzLaic0WA/BJq7DbRCLGfhJLtorn3R7vFZ8u4S7cvoUufwQWymT0PqQar b88EoMK2CVJxUtLv4zsJb5qD2A1UB3SX9Tx1XvA/0G3ieahPM4Llga4lZY/tvSkN czc9mpYAy3WwFMgXznEchCbuFxCufjO8kW/+EIerNngHJ1hK8NZhlT8Eb9uVNXB3 +WQAR/t7DM2ZdpsIXnXkgwCpvxvtXVZ9i2P63KmRKhAUiQ2M27SnlFHLOXcsqVzF is16TUSMgHIrDcoof2IsvTlfhWlfZI6zJUVh9OuriMD/uSTHE0luDSbfqlkdtxeV i5x4QUZILPI/0vr4sl8OODMGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHMTqlf +6MdP3WnHsf9hUSjlG+RMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLcxacgmLK24RlNVVszuv+dewkxArJLuqZpkS4BCEYv9txxKnBv2L/ gE5jF8myv5HeyutbBg2XNCuiIGaawpb+xSn396+eQBtHrkNpyKOGCPLRkXazm8aM Wdn2/dBASnvR7qfEfDCyPTJNOmBQdqDmq4Pk6i/oU7eQCO0s/PF50u8nNjj0Le3n g4y7ODfzaxf2TlS3a5V6Jtn7olqaCJefzxzit1zVDNyeRW3mdsw+1leU+M8igW7a KR63GaBq2nln9TWNqRBt+p+0NQiNaQCTWxh6FGwzAocqT8+HiIAcg/MP+U9ljO66 ErpEsEWlyRfGg8NZCvf4LnABxmXq1T7A -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org