$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft File: z8AnvWbwidNpy1leBgJeLd0Z44I.mft (raw, json) Hash identifier: HpqSjESv1jYq3mWY+qdhgSHOwcIbb9KS5tDy6oqCZJU= Subject key identifier: 05:EC:89:71:AE:D9:89:E5:C6:61:F9:6F:DB:3B:A1:2A:48:24:51:6F Authority key identifier: CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82 Certificate issuer: /CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft Manifest number: 01E6 Signing time: Sun 19 May 2024 04:24:45 +0000 Manifest this update: Sun 19 May 2024 04:24:44 +0000 Manifest next update: Sun 26 May 2024 04:24:44 +0000 Files and hashes: 1: z8AnvWbwidNpy1leBgJeLd0Z44I.crl (hash: 2npt2yqiyVgXIFnerr+PHiRtKrJWCuAZpxDumQ3MkBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.crl rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382 Validity Not Before: May 19 04:24:44 2024 GMT Not After : May 26 04:24:44 2024 GMT Subject: CN=66497f0d-2a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:ac:76:f5:ff:4a:c3:db:00:e4:e5:3b:33: 83:1b:92:f0:44:89:c2:8b:0b:17:d1:12:ca:37:d8: fe:43:39:5d:76:43:0b:51:5b:ac:de:cc:f5:ea:0e: dc:4d:54:d2:f6:0c:5e:e9:21:7f:41:b1:01:3d:d0: d8:79:a1:d5:5a:14:35:ba:9f:76:54:df:ed:dc:2f: 0d:ca:64:d7:c9:ba:1f:d1:42:f9:a9:ac:cc:03:ed: 28:3b:a5:e9:6e:2f:96:75:bc:db:53:63:1e:0a:80: 92:13:f3:57:25:40:79:ca:57:8a:c3:39:72:27:57: b3:5c:ed:5a:6d:95:7d:c0:73:e2:f8:b9:7b:f3:bc: 1a:91:20:88:ab:da:65:0f:64:c1:9d:59:14:f9:d5: 9e:93:7c:e2:28:cd:7c:34:0e:67:fc:1b:e8:02:b1: 6f:2f:f9:b0:b0:e7:a4:ba:a6:b6:8d:1f:10:84:ff: ae:27:0f:45:14:61:45:79:57:e9:50:4c:c1:d4:7a: df:0d:ea:e8:8a:e9:f9:17:e4:97:0d:53:40:7c:df: 03:3b:4e:dd:76:0b:84:1f:4a:2f:f6:8d:8f:57:7d: 17:78:71:69:a9:09:a5:84:a7:c6:fd:3e:f7:9c:9f: 39:5e:79:ed:46:8e:0d:2b:0a:4f:da:a5:b2:d7:17: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EC:89:71:AE:D9:89:E5:C6:61:F9:6F:DB:3B:A1:2A:48:24:51:6F X509v3 Authority Key Identifier: keyid:CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9c:b2:be:ab:f7:3d:19:04:03:56:fa:c2:a8:e7:68:0e:4a: 2a:d1:6e:30:1f:42:c0:b4:20:5c:11:39:24:e5:15:83:79:61: d0:70:d4:59:bc:33:6b:d1:75:63:c7:71:0b:f6:24:7d:33:31: eb:8e:a2:df:52:48:1a:d8:84:6b:30:fb:53:88:2a:f9:6d:47: 4f:fc:88:ea:90:70:f1:a2:6e:75:8a:25:24:54:28:3d:0c:85: 17:13:39:b7:7e:40:16:4c:76:56:2e:8f:03:f6:31:c4:7c:8b: 26:cd:36:b5:d3:fd:c3:29:09:74:02:9d:62:a9:87:02:4a:68: 8d:57:bf:92:59:58:11:59:c7:64:cc:28:97:08:75:09:0a:8c: bf:47:89:16:cb:a7:a5:5f:e1:7a:a8:c0:4a:fe:41:1c:85:66: 7c:37:01:b3:65:8f:c5:2e:c6:bb:ab:5b:f5:b9:db:0a:15:5d: 62:44:11:a6:8b:2a:8f:db:53:e3:44:31:a2:f2:cb:b4:69:bf: 89:91:18:af:85:2f:bf:8a:6c:23:cc:27:c3:3e:66:06:8c:ee: 9b:21:7e:1e:de:38:56:d8:14:e4:8d:eb:7c:f8:08:d4:74:cd: 0f:b7:a5:a8:85:5f:02:29:cf:85:96:b5:fe:3c:7b:0c:fb:0a: 5c:93:1f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKENGQzAyN0JENjZGMDg5RDM2OUNCNTk1RTA2MDI1RTJE REQxOUUzODIwHhcNMjQwNTE5MDQyNDQ0WhcNMjQwNTI2MDQyNDQ0WjAYMRYwFAYD VQQDEw02NjQ5N2YwZC0yYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sisdvX/SsPbAOTlOzODG5LwRInCiwsX0RLKN9j+QzlddkMLUVus3sz16g7c TVTS9gxe6SF/QbEBPdDYeaHVWhQ1up92VN/t3C8NymTXybof0UL5qazMA+0oO6Xp bi+WdbzbU2MeCoCSE/NXJUB5yleKwzlyJ1ezXO1abZV9wHPi+Ll787wakSCIq9pl D2TBnVkU+dWek3ziKM18NA5n/BvoArFvL/mwsOekuqa2jR8QhP+uJw9FFGFFeVfp UEzB1HrfDeroiun5F+SXDVNAfN8DO07ddguEH0ov9o2PV30XeHFpqQmlhKfG/T73 nJ85XnntRo4NKwpP2qWy1xfSQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXsiXGu 2YnlxmH5b9s7oSpIJFFvMB8GA1UdIwQYMBaAFM/AJ71m8InTactZXgYCXi3dGeOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9EQkVFNDMxODA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi96OEFudldid2lkTnB5MWxlQmdKZUxkMFo0 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o4QW52V2J3aWROcHkxbGVCZ0plTGQwWjQ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9EQkVFNDMxODA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi96OEFudldid2lk TnB5MWxlQmdKZUxkMFo0NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKnLK+q/c9GQQDVvrCqOdoDkoq0W4wH0LAtCBcETkk5RWDeWHQcNRZ vDNr0XVjx3EL9iR9MzHrjqLfUkga2IRrMPtTiCr5bUdP/IjqkHDxom51iiUkVCg9 DIUXEzm3fkAWTHZWLo8D9jHEfIsmzTa10/3DKQl0Ap1iqYcCSmiNV7+SWVgRWcdk zCiXCHUJCoy/R4kWy6elX+F6qMBK/kEchWZ8NwGzZY/FLsa7q1v1udsKFV1iRBGm iyqP21PjRDGi8su0ab+JkRivhS+/imwjzCfDPmYGjO6bIX4e3jhW2BTkjet8+AjU dM0Pt6WohV8CKc+FlrX+PHsM+wpckx+c -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org