$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: IrAZWBD41ZNfaFIZ8a+dcK4kyIwRmsodCHfOhDbNOls= Subject key identifier: C1:B5:B2:BC:4A:E4:A6:47:C9:C5:E5:2C:0F:00:CE:8A:1A:38:70:1E Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 199B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1992 Signing time: Mon 06 May 2024 16:54:28 +0000 Manifest this update: Mon 06 May 2024 16:54:27 +0000 Manifest next update: Mon 13 May 2024 16:54:27 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: SMWtlRAYFVuIRNhvrrjHJFNA6WVksv+zr6yGfto4AvA=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: bh3z16gZ2VSFsHisnqXivod3jWj16xVb8JpTHoh3XV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6555 (0x199b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: May 6 16:54:27 2024 GMT Not After : May 13 16:54:27 2024 GMT Subject: CN=66390b44-b72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:c0:cc:2f:50:23:de:c6:bb:8c:54:01:0d: e6:4b:bc:5d:8b:24:1e:de:5d:ca:9a:f7:92:c8:78: 55:f5:5c:00:91:20:1a:8c:91:76:06:78:ca:9d:19: b1:25:ef:83:ac:aa:c1:a8:5c:26:09:8e:a4:ad:d3: 71:d0:f0:37:9e:0f:72:16:b2:e3:4a:fb:58:f4:8a: 63:b2:c0:c1:78:a8:df:28:4f:e8:6b:6b:30:a5:b5: 28:6b:e6:0d:ce:53:6d:8a:bf:1d:0b:f7:88:98:06: 6a:cf:fd:06:a6:7a:e3:5f:30:09:86:e7:e8:0f:e9: 2d:4b:17:a9:72:bf:1e:ce:2f:c1:12:02:9c:26:8e: 82:32:bb:3e:75:44:75:25:45:4f:7c:77:ad:e3:45: 8c:bf:aa:53:67:52:4f:54:dc:88:ba:d9:d4:2a:ff: 31:54:73:90:8a:07:e0:85:50:32:15:61:34:51:e1: 1d:c0:d9:34:84:db:a9:a8:72:3a:17:99:7b:0d:a4: 2b:ed:82:92:76:7d:39:11:ab:0a:5f:e2:51:1e:43: f9:f0:a5:1a:7f:0d:44:84:d4:a4:1a:14:d8:5a:52: 0d:5f:cb:02:6b:8e:62:72:e7:20:3c:4a:79:08:7e: 7b:52:1a:3e:5a:c8:d0:63:a8:26:34:d9:43:eb:f0: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:B2:BC:4A:E4:A6:47:C9:C5:E5:2C:0F:00:CE:8A:1A:38:70:1E X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:41:57:59:5a:78:1b:7e:dd:16:38:f2:ca:7d:cf:1c:43:7f: 63:18:3e:41:01:63:c7:62:6b:6a:95:24:a9:94:59:9b:26:48: f2:8c:1e:78:93:8b:e9:af:5d:2f:75:04:bf:e7:f2:a6:85:d8: 4b:04:2c:fd:ca:ae:db:4b:e7:59:ef:aa:be:88:68:06:5b:32: 21:05:0d:b0:c8:b8:f8:a4:06:48:01:28:40:46:1e:15:56:74: 88:11:ed:2d:10:c6:db:39:22:7a:1e:0b:1e:cf:68:54:9b:cd: f2:dd:2c:60:ec:06:ef:dd:fb:e0:86:1f:22:e3:7e:b7:38:02: 87:57:aa:6d:ae:1a:6c:7a:76:3a:8c:63:3e:a7:9b:47:eb:a1: 28:5d:48:c0:a4:f8:52:e4:75:79:5d:01:98:69:85:65:99:72: 0e:ce:7a:c8:e2:e4:13:03:09:76:ac:b3:9d:23:90:4b:30:fe: 7b:14:65:65:30:1e:9b:3f:70:55:e9:ed:81:97:87:f5:71:52: 3c:82:b8:c5:15:00:9e:87:a1:52:57:32:c7:80:73:60:5e:40: 71:8f:e0:ec:48:64:f7:86:06:9e:87:1b:71:00:17:ac:2e:ad: 62:29:89:34:80:99:38:c3:1d:46:7f:f1:da:35:8d:7d:24:ca: 33:d2:59:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjQwNTA2MTY1NDI3WhcNMjQwNTEzMTY1NDI3WjAYMRYwFAYD VQQDEw02NjM5MGI0NC1iNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMbAzC9QI97Gu4xUAQ3mS7xdiyQe3l3KmveSyHhV9VwAkSAajJF2BnjKnRmx Je+DrKrBqFwmCY6krdNx0PA3ng9yFrLjSvtY9IpjssDBeKjfKE/oa2swpbUoa+YN zlNtir8dC/eImAZqz/0GpnrjXzAJhufoD+ktSxepcr8ezi/BEgKcJo6CMrs+dUR1 JUVPfHet40WMv6pTZ1JPVNyIutnUKv8xVHOQigfghVAyFWE0UeEdwNk0hNupqHI6 F5l7DaQr7YKSdn05EasKX+JRHkP58KUafw1EhNSkGhTYWlINX8sCa45icucgPEp5 CH57Uho+WsjQY6gmNNlD6/AgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG1srxK 5KZHycXlLA8AzooaOHAeMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQVdZWngbft0WOPLKfc8cQ39jGD5BAWPHYmtqlSSplFmbJkjyjB54 k4vpr10vdQS/5/KmhdhLBCz9yq7bS+dZ76q+iGgGWzIhBQ2wyLj4pAZIAShARh4V VnSIEe0tEMbbOSJ6Hgsez2hUm83y3Sxg7Abv3fvghh8i4363OAKHV6ptrhpsenY6 jGM+p5tH66EoXUjApPhS5HV5XQGYaYVlmXIOznrI4uQTAwl2rLOdI5BLMP57FGVl MB6bP3BV6e2Bl4f1cVI8grjFFQCeh6FSVzLHgHNgXkBxj+DsSGT3hgaehxtxABes Lq1iKYk0gJk4wx1Gf/HaNY19JMoz0lnU -----END CERTIFICATE-----Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org