$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: 8qMqGgTivPj7qk4yB4tB39nNI+rwv6t3+MG6SBbVRws= Subject key identifier: 52:D9:ED:18:5F:C7:92:36:94:65:1B:C9:DF:E5:9F:08:42:9D:95:5B Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 065B Signing time: Sat 18 May 2024 23:35:47 +0000 Manifest this update: Sat 18 May 2024 23:35:46 +0000 Manifest next update: Sat 25 May 2024 23:35:46 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: GfOHNqZewdvjlaGnHBs/fhKJEN/dRpVnF9BQMn/bMdY=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: GzoLFI75lI1qyWfVEkjMyx5hX1q4VgjRggFkGlj0eXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: May 18 23:35:46 2024 GMT Not After : May 25 23:35:46 2024 GMT Subject: CN=66493b53-5dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:04:35:4f:96:9d:d2:2d:f7:54:89:0f:d4: 4d:55:46:b5:62:67:4f:e9:54:79:8f:2c:72:b8:ab: 5b:b2:5e:7d:73:73:62:bf:2d:72:ca:31:41:45:4a: ba:7b:45:b7:91:67:f1:46:ef:f5:08:27:6b:48:cd: 0d:15:11:a4:6e:94:ab:92:64:b4:b3:c3:d9:ff:38: f7:3d:6a:6b:0c:53:08:12:d7:db:0e:a0:85:80:df: 34:48:16:86:d7:55:61:8a:ac:85:19:6f:17:9e:a4: 2d:fc:2d:45:e8:10:57:90:1e:d3:9e:fe:58:de:7e: 2d:a2:ae:01:ba:31:82:3e:85:ad:bf:c7:7f:13:f1: b8:59:4c:cd:94:4c:0d:1a:a6:11:2e:1c:7d:99:f7: 47:56:d2:00:48:fc:c9:c4:a5:79:71:6b:44:6f:71: 53:36:71:04:dc:df:0e:48:30:4c:d1:cd:3b:f1:9e: 2f:74:1e:ec:20:2e:f0:be:b5:3c:7a:5a:5e:ae:d4: 25:4d:ab:7a:a2:f6:2c:0e:22:b0:fd:f9:7d:c7:d2: 8b:f6:8a:e2:3a:a6:c8:0a:3f:c1:02:16:be:7b:9a: eb:28:00:ed:5f:f4:44:ab:3c:ee:27:ff:98:bf:71: 4a:2a:d0:b6:43:15:3b:a4:2a:48:80:ee:3b:fb:c6: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D9:ED:18:5F:C7:92:36:94:65:1B:C9:DF:E5:9F:08:42:9D:95:5B X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:53:9e:b5:10:82:0c:f6:f0:37:db:24:59:bc:ec:63:f7:c2: c8:0f:d2:ff:f5:85:cd:27:32:69:a1:3f:00:74:5a:b2:24:c7: 36:57:a3:9c:91:66:d4:58:f0:e4:5b:47:4a:7c:9f:15:04:63: 25:6f:74:f9:d0:b6:4e:4d:67:b8:29:d6:85:66:28:af:2e:72: c3:fc:cb:42:a4:d4:ba:39:e2:ee:c9:91:74:00:e2:d7:37:fd: 69:2b:97:ee:cc:44:c7:80:e3:61:92:d0:8f:c1:76:54:44:ad: b5:5a:11:57:0b:7d:50:39:00:6c:ac:04:c9:da:eb:52:88:c8: 7c:34:60:4b:c9:a3:0a:6d:0d:27:55:5c:42:18:14:c4:98:f6: d5:ae:51:56:b1:6d:bd:55:17:86:d5:ca:66:22:03:52:f3:15: 06:c5:f0:d4:39:98:cd:92:c3:8a:83:9b:c1:f6:dc:b8:1a:5f: a4:7d:88:31:f8:aa:2b:a2:2f:53:76:af:06:b7:59:92:d0:98: f9:89:68:4f:00:c3:cf:01:6d:4b:e6:4c:97:98:f5:33:9d:f1: 96:c0:fc:d5:42:ac:d7:e2:9a:d5:97:45:c4:3a:03:76:a6:22: da:7a:f1:5d:92:20:eb:29:1c:35:13:11:83:04:4d:38:92:3e: bc:b9:35:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjQwNTE4MjMzNTQ2WhcNMjQwNTI1MjMzNTQ2WjAYMRYwFAYD VQQDEw02NjQ5M2I1My01ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJAENU+WndIt91SJD9RNVUa1YmdP6VR5jyxyuKtbsl59c3Nivy1yyjFBRUq6 e0W3kWfxRu/1CCdrSM0NFRGkbpSrkmS0s8PZ/zj3PWprDFMIEtfbDqCFgN80SBaG 11VhiqyFGW8XnqQt/C1F6BBXkB7Tnv5Y3n4toq4BujGCPoWtv8d/E/G4WUzNlEwN GqYRLhx9mfdHVtIASPzJxKV5cWtEb3FTNnEE3N8OSDBM0c078Z4vdB7sIC7wvrU8 elpertQlTat6ovYsDiKw/fl9x9KL9oriOqbICj/BAha+e5rrKADtX/REqzzuJ/+Y v3FKKtC2QxU7pCpIgO47+8ZErwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLZ7Rhf x5I2lGUbyd/lnwhCnZVbMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhU561EIIM9vA32yRZvOxj98LID9L/9YXNJzJpoT8AdFqyJMc2V6Oc kWbUWPDkW0dKfJ8VBGMlb3T50LZOTWe4KdaFZiivLnLD/MtCpNS6OeLuyZF0AOLX N/1pK5fuzETHgONhktCPwXZURK21WhFXC31QOQBsrATJ2utSiMh8NGBLyaMKbQ0n VVxCGBTEmPbVrlFWsW29VReG1cpmIgNS8xUGxfDUOZjNksOKg5vB9ty4Gl+kfYgx +Koroi9Tdq8Gt1mS0Jj5iWhPAMPPAW1L5kyXmPUznfGWwPzVQqzX4prVl0XEOgN2 piLaevFdkiDrKRw1ExGDBE04kj68uTUJ -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org