$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: IVb3hj7IeJoUDko6nzJxe/2GVDZac/QN0v/Sija+UIs= Subject key identifier: 45:76:8F:31:08:42:9B:02:88:97:F2:32:5D:C6:43:44:C8:F0:C4:2A Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: EE Signing time: Fri 31 May 2024 06:31:38 +0000 Manifest this update: Fri 31 May 2024 06:31:38 +0000 Manifest next update: Fri 07 Jun 2024 06:31:38 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: 6oCgQWzV6OE9flxah9cLvol9IFI7TYZS2+zGpPUceh8=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: Qh9Evt44K52q8IGRlGhsv9jAT7uZAcr8cL3AUfSoMAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: May 31 06:31:38 2024 GMT Not After : Jun 7 06:31:38 2024 GMT Subject: CN=66596eca-1f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:0d:85:81:3f:f9:6f:b3:9c:2b:ca:a2:ad: 80:c0:19:e5:7e:50:60:c5:7c:43:2d:84:06:97:87: e4:31:8e:13:e6:f6:6a:23:41:17:fd:f4:bb:7a:c1: 12:ef:62:f7:97:24:3c:e9:4f:4d:e7:8c:f1:de:f5: a0:37:5d:a4:bb:59:7d:a7:73:fe:c2:14:74:92:66: b1:99:95:8c:49:32:be:22:67:08:3d:6a:8c:da:bf: 5c:02:00:74:94:26:4b:04:c3:43:b7:fe:57:ec:dc: 4b:ca:ed:da:7c:07:16:f1:03:51:59:c2:84:ed:8e: a4:39:30:3f:43:4b:4a:d5:f4:8c:ee:19:37:ce:aa: 02:4f:54:f2:b8:0d:d5:b8:18:e1:c8:99:44:05:77: bf:35:70:58:3d:72:28:32:98:aa:19:42:dd:6a:83: 29:38:b2:f3:8b:ca:b0:41:08:45:8d:0d:95:a6:bf: 97:05:75:68:ac:4b:81:93:95:37:21:84:e0:17:b2: a8:67:df:13:70:81:cf:31:ed:72:ec:f0:2a:e2:df: 25:c2:c9:18:0e:2d:6b:63:96:2b:ee:4a:25:a9:4b: 44:24:eb:cc:2a:e2:5a:dc:ff:a2:4a:53:4d:73:3f: 3b:c6:03:ef:d2:30:50:59:6a:cd:b3:76:63:f8:1a: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:8F:31:08:42:9B:02:88:97:F2:32:5D:C6:43:44:C8:F0:C4:2A X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:97:08:e4:0d:d7:ae:3a:56:3f:50:b5:11:53:e8:9a:b7:ba: d2:90:ce:b0:68:96:ae:b2:8a:7f:eb:45:f2:3c:fa:b3:88:8c: 89:0e:95:2d:7b:f4:24:5b:20:bb:d3:c8:4b:27:33:54:3c:a4: 16:98:14:4a:03:00:61:85:66:4b:a5:80:e4:87:1d:69:67:b6: 97:fc:cf:c4:2e:1c:d8:7e:a4:9c:26:4d:80:81:04:5d:54:5c: eb:52:ca:70:ce:7c:3f:b4:63:3b:8d:ac:61:89:3a:78:a4:d0: 91:71:4a:c9:db:7c:9f:60:ac:de:45:72:12:b1:89:45:e8:a3: 9c:c1:87:af:d0:10:7d:fb:b7:8d:c3:ac:97:11:6a:d5:c8:2b: 9e:64:82:92:e7:67:b2:24:29:68:bf:b7:e8:02:16:ed:74:f8: 08:d1:60:48:05:77:7a:d4:3f:72:1c:bf:fe:d8:fa:aa:4b:5f: 6e:67:f9:88:9f:9b:81:1e:6f:88:82:74:d9:30:13:b5:b0:5c: 3f:21:b1:6b:c5:41:9c:a3:8b:ea:88:ff:3c:da:2a:70:c0:92: ff:e3:94:16:b1:2e:0f:c8:99:b5:e0:ce:d4:ef:1d:5f:0c:7e: 47:70:28:fb:17:97:07:c0:5b:a2:93:2d:35:b5:26:ce:f5:55: fd:93:c1:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjQwNTMxMDYzMTM4WhcNMjQwNjA3MDYzMTM4WjAYMRYwFAYD VQQDEw02NjU5NmVjYS0xZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6kNhYE/+W+znCvKoq2AwBnlflBgxXxDLYQGl4fkMY4T5vZqI0EX/fS7esES 72L3lyQ86U9N54zx3vWgN12ku1l9p3P+whR0kmaxmZWMSTK+ImcIPWqM2r9cAgB0 lCZLBMNDt/5X7NxLyu3afAcW8QNRWcKE7Y6kOTA/Q0tK1fSM7hk3zqoCT1TyuA3V uBjhyJlEBXe/NXBYPXIoMpiqGULdaoMpOLLzi8qwQQhFjQ2Vpr+XBXVorEuBk5U3 IYTgF7KoZ98TcIHPMe1y7PAq4t8lwskYDi1rY5Yr7kolqUtEJOvMKuJa3P+iSlNN cz87xgPv0jBQWWrNs3Zj+Bo1/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV2jzEI QpsCiJfyMl3GQ0TI8MQqMB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCflwjkDdeuOlY/ULURU+iat7rSkM6waJausop/60XyPPqziIyJDpUt e/QkWyC708hLJzNUPKQWmBRKAwBhhWZLpYDkhx1pZ7aX/M/ELhzYfqScJk2AgQRd VFzrUspwznw/tGM7jaxhiTp4pNCRcUrJ23yfYKzeRXISsYlF6KOcwYev0BB9+7eN w6yXEWrVyCueZIKS52eyJClov7foAhbtdPgI0WBIBXd61D9yHL/+2PqqS19uZ/mI n5uBHm+IgnTZMBO1sFw/IbFrxUGco4vqiP882ipwwJL/45QWsS4PyJm14M7U7x1f DH5HcCj7F5cHwFuiky01tSbO9VX9k8Hf -----END CERTIFICATE-----Generated at Fri May 31 10:01:44 2024 by rpki-client on console-ams.rpki-client.org