$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: 4FxIakMtduEiUSW5tFOoJPrEa0SN9E3T6vk8EpGCn3U= Subject key identifier: 7F:FD:95:02:84:0C:55:DE:71:4E:CF:6B:D4:49:E1:8D:3E:72:43:6C Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 05C0 Signing time: Wed 01 May 2024 00:33:27 +0000 Manifest this update: Wed 01 May 2024 00:33:26 +0000 Manifest next update: Wed 08 May 2024 00:33:26 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: NYGX7/pvRAlNCEPjKK9bawUqddf1k1GmVWzDmlEwVn0=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: BoGn+23V2+HWaWJely/+yxh6o2gncRPgyL82FJ6K9WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: May 1 00:33:26 2024 GMT Not After : May 8 00:33:26 2024 GMT Subject: CN=66318dd7-03ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1a:56:b8:c9:bb:8e:ed:42:23:d2:ae:f1:b2: 11:dc:df:74:12:61:2d:3f:63:06:66:07:54:8c:ee: 2d:ce:01:00:8f:9e:50:9c:72:bd:31:c7:f3:a8:33: 30:28:d7:23:6e:8a:b3:68:28:2d:a9:66:2f:2f:2d: fc:5a:dc:02:2a:ad:09:b5:77:fe:57:09:3b:9a:9b: c8:85:a0:3e:b8:68:93:3a:2b:32:91:e3:ac:2f:f2: 48:5e:dd:34:40:ae:85:af:b9:bb:1e:00:df:2c:78: 19:93:de:38:eb:93:45:e0:4c:b2:5b:39:73:39:1f: 21:08:8d:1e:32:07:a7:5a:f7:a2:12:d6:97:ac:28: c2:98:c6:f7:9b:68:0c:bd:82:1a:78:6f:31:0f:bb: b6:c2:43:71:e8:eb:ab:56:87:6e:e7:ec:3b:97:49: b9:e4:4c:25:37:2e:1c:57:b5:dc:3d:bd:54:35:5e: 0d:f7:3a:d3:02:a0:c8:8e:1a:ea:44:c4:63:29:7f: fc:4f:c6:08:40:0e:6c:ab:0c:35:7c:61:e7:f9:9d: a9:40:c0:12:1e:81:ee:53:37:13:21:fd:59:06:d5: 10:d1:36:d6:fe:62:6c:8f:8c:78:e5:bd:ea:20:6f: 7b:3b:ab:1b:29:fe:95:48:33:56:d0:57:7a:6d:fc: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FD:95:02:84:0C:55:DE:71:4E:CF:6B:D4:49:E1:8D:3E:72:43:6C X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:92:7b:6e:05:8b:e9:f9:e0:41:cf:de:c9:c3:bf:6b:44:e5: 70:24:c1:15:e6:c9:5a:6f:54:8f:be:06:08:ea:f5:c9:3f:e7: 62:cd:d0:02:e5:e4:f0:44:27:81:55:f0:61:d5:ad:98:3b:a6: 9e:5f:74:d0:3a:9f:0b:0e:df:90:06:de:24:59:b8:65:16:4b: 0c:4f:bf:48:76:63:82:b1:35:b6:f5:bf:cf:30:44:d7:6f:53: 71:78:0e:f6:8a:cf:40:d7:85:3f:f8:5e:ef:26:dd:c7:bb:d0: c4:c0:08:90:3a:a6:d2:72:66:e9:d5:8e:5e:7d:5d:f3:54:bd: 49:21:ae:7c:1a:4f:78:34:85:4d:dc:cc:8b:c0:b1:7e:4e:74: 29:d5:20:4b:f7:73:3a:30:48:23:88:cc:ca:c6:b8:ce:43:2e: bd:ff:5f:05:5c:f1:d1:5f:9d:e2:09:a5:32:2c:09:6b:1f:16: 44:3a:13:f5:5a:22:8d:a8:39:82:b3:18:a6:bf:1e:d2:45:a8: 3b:a0:ad:d9:46:1b:2e:31:b3:4c:43:dd:26:95:b1:cd:63:2d: 62:cf:1d:b4:a7:0d:cb:ca:7e:a0:b5:aa:00:a2:73:5c:73:a0: b1:60:00:78:c2:b9:e7:fe:b2:83:99:e7:8d:f3:26:24:db:83: d9:42:94:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjQwNTAxMDAzMzI2WhcNMjQwNTA4MDAzMzI2WjAYMRYwFAYD VQQDEw02NjMxOGRkNy0wM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hpWuMm7ju1CI9Ku8bIR3N90EmEtP2MGZgdUjO4tzgEAj55QnHK9McfzqDMw KNcjboqzaCgtqWYvLy38WtwCKq0JtXf+Vwk7mpvIhaA+uGiTOisykeOsL/JIXt00 QK6Fr7m7HgDfLHgZk94465NF4EyyWzlzOR8hCI0eMgenWveiEtaXrCjCmMb3m2gM vYIaeG8xD7u2wkNx6OurVodu5+w7l0m55EwlNy4cV7XcPb1UNV4N9zrTAqDIjhrq RMRjKX/8T8YIQA5sqww1fGHn+Z2pQMASHoHuUzcTIf1ZBtUQ0TbW/mJsj4x45b3q IG97O6sbKf6VSDNW0Fd6bfzFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/9lQKE DFXecU7Pa9RJ4Y0+ckNsMB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAkntuBYvp+eBBz97Jw79rROVwJMEV5slab1SPvgYI6vXJP+dizdAC 5eTwRCeBVfBh1a2YO6aeX3TQOp8LDt+QBt4kWbhlFksMT79IdmOCsTW29b/PMETX b1NxeA72is9A14U/+F7vJt3Hu9DEwAiQOqbScmbp1Y5efV3zVL1JIa58Gk94NIVN 3MyLwLF+TnQp1SBL93M6MEgjiMzKxrjOQy69/18FXPHRX53iCaUyLAlrHxZEOhP1 WiKNqDmCsximvx7SRag7oK3ZRhsuMbNMQ90mlbHNYy1izx20pw3Lyn6gtaoAonNc c6CxYAB4wrnn/rKDmeeN8yYk24PZQpQN -----END CERTIFICATE-----Generated at Wed May 1 01:38:30 2024 by rpki-client on console-ams.rpki-client.org