$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: gzLNf6JTiyN/KIFOhnpHjerMyCT8goVVvzYe9RKyeL4= Subject key identifier: F6:B7:D7:8A:2C:20:D5:98:D3:BF:5F:13:3A:95:95:EC:D2:BB:D9:F6 Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 054A Signing time: Sun 05 May 2024 01:03:35 +0000 Manifest this update: Sun 05 May 2024 01:03:34 +0000 Manifest next update: Sun 12 May 2024 01:03:34 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: zI6Uug2GraKqyU7ltbi8q04WVSFrNQXQRJjTARBFnUU=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: G+cvOyuBaI0mJceOtyargePM5Osl1OnTP7qop5mo/cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Validity Not Before: May 5 01:03:34 2024 GMT Not After : May 12 01:03:34 2024 GMT Subject: CN=6636dae7-b28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:34:d8:75:fb:f9:dd:19:f1:11:45:85:b6: 0a:36:db:0d:f6:ce:52:04:a0:62:c6:3a:bc:8d:71: 6c:3d:1a:e5:c1:e1:62:7a:e4:9a:0a:d6:0b:eb:ac: 6c:ed:36:0e:18:e3:42:2b:40:33:b8:4a:1d:c9:49: c8:2d:66:40:b1:c0:43:8b:e1:40:45:4d:c3:be:62: de:ab:eb:4d:01:d2:69:85:45:18:01:f7:8e:88:84: 8e:a9:a2:ee:ee:79:ba:17:ae:b0:8d:d5:dc:c6:9f: ea:1d:42:70:df:d3:ed:8e:e4:d8:76:73:bf:3f:a8: 77:1e:1e:7b:1e:5a:a3:55:64:fa:cb:d7:b5:c3:12: b3:dc:90:ee:40:a1:45:ae:aa:55:bd:d0:a2:bf:d3: 12:5a:09:c2:18:42:93:3d:c6:f0:d5:d7:c7:a0:50: 75:88:8b:de:c5:dc:fb:ee:b4:10:d8:74:ed:15:cc: c6:85:bb:e1:7d:5a:e2:68:ac:af:ff:f7:d9:cd:ee: ae:85:5b:7c:b2:46:dc:5d:7e:b1:3d:33:01:5e:b8: 56:c1:19:92:bf:d8:e1:33:7b:68:b8:de:93:6f:4e: 0d:db:7a:0a:cc:d6:cf:3d:cc:1e:e2:2e:d2:0d:74: d2:ba:7b:2a:cc:1c:a0:6c:c2:37:8a:39:3f:54:c3: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:D7:8A:2C:20:D5:98:D3:BF:5F:13:3A:95:95:EC:D2:BB:D9:F6 X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:b9:91:9a:86:c6:ee:4c:1d:e5:d4:96:05:62:d2:2b:71:4f: 04:7f:f5:ab:f8:1b:94:f1:85:23:23:ef:dd:c4:a3:bf:64:e2: 3c:a8:42:92:28:8d:1c:5f:b5:a3:68:72:56:46:2e:84:ba:73: 92:e3:8c:5f:6e:35:41:b7:e8:1d:48:d9:86:da:fb:ec:d1:81: bb:e6:fa:4a:57:21:ca:fe:de:a2:18:1a:59:5b:a0:c7:5b:0f: b1:90:5b:13:20:5c:6c:f5:b0:45:94:2f:24:a3:b4:cb:f7:33: d3:56:da:52:34:fa:c9:b1:91:79:9e:53:a5:f5:fb:32:06:57: 2e:58:d1:9c:6c:3b:7c:7b:54:25:d8:5c:a5:4e:94:67:cd:3d: 20:80:4c:c5:1d:0b:7f:be:1b:03:b0:25:5e:4c:57:71:f3:eb: 1a:76:4c:71:28:8e:b6:68:4f:a1:67:c5:d0:82:3c:cf:70:bd: c9:45:cf:2f:55:1c:7c:49:7f:d3:41:5e:03:fa:a7:9c:d1:82: a9:1c:40:a0:bc:31:87:04:48:60:4f:3d:1d:f4:1c:ff:dd:fd: 44:1a:6d:2e:cb:d6:2f:54:7d:71:c2:11:12:aa:05:78:a3:ff: d6:ba:70:bd:16:0b:98:e6:1c:6b:1e:56:5f:14:61:99:74:10: 87:bb:aa:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjQwNTA1MDEwMzM0WhcNMjQwNTEyMDEwMzM0WjAYMRYwFAYD VQQDEw02NjM2ZGFlNy1iMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59w02HX7+d0Z8RFFhbYKNtsN9s5SBKBixjq8jXFsPRrlweFieuSaCtYL66xs 7TYOGONCK0AzuEodyUnILWZAscBDi+FARU3DvmLeq+tNAdJphUUYAfeOiISOqaLu 7nm6F66wjdXcxp/qHUJw39PtjuTYdnO/P6h3Hh57HlqjVWT6y9e1wxKz3JDuQKFF rqpVvdCiv9MSWgnCGEKTPcbw1dfHoFB1iIvexdz77rQQ2HTtFczGhbvhfVriaKyv //fZze6uhVt8skbcXX6xPTMBXrhWwRmSv9jhM3touN6Tb04N23oKzNbPPcwe4i7S DXTSunsqzBygbMI3ijk/VMPTgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa314os INWY079fEzqVlezSu9n2MB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHuZGahsbuTB3l1JYFYtIrcU8Ef/Wr+BuU8YUjI+/dxKO/ZOI8qEKS KI0cX7WjaHJWRi6EunOS44xfbjVBt+gdSNmG2vvs0YG75vpKVyHK/t6iGBpZW6DH Ww+xkFsTIFxs9bBFlC8ko7TL9zPTVtpSNPrJsZF5nlOl9fsyBlcuWNGcbDt8e1Ql 2FylTpRnzT0ggEzFHQt/vhsDsCVeTFdx8+sadkxxKI62aE+hZ8XQgjzPcL3JRc8v VRx8SX/TQV4D+qec0YKpHECgvDGHBEhgTz0d9Bz/3f1EGm0uy9YvVH1xwhESqgV4 o//WunC9FguY5hxrHlZfFGGZdBCHu6pz -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org