$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json) Hash identifier: Zzg/KpwbLZ+uwXOYHsMFG4qpJmcdpXiO39GFTrPZkKQ= Subject key identifier: 60:88:50:17:FA:AF:92:9E:88:84:6B:33:B3:0F:56:FC:2E:E1:12:32 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft Manifest number: 099E Signing time: Fri 31 May 2024 21:35:37 +0000 Manifest this update: Fri 31 May 2024 21:35:36 +0000 Manifest next update: Fri 07 Jun 2024 21:35:36 +0000 Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: kMYLZ6Aq5mGBu2dlDWzrAkjFSMpB9Q6dGvR+kmCIbNA=) 2: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: mw/1AkG0h2/VCsdxl5VCIYoldfBNUqXCdmVhyy1MN0I=) 3: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: oI04e+L7sfMU3Sj0iOiRw8fx6cZ5LmX2RbaxWaFzzOU=) 4: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: ruViVCRJvEfOz9OjHERXLsP/W7M4wMXz2oTU4fGgAJk=) 5: 8A533506C9DC11EE8B24C55EC4F9AE02.roa (hash: YQ93vpgeMhab/R8ZlFAYYEI4TgKyYiC1Ypil0/nPvE0=) 6: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: VPX0H6cdFOsD+zG6jkUQSU97ro/+zyFklQ+WnPjh1dQ=) 7: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: Bhm0Q4XwclM/AutVLQajl/RY7MZ/JnuqZS+j7Xz7NN4=) 8: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: yQYomqcwgOlX6WAs8ZRA75TVRZC7TmCArM+Ntkj02Ew=) 9: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: HS8PGK9JvgH2bBKy4nxxFbr2M5XBFdQnBUnj4pS0EeA=) 10: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: C+ub+CENSJtyHyu/2AvvJdYuCVWeMlxkJN2l0lgPcTw=) 11: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kxN3E1UjFrRW2qS6VXZ4546hiWA0TPCQ1evX0olnexQ=) 12: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: maL4uN20qdAsWEHHKCBH0I+qShISlNfAhA2p73xkGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: May 31 21:35:36 2024 GMT Not After : Jun 7 21:35:36 2024 GMT Subject: CN=665a42a9-a15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:3d:ba:4c:3e:d4:36:83:7f:6c:b1:38:ba: 81:59:28:46:2f:42:1c:0e:2b:0b:9e:1d:28:79:dd: aa:da:da:c4:7f:fb:2b:cf:43:eb:e8:a5:b0:a9:36: ea:81:21:59:2e:ff:1d:6c:2e:05:79:cc:4b:e1:b3: ef:5c:69:82:9d:f8:24:d7:7a:94:4c:c7:74:ec:67: 94:86:0b:1a:7a:cb:23:2b:9f:b9:e9:60:87:61:6c: 8e:76:ef:91:25:06:d5:ea:af:23:9f:34:8b:b7:df: 23:39:0f:63:17:78:a7:2a:3a:be:c5:cf:8c:a4:07: 5f:d1:f3:02:23:3a:d5:60:58:2e:70:b2:42:71:c2: 88:32:a9:52:97:92:5b:7e:b3:84:23:9f:35:ee:59: 89:ec:46:56:7d:23:7d:03:86:d1:41:24:e6:48:1f: 1d:1c:56:49:9c:29:ab:62:7b:cd:2a:27:3b:98:a2: ff:a0:f8:90:b1:05:6a:9f:66:e1:d0:33:b6:7d:57: 6a:3f:aa:6e:20:de:3c:81:ba:47:f9:5d:c6:8c:0b: b3:f2:57:b8:36:64:ec:4f:8e:fd:66:0f:d1:56:7b: bb:d2:d5:42:3a:e9:f9:bf:1d:aa:7b:b3:8c:b0:4a: b7:e2:21:a6:9d:57:38:7e:3f:09:e6:93:7f:fc:6a: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:50:17:FA:AF:92:9E:88:84:6B:33:B3:0F:56:FC:2E:E1:12:32 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:9f:25:aa:cb:fe:8a:10:ba:3b:d7:f1:cf:e3:6a:a5:4a:bc: 19:a9:43:82:33:27:e9:e3:fc:f0:9a:e6:61:5c:63:a1:67:16: 6e:f7:a7:de:10:80:df:ed:f7:4b:20:df:2c:ab:6f:ec:39:6b: 55:4f:39:95:92:51:be:32:f2:fc:c0:ce:c2:c3:07:34:54:ff: 24:ed:59:9c:24:6c:88:78:91:16:82:05:e1:19:ac:43:4b:04: ab:db:e6:14:21:cf:5d:cb:ba:0e:ff:20:c4:1b:8e:52:13:96: 0d:5a:cd:36:44:62:a2:49:15:88:8b:e2:6e:70:19:82:85:78: 67:a7:05:c8:14:0f:d9:5a:9e:5e:57:25:ab:cb:1b:b9:de:76: b7:61:0f:8b:9c:4c:f7:a0:db:ae:c5:34:12:11:52:0c:11:5f: 11:71:b3:08:bd:11:38:e7:d6:15:4c:ed:c6:9d:a5:7e:48:37: 0e:f7:a4:1c:b1:75:a1:88:05:a2:3d:4a:30:9f:70:dc:11:5f: 64:34:18:66:8c:45:7c:58:26:ae:43:06:88:07:f3:50:5d:18: 9a:a5:56:2b:47:58:d4:47:0a:87:4a:93:a3:ee:06:1b:84:c1: c7:18:3d:6b:60:7b:b5:19:4f:09:21:c6:f3:38:eb:5c:37:6d: 5f:c7:e8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjQwNTMxMjEzNTM2WhcNMjQwNjA3MjEzNTM2WjAYMRYwFAYD VQQDEw02NjVhNDJhOS1hMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBg9ukw+1DaDf2yxOLqBWShGL0IcDisLnh0oed2q2trEf/srz0Pr6KWwqTbq gSFZLv8dbC4FecxL4bPvXGmCnfgk13qUTMd07GeUhgsaessjK5+56WCHYWyOdu+R JQbV6q8jnzSLt98jOQ9jF3inKjq+xc+MpAdf0fMCIzrVYFgucLJCccKIMqlSl5Jb frOEI5817lmJ7EZWfSN9A4bRQSTmSB8dHFZJnCmrYnvNKic7mKL/oPiQsQVqn2bh 0DO2fVdqP6puIN48gbpH+V3GjAuz8le4NmTsT479Zg/RVnu70tVCOun5vx2qe7OM sEq34iGmnVc4fj8J5pN//GpNlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCIUBf6 r5KeiIRrM7MPVvwu4RIyMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX MC0zWWdHRHRUWkdEeS1HR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/nyWqy/6KELo71/HP42qlSrwZqUOCMyfp4/zwmuZhXGOhZxZu96fe EIDf7fdLIN8sq2/sOWtVTzmVklG+MvL8wM7Cwwc0VP8k7VmcJGyIeJEWggXhGaxD SwSr2+YUIc9dy7oO/yDEG45SE5YNWs02RGKiSRWIi+JucBmChXhnpwXIFA/ZWp5e VyWryxu53na3YQ+LnEz3oNuuxTQSEVIMEV8RcbMIvRE459YVTO3GnaV+SDcO96Qc sXWhiAWiPUown3DcEV9kNBhmjEV8WCauQwaIB/NQXRiapVYrR1jURwqHSpOj7gYb hMHHGD1rYHu1GU8JIcbzOOtcN21fx+h3 -----END CERTIFICATE-----Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org