$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: Qy/LpV9YJdB6aZR/XbKt20Fi4l1/urpV1LosZwhD4JM= Subject key identifier: 36:B2:72:68:28:EE:CD:22:18:A5:47:0D:3D:45:28:88:FB:FB:81:6A Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0228 Signing time: Wed 01 May 2024 04:23:53 +0000 Manifest this update: Wed 01 May 2024 04:23:52 +0000 Manifest next update: Wed 08 May 2024 04:23:52 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: pYAPE3+WVLunXDVe6KgC7a4yNdCUKYgt/2HP6t3KEBU=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: uI2iVhse4NRPkVsaBb9fpYUDi8yOrHFRhjYHI177+tY=) 3: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: mCano6KzUueBvfY9Xz4WTDEar7H4dlef5+Le1qM7SBU=) 4: D02495BAE0E111ECBFF27B44C4F9AE02.roa (hash: li/7cAZcUyRrZa9udI5NkYiSxx+zPkhpIRp36t7/UYE=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 5cFE2+DHvyy580H7GLu07rQpzF29u5j14knEntbBKDA=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: Vw3MBjP1RuU5tdxt+beNhLzaUjT0qpNMidEvPuJBqP8=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: ROCn87h+nUYMOh/I3nf6jc72/YgblF40f3uoYcWM1Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: May 1 04:23:52 2024 GMT Not After : May 8 04:23:52 2024 GMT Subject: CN=6631c3d9-e9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:29:3c:25:a3:2c:38:0b:f7:55:3c:de:0f: 63:5c:ef:e8:72:a1:e3:a4:b7:60:8d:3c:03:b9:4f: 9e:a7:d2:40:e0:64:d6:3a:39:b3:a5:15:9b:24:47: 0b:d2:7c:e1:a8:02:f4:1a:68:c0:25:59:37:52:f9: b2:9c:44:b0:5b:45:5c:18:e4:b4:6f:95:31:bd:7e: ea:37:74:d4:89:db:e2:92:a4:1c:51:35:8c:6f:7a: fc:ad:90:d2:2d:96:a7:96:3e:e5:39:41:42:2c:5a: 2f:73:d0:09:3c:50:fc:fc:50:7d:79:c8:10:04:f2: 31:64:57:26:a0:ac:84:1c:40:7c:22:ab:d5:36:8b: 39:2b:ec:d4:e0:cf:c6:7c:39:c2:de:d1:09:05:c3: 25:66:f1:97:e8:4f:6d:a8:7a:f3:0a:80:ba:74:72: 98:bf:e6:55:d3:da:c3:c6:07:ee:9f:dc:19:29:cb: 39:18:f6:c0:56:21:e0:3d:fb:b8:ec:7a:cf:6a:fa: 8f:4a:4b:f4:3f:bb:1a:b3:84:27:96:04:c3:a3:0e: ae:80:2b:16:b1:32:16:c2:af:9b:cd:d9:27:ae:8b: d5:b2:8e:34:a3:2f:6e:75:cf:12:a6:17:fc:4e:c8: e6:4a:87:a0:f1:d2:b8:e9:93:cb:4e:54:0f:5a:a2: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:72:68:28:EE:CD:22:18:A5:47:0D:3D:45:28:88:FB:FB:81:6A X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:6c:07:0f:05:ea:f7:d6:c7:8b:77:f2:62:06:c3:8b:c8:5c: 9b:a8:19:0d:5a:39:c7:64:a7:75:73:38:3c:45:e7:d9:54:1b: 74:87:3d:8e:2c:2e:5f:10:b2:60:76:2e:42:38:10:ee:0d:80: e9:8a:98:b7:14:ba:66:b3:54:53:2c:b7:f8:fc:a6:cd:8f:cc: 95:16:12:bd:c9:a0:ba:09:e2:72:ea:80:e9:b3:cf:50:91:d1: 36:80:5e:5e:73:e7:5e:1b:32:ad:8b:7f:41:4e:92:a8:44:04: 2a:c9:07:da:cd:45:71:a1:b2:fa:bc:da:c0:e9:56:83:8f:fe: 69:bb:ff:5b:61:08:d9:2e:81:d3:1f:1e:d8:f9:84:2f:a0:34: 99:30:be:ac:e8:7a:ff:7e:77:9e:f6:18:98:ae:81:9b:c8:bf: b8:a5:4c:26:ee:02:6a:d4:40:af:ca:56:8a:a2:6c:48:c9:0c: 91:b8:4d:80:43:99:76:75:78:b6:ea:45:cc:24:17:70:df:b4: 68:a9:ec:ff:a3:17:47:c9:0d:c7:be:32:d3:ff:a6:1a:9a:c1: 09:5f:5d:be:cb:76:83:e8:2d:0d:11:8e:ee:39:de:1d:5a:50: 14:05:b4:ec:71:b8:c6:00:25:cb:6d:3a:e8:c8:fd:cb:99:b7: 44:62:4f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjQwNTAxMDQyMzUyWhcNMjQwNTA4MDQyMzUyWjAYMRYwFAYD VQQDEw02NjMxYzNkOS1lOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSwpPCWjLDgL91U83g9jXO/ocqHjpLdgjTwDuU+ep9JA4GTWOjmzpRWbJEcL 0nzhqAL0GmjAJVk3UvmynESwW0VcGOS0b5UxvX7qN3TUidvikqQcUTWMb3r8rZDS LZanlj7lOUFCLFovc9AJPFD8/FB9ecgQBPIxZFcmoKyEHEB8IqvVNos5K+zU4M/G fDnC3tEJBcMlZvGX6E9tqHrzCoC6dHKYv+ZV09rDxgfun9wZKcs5GPbAViHgPfu4 7HrPavqPSkv0P7sas4QnlgTDow6ugCsWsTIWwq+bzdknrovVso40oy9udc8Sphf8 TsjmSoeg8dK46ZPLTlQPWqK/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaycmgo 7s0iGKVHDT1FKIj7+4FqMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApbAcPBer31seLd/JiBsOLyFybqBkNWjnHZKd1czg8RefZVBt0hz2O LC5fELJgdi5COBDuDYDpipi3FLpms1RTLLf4/KbNj8yVFhK9yaC6CeJy6oDps89Q kdE2gF5ec+deGzKti39BTpKoRAQqyQfazUVxobL6vNrA6VaDj/5pu/9bYQjZLoHT Hx7Y+YQvoDSZML6s6Hr/fnee9hiYroGbyL+4pUwm7gJq1ECvylaKomxIyQyRuE2A Q5l2dXi26kXMJBdw37Roqez/oxdHyQ3HvjLT/6YamsEJX12+y3aD6C0NEY7uOd4d WlAUBbTscbjGACXLbTroyP3LmbdEYk9x -----END CERTIFICATE-----Generated at Wed May 1 05:59:08 2024 by rpki-client on console-fra.rpki-client.org