$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft File: IEZaOpwIN-e2iDBzNx26CSIvv0o.mft (raw, json) Hash identifier: GfmVZCneIa1ub6/psMllqZJhAEci4ilgvOlaCTA5FAE= Subject key identifier: FB:B5:81:83:0A:49:08:5E:DE:C4:9D:2C:9E:05:01:1E:B8:53:56:E3 Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A Certificate issuer: /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft Manifest number: 0605 Signing time: Sat 18 May 2024 23:54:08 +0000 Manifest this update: Sat 18 May 2024 23:54:08 +0000 Manifest next update: Sat 25 May 2024 23:54:08 +0000 Files and hashes: 1: IEZaOpwIN-e2iDBzNx26CSIvv0o.crl (hash: MvX+9gUsw3AjwnahkpMuKxmIo6uHMdAm4QcuNc2QNJo=) 2: 9CC98174539711EEA9B2324DC4F9AE02.roa (hash: 57P64bVmIRF2URitVRXKDt0UIZdjZD8e9qR1JL8e3CE=) 3: 45490AB25AD611EB946A2C37C4F9AE02.roa (hash: MvSnhG1Tw3jH9r3zlt7DFdvsRZP7y0XecmpUqHlHCS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A Validity Not Before: May 18 23:54:08 2024 GMT Not After : May 25 23:54:08 2024 GMT Subject: CN=66493fa0-ba02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:bf:70:71:08:e3:30:6f:e3:4f:69:65:c5: a1:c6:0b:38:65:09:e1:b6:1d:de:56:ab:ef:2e:a4: f0:26:d4:77:5c:f4:f8:e1:f9:00:02:40:84:a1:66: 48:2a:ca:92:06:45:a4:f5:5f:e7:e4:cf:8e:9c:ab: 72:fa:d9:42:a2:e5:fa:d3:bf:59:16:9e:48:03:2f: 8e:75:be:4e:4d:94:c6:64:fc:63:4c:5b:86:b6:b1: 58:ca:ae:59:7b:b0:bf:11:17:05:88:54:23:54:41: c3:88:8f:1a:12:8e:e6:59:e1:2a:5e:4d:67:32:43: c7:c2:1f:76:80:b7:0f:9e:c4:9a:55:d4:1d:7c:bc: f1:91:84:fe:7b:14:ec:fc:59:e7:41:5f:0e:72:1c: de:3d:f4:d8:e2:ce:7d:03:5e:89:d6:49:5d:49:36: da:20:dd:b0:0a:08:32:bc:b0:dc:89:a5:91:4b:6e: f3:1a:ba:b5:9e:a6:80:ec:1a:86:b3:9d:64:40:fb: 6d:b5:38:ea:09:dd:72:9a:af:2b:96:d7:31:5e:37: 36:08:48:05:ff:77:22:64:76:fb:d5:f9:cf:b9:10: 91:74:6e:87:08:1e:c0:b8:1d:f5:65:4d:1b:f1:99: fb:3e:64:28:4d:fd:c1:03:f1:1c:94:7d:98:e0:f8: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:81:83:0A:49:08:5E:DE:C4:9D:2C:9E:05:01:1E:B8:53:56:E3 X509v3 Authority Key Identifier: keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:b2:23:95:e5:62:79:2d:71:5c:d9:4c:ec:5a:8f:09:99: 33:40:4c:e2:1c:9d:75:66:3e:8c:d9:27:1c:c5:76:94:6f:27: c3:13:28:62:62:c5:1c:4f:1b:a3:76:8c:2e:48:df:86:bd:b6: f0:b7:25:d7:d8:ef:17:3f:22:9d:de:2d:56:bc:d0:d0:5c:27: 3b:c1:4a:9a:3e:4c:52:13:c2:a8:58:b3:d9:bc:2e:2c:86:7e: e1:76:49:47:2c:1e:a6:ec:81:e6:18:f2:13:f7:1c:fd:99:89: 23:9a:45:30:6f:21:2e:04:f0:46:a1:67:c1:f5:3b:ad:31:80: 57:6e:86:cc:54:13:d9:c6:ef:ea:95:1e:c7:89:8e:1a:07:38: 34:27:5b:ff:35:55:da:cf:3c:7b:ca:d0:f4:16:d1:2f:d9:30: 72:3c:2a:e9:e1:4d:c4:aa:2f:47:65:66:01:59:38:12:0c:e2: c6:25:a0:7d:52:fb:5d:f6:da:46:1f:63:40:b4:83:82:05:da: fb:bd:27:7d:52:d3:a5:eb:78:78:63:89:b6:75:e9:59:b6:0e: 4a:d3:5b:56:92:ca:28:8f:83:22:09:d2:f0:51:e2:30:2a:b0: fd:bb:82:a9:cd:cf:4c:17:0d:ac:23:b3:5b:b4:5e:44:ae:0b: 23:84:79:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4OTcxMTAvBgNVBAUTKDIwNDY1QTNBOUMwODM3RTdCNjg4MzA3MzM3MURCQTA5 MjIyRkJGNEEwHhcNMjQwNTE4MjM1NDA4WhcNMjQwNTI1MjM1NDA4WjAYMRYwFAYD VQQDEw02NjQ5M2ZhMC1iYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iS/cHEI4zBv409pZcWhxgs4ZQnhth3eVqvvLqTwJtR3XPT44fkAAkCEoWZI KsqSBkWk9V/n5M+OnKty+tlCouX6079ZFp5IAy+Odb5OTZTGZPxjTFuGtrFYyq5Z e7C/ERcFiFQjVEHDiI8aEo7mWeEqXk1nMkPHwh92gLcPnsSaVdQdfLzxkYT+exTs /FnnQV8OchzePfTY4s59A16J1kldSTbaIN2wCggyvLDciaWRS27zGrq1nqaA7BqG s51kQPtttTjqCd1ymq8rltcxXjc2CEgF/3ciZHb71fnPuRCRdG6HCB7AuB31ZU0b 8Zn7PmQoTf3BA/EclH2Y4PjnoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPu1gYMK SQhe3sSdLJ4FAR64U1bjMB8GA1UdIwQYMBaAFCBGWjqcCDfntogwczcdugkiL79K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg5Ny8wOTc3MTE5MjVB RDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4tZTJpREJ6TngyNkNTSXZ2 MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFWmFPcHdJTi1lMmlEQnpOeDI2Q1NJdnYwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDg5Ny8wOTc3MTE5MjVBRDUxMUVCOTQ1QzRCMzZDNEY5QUUwMi9JRVphT3B3SU4t ZTJpREJ6TngyNkNTSXZ2MG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqR7IjleVieS1xXNlM7FqPCZkzQEziHJ11Zj6M2SccxXaUbyfDEyhi YsUcTxujdowuSN+GvbbwtyXX2O8XPyKd3i1WvNDQXCc7wUqaPkxSE8KoWLPZvC4s hn7hdklHLB6m7IHmGPIT9xz9mYkjmkUwbyEuBPBGoWfB9TutMYBXbobMVBPZxu/q lR7HiY4aBzg0J1v/NVXazzx7ytD0FtEv2TByPCrp4U3Eqi9HZWYBWTgSDOLGJaB9 Uvtd9tpGH2NAtIOCBdr7vSd9UtOl63h4Y4m2delZtg5K01tWksooj4MiCdLwUeIw KrD9u4Kpzc9MFw2sI7NbtF5ErgsjhHlN -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org