$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: 5THYy/QFaw3k2d0EjeDkDudTQvQvLEZiuGcYVCrSz7o= Subject key identifier: F6:C0:8E:CF:05:7B:B5:E1:44:24:88:CD:AE:9A:65:BA:25:E0:D9:06 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: E6 Signing time: Sun 19 May 2024 05:54:43 +0000 Manifest this update: Sun 19 May 2024 05:54:42 +0000 Manifest next update: Sun 26 May 2024 05:54:42 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: hNEGH8jpgoi5dFbhOwwaLUO3sPS/Its+zXxNX52rPTc=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: May 19 05:54:42 2024 GMT Not After : May 26 05:54:42 2024 GMT Subject: CN=66499423-b9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:a1:81:43:ea:21:4b:cc:1d:0d:91:60:9b: bb:f4:84:36:6c:54:07:23:a7:6b:05:44:30:08:48: 3a:2f:0c:7f:67:ae:cc:c6:eb:72:44:3a:09:e3:aa: 88:d6:bc:38:9a:8b:bd:c8:d8:12:3a:0b:0c:50:69: 30:23:e5:d0:7f:1a:ba:14:1c:c0:18:d0:d3:89:6f: e6:fd:2b:16:c7:20:bd:3c:a5:d5:8c:0c:e5:af:c7: 78:44:92:1f:81:60:f6:50:d7:31:e1:d5:e5:92:56: 6d:38:a9:fe:99:ae:27:78:f9:ef:f7:62:76:a6:e7: 5b:f7:77:f3:6e:be:1a:44:e1:e1:ce:69:d5:0a:f6: a7:99:78:6e:73:a2:39:f2:bd:cd:42:1a:e7:39:19: 50:bd:91:67:dd:dd:9b:44:8b:d5:d7:ca:a1:40:77: d0:37:66:d5:43:1f:0a:a9:8b:59:f3:73:13:b8:31: dc:47:da:b5:c1:75:e4:f1:7a:93:2b:6e:b3:69:2f: ae:2a:98:5d:d5:d2:a5:a6:a1:07:55:2f:bd:69:96: ef:3b:7b:51:35:1f:2b:18:71:9f:2b:61:9f:7d:5b: 2a:ac:19:21:95:4b:68:65:93:f0:a6:aa:d6:e3:3d: 6a:6c:9f:fe:f2:3e:71:e5:39:7b:ee:82:02:77:e1: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C0:8E:CF:05:7B:B5:E1:44:24:88:CD:AE:9A:65:BA:25:E0:D9:06 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:be:a1:4a:7b:2c:b9:78:1e:c1:0a:be:9b:9b:f3:9b:72:3d: fd:d3:e9:3f:15:33:a0:b9:48:58:51:05:37:3a:7a:f1:0a:3d: d2:10:19:b8:9d:72:79:36:5c:98:f4:8b:3d:86:34:03:e5:73: e3:65:57:6e:e4:25:ab:b9:72:6d:0b:1d:76:0a:bb:64:c0:9c: 20:73:b9:2a:82:91:58:1b:88:62:3b:3a:b7:bf:4b:dc:d9:2c: ef:5d:ba:b0:c4:02:ea:9b:04:68:3f:66:42:eb:d3:14:90:09: 9d:2e:47:57:06:99:ac:a9:ed:55:0b:32:da:0f:d2:c5:25:c7: 02:ae:b2:81:0f:72:bb:f3:fd:7f:93:53:8b:02:cb:6e:25:4c: 53:38:8d:44:ad:3c:d7:22:dc:6c:12:5c:03:10:20:b2:55:b7: 25:21:d6:15:f5:70:e2:f7:51:84:1c:82:1e:39:c9:c0:42:fe: d9:2d:d5:62:28:2e:1e:59:ae:c4:59:cc:d3:bb:9a:6d:d0:90: bd:15:4a:6a:42:ff:18:ac:cc:24:91:b9:35:d9:e9:5c:2e:e0: b0:bb:94:33:e3:f2:ec:f7:24:1e:24:cd:2a:95:ef:bb:c0:38: 46:36:f1:82:ee:a8:26:2e:84:ff:83:b7:28:17:7e:0f:a7:9c: 07:38:84:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjQwNTE5MDU1NDQyWhcNMjQwNTI2MDU1NDQyWjAYMRYwFAYD VQQDEw02NjQ5OTQyMy1iOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF2hgUPqIUvMHQ2RYJu79IQ2bFQHI6drBUQwCEg6Lwx/Z67MxutyRDoJ46qI 1rw4mou9yNgSOgsMUGkwI+XQfxq6FBzAGNDTiW/m/SsWxyC9PKXVjAzlr8d4RJIf gWD2UNcx4dXlklZtOKn+ma4nePnv92J2pudb93fzbr4aROHhzmnVCvanmXhuc6I5 8r3NQhrnORlQvZFn3d2bRIvV18qhQHfQN2bVQx8KqYtZ83MTuDHcR9q1wXXk8XqT K26zaS+uKphd1dKlpqEHVS+9aZbvO3tRNR8rGHGfK2GffVsqrBkhlUtoZZPwpqrW 4z1qbJ/+8j5x5Tl77oICd+GP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbAjs8F e7XhRCSIza6aZbol4NkGMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWvqFKeyy5eB7BCr6bm/Obcj390+k/FTOguUhYUQU3OnrxCj3SEBm4 nXJ5NlyY9Is9hjQD5XPjZVdu5CWruXJtCx12CrtkwJwgc7kqgpFYG4hiOzq3v0vc 2SzvXbqwxALqmwRoP2ZC69MUkAmdLkdXBpmsqe1VCzLaD9LFJccCrrKBD3K78/1/ k1OLAstuJUxTOI1ErTzXItxsElwDECCyVbclIdYV9XDi91GEHIIeOcnAQv7ZLdVi KC4eWa7EWczTu5pt0JC9FUpqQv8YrMwkkbk12elcLuCwu5Qz4/Ls9yQeJM0qle+7 wDhGNvGC7qgmLoT/g7coF34Pp5wHOITf -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org