$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: jtuYD5XIPHIgUZ84ftC5Un50YbhBmnd4JDfftxT7jN8= Subject key identifier: 0E:D0:12:DD:32:BC:7F:70:F4:AD:9F:4C:BA:BE:51:F5:A8:E1:1D:00 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 33C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 33C1 Signing time: Sat 18 May 2024 14:44:56 +0000 Manifest this update: Sat 18 May 2024 14:44:55 +0000 Manifest next update: Sat 25 May 2024 14:44:55 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: KBXrrljo2atrH5mYrbaDrWBgiDgM+Z9NnpOPbVv89VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: May 18 14:44:55 2024 GMT Not After : May 25 14:44:55 2024 GMT Subject: CN=6648bee7-a7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:d8:69:5e:15:0f:a5:25:92:b4:02:92:22: f0:ea:dc:a5:56:04:82:8a:3b:06:b0:9f:8f:d4:9c: 97:de:dd:01:3a:ae:66:58:9b:9b:1a:35:3b:61:15: 2e:a6:6b:a7:ad:23:f1:f3:12:91:3d:dc:15:37:f0: f0:d5:39:13:b4:dd:a4:7a:2d:31:e2:97:76:ca:c4: 70:07:9a:4b:ab:9e:6f:27:a8:99:ca:6d:66:4e:69: ef:6b:ab:de:28:e4:95:82:6d:1e:79:54:71:11:b5: 30:1e:fe:91:07:2b:fb:21:4d:a8:87:8c:e4:bc:b4: d5:60:01:d8:fc:b4:a3:7e:e3:20:78:49:31:d8:3d: 62:fb:b0:b6:9e:88:97:2f:20:f6:22:e7:6a:05:bd: 6e:9c:93:18:31:dc:86:c0:15:76:75:ab:06:1b:5e: b2:07:25:0e:bb:8a:d1:23:d3:c8:02:84:cb:82:9e: 38:5c:96:3e:07:9a:81:f8:03:28:2d:e4:68:ac:ca: 41:7b:52:f4:7b:b7:2b:1b:a7:16:8e:cb:55:c7:22: 88:a0:26:6a:76:44:30:87:d5:bf:ad:bc:b1:9f:8f: 58:9d:ad:88:d3:4c:a4:ea:10:5c:51:dc:f4:64:e8: 7c:26:2d:5f:90:09:95:50:d2:30:0d:99:b1:cc:0e: 26:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:12:DD:32:BC:7F:70:F4:AD:9F:4C:BA:BE:51:F5:A8:E1:1D:00 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:42:fc:d1:6e:11:67:31:fc:4a:73:84:b6:44:ef:42:66:d0: 65:b7:05:0f:1d:b8:4e:d2:a7:83:d4:af:08:da:05:54:33:9a: ed:f7:78:e3:ee:cf:0f:67:28:c0:8f:4e:5a:15:2c:c6:d2:74: a8:ee:af:49:d1:2f:7f:c6:2b:a4:b8:89:93:4f:c0:fd:82:15: 6d:bb:08:a3:58:2e:2d:bb:97:76:fb:2a:02:20:bd:1d:99:a5: e8:67:0e:75:e3:a0:94:89:89:1b:f4:66:d4:68:db:5f:bd:d1: e7:05:00:0d:81:a6:e3:f4:1f:45:fa:46:36:77:6f:3c:4f:21: 13:ab:c3:16:8e:3d:d7:19:5f:83:fd:ed:a6:f2:af:40:03:1e: 53:c0:d5:38:14:af:cc:06:e5:e9:e8:7b:71:2e:9b:83:3c:80: 2d:27:8a:3b:b4:ba:96:c0:7c:d6:a0:b0:9a:bd:9a:be:85:f0: a1:79:4c:93:df:3b:f8:d3:e1:d2:f1:a7:43:59:ea:24:ca:9f: ba:6c:6e:c2:d2:0e:d6:1c:a1:a2:f3:5f:8b:b4:86:b3:3c:7c: 30:3a:11:bd:80:b3:5f:79:aa:86:e7:f9:8e:eb:aa:7b:ed:e9: 57:77:68:cf:d5:1e:bb:c7:b9:51:da:82:d5:b6:00:19:e6:e5: 48:d2:60:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjQwNTE4MTQ0NDU1WhcNMjQwNTI1MTQ0NDU1WjAYMRYwFAYD VQQDEw02NjQ4YmVlNy1hN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UnYaV4VD6UlkrQCkiLw6tylVgSCijsGsJ+P1JyX3t0BOq5mWJubGjU7YRUu pmunrSPx8xKRPdwVN/Dw1TkTtN2kei0x4pd2ysRwB5pLq55vJ6iZym1mTmnva6ve KOSVgm0eeVRxEbUwHv6RByv7IU2oh4zkvLTVYAHY/LSjfuMgeEkx2D1i+7C2noiX LyD2IudqBb1unJMYMdyGwBV2dasGG16yByUOu4rRI9PIAoTLgp44XJY+B5qB+AMo LeRorMpBe1L0e7crG6cWjstVxyKIoCZqdkQwh9W/rbyxn49Yna2I00yk6hBcUdz0 ZOh8Ji1fkAmVUNIwDZmxzA4m3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7QEt0y vH9w9K2fTLq+UfWo4R0AMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1QvzRbhFnMfxKc4S2RO9CZtBltwUPHbhO0qeD1K8I2gVUM5rt93jj 7s8PZyjAj05aFSzG0nSo7q9J0S9/xiukuImTT8D9ghVtuwijWC4tu5d2+yoCIL0d maXoZw5146CUiYkb9GbUaNtfvdHnBQANgabj9B9F+kY2d288TyETq8MWjj3XGV+D /e2m8q9AAx5TwNU4FK/MBuXp6HtxLpuDPIAtJ4o7tLqWwHzWoLCavZq+hfCheUyT 3zv40+HS8adDWeokyp+6bG7C0g7WHKGi81+LtIazPHwwOhG9gLNfeaqG5/mO66p7 7elXd2jP1R67x7lR2oLVtgAZ5uVI0mBd -----END CERTIFICATE-----Generated at Sat May 18 15:58:16 2024 by rpki-client on console-ams.rpki-client.org