$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: oxJRSp66FEBXBAmhWxRQM+oteJ2oGLIKUeWvMqVGIsM= Subject key identifier: 0E:9F:47:46:28:C2:17:5D:A2:70:C2:AC:67:99:CC:DB:2D:1B:B5:B4 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 0325 Signing time: Tue 07 May 2024 03:01:13 +0000 Manifest this update: Tue 07 May 2024 03:01:12 +0000 Manifest next update: Tue 14 May 2024 03:01:12 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: oA2JuINXh3/izs3eMWmBhaHcTFp30ZaCcSnvY4Loiro=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: XBZp03p3CBLFAovdVwUeRZcGzU+Bm8gzcdv/m/ApSBQ=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: /8Nf4uZDSnN/p9IwW8sx2sknWcMkeU0uy8pmXCNQQ4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: May 7 03:01:12 2024 GMT Not After : May 14 03:01:12 2024 GMT Subject: CN=66399978-b2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:9f:7e:a6:64:ee:56:4e:52:a5:92:8d:e9: 1d:a5:94:5f:67:3c:9d:5b:96:b7:ed:77:bd:4c:e9: d5:2c:1c:52:53:a5:3b:d5:b1:e0:56:e2:8b:54:bf: d3:b6:40:e6:f6:96:c1:37:e6:29:29:54:06:24:e0: c6:b2:29:f2:bb:18:4b:37:77:6b:84:99:95:e3:10: 56:27:b3:14:c1:d6:0a:e2:ca:0e:59:cb:7b:8f:4c: a4:c2:f0:ea:eb:10:fc:0b:83:da:f1:38:a6:d1:f8: cd:61:99:f1:00:6b:ea:48:ba:23:79:64:74:55:97: 13:23:37:1f:65:8f:84:f2:44:32:3a:2f:28:48:d5: cb:54:f1:b3:b2:90:f2:0f:fe:9a:e2:59:e6:62:eb: 97:c4:20:28:9d:49:b8:ff:a0:4a:d9:ca:3b:9f:8e: 3a:a1:44:b5:30:e4:01:a6:86:cf:1c:30:bc:de:6e: f5:a4:a6:72:e2:25:9b:2b:4b:8f:cb:89:1d:06:4a: d3:70:21:89:21:51:9a:32:9e:a3:15:36:dd:7b:8a: d7:f7:27:55:4c:93:d1:8f:9b:d0:08:ab:54:5c:59: de:20:c5:a7:fb:8f:7c:af:f0:66:ee:0e:d3:35:0f: 0c:cb:99:c2:2e:4f:00:07:33:a7:b2:5d:98:25:b0: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:47:46:28:C2:17:5D:A2:70:C2:AC:67:99:CC:DB:2D:1B:B5:B4 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:93:ea:bb:6d:7f:96:30:b3:b9:45:c0:5d:7c:6a:ba:6b: d7:d8:d0:a2:a7:cd:f0:fb:d7:81:1a:7f:ab:98:04:f6:ba:e7: a1:84:bc:47:29:d9:0a:14:54:27:57:c2:30:95:10:16:a3:20: 9e:cb:89:49:13:34:f7:28:8f:55:22:47:27:24:a5:66:eb:90: 00:9f:59:b8:f5:02:d0:eb:2e:57:c0:a1:58:b4:b7:7b:5d:f7: dd:b9:d7:0e:89:17:7f:b2:03:47:d3:e0:6a:e4:ab:8f:75:99: cf:87:14:db:14:36:fa:47:b7:4f:a0:2f:2b:a6:f8:82:cf:c4: 7e:91:e8:13:40:5a:1c:97:dc:74:2f:c4:97:1e:d1:38:af:3a: 09:4c:58:47:fd:30:39:5b:ce:0d:fa:f6:28:b3:9c:19:fb:41: 63:91:90:a8:7e:a0:07:0f:d4:26:08:ae:66:81:c1:71:7e:85: 13:85:be:b2:19:05:3c:dc:be:86:90:72:29:9c:59:93:d1:aa: b6:e7:ed:cd:ae:51:e8:03:eb:b6:60:04:85:f2:0f:d8:94:bb: 3f:07:81:b0:47:91:06:89:29:07:b9:a0:05:b4:aa:c6:2f:e0: eb:2f:e3:eb:f2:7b:10:ce:f7:04:f8:34:36:d4:57:45:a0:35: b2:0a:97:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjQwNTA3MDMwMTEyWhcNMjQwNTE0MDMwMTEyWjAYMRYwFAYD VQQDEw02NjM5OTk3OC1iMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0GffqZk7lZOUqWSjekdpZRfZzydW5a37Xe9TOnVLBxSU6U71bHgVuKLVL/T tkDm9pbBN+YpKVQGJODGsinyuxhLN3drhJmV4xBWJ7MUwdYK4soOWct7j0ykwvDq 6xD8C4Pa8Tim0fjNYZnxAGvqSLojeWR0VZcTIzcfZY+E8kQyOi8oSNXLVPGzspDy D/6a4lnmYuuXxCAonUm4/6BK2co7n446oUS1MOQBpobPHDC83m71pKZy4iWbK0uP y4kdBkrTcCGJIVGaMp6jFTbde4rX9ydVTJPRj5vQCKtUXFneIMWn+498r/Bm7g7T NQ8My5nCLk8ABzOnsl2YJbBgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6fR0Yo whddonDCrGeZzNstG7W0MB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLOJPqu21/ljCzuUXAXXxqumvX2NCip83w+9eBGn+rmAT2uuehhLxH KdkKFFQnV8IwlRAWoyCey4lJEzT3KI9VIkcnJKVm65AAn1m49QLQ6y5XwKFYtLd7 XffdudcOiRd/sgNH0+Bq5KuPdZnPhxTbFDb6R7dPoC8rpviCz8R+kegTQFocl9x0 L8SXHtE4rzoJTFhH/TA5W84N+vYos5wZ+0FjkZCofqAHD9QmCK5mgcFxfoUThb6y GQU83L6GkHIpnFmT0aq25+3NrlHoA+u2YASF8g/YlLs/B4GwR5EGiSkHuaAFtKrG L+DrL+Pr8nsQzvcE+DQ21FdFoDWyCpcY -----END CERTIFICATE-----Generated at Tue May 7 03:50:00 2024 by rpki-client on console-ams.rpki-client.org