$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: 4yaOEF42d1tpnpigiFIFySgapZdpYW79qYjEXHDGtWs= Subject key identifier: 44:09:17:E2:0C:21:0B:D3:0C:08:56:D3:E5:11:22:63:4B:20:D1:D6 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 03CE Signing time: Sun 19 May 2024 02:24:08 +0000 Manifest this update: Sun 19 May 2024 02:24:08 +0000 Manifest next update: Sun 26 May 2024 02:24:08 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: g7xuC3o77vxV70hTc++arXvN3q7mxz/U84qrgschV+0=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: ZZ3AWsXi2QuxvDhmH4XofVeIQLIAI+5UE6Sz9E2LloA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: May 19 02:24:08 2024 GMT Not After : May 26 02:24:08 2024 GMT Subject: CN=664962c8-906c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:f5:82:fb:d0:20:73:2e:3b:93:5b:0a:db: 40:95:7d:2d:8d:d4:57:7a:dd:81:86:2e:4a:cc:95: cf:61:b6:25:6a:32:e0:4b:44:b1:4f:7c:88:57:dd: bf:48:7c:f8:72:08:f0:d5:3d:2a:d7:69:6e:a5:f9: 6f:9d:16:bb:e7:31:10:c9:3d:31:48:9b:1c:8e:46: 27:96:3d:df:93:ea:e8:e5:be:e1:ca:2f:14:b1:11: c8:f6:0f:a3:af:55:1a:7d:7a:83:0f:17:45:62:65: a0:45:ac:44:ac:c7:3a:67:e5:ab:c8:c4:ab:f8:59: 92:fc:2f:71:13:63:1b:81:13:e0:3d:b6:2d:65:8d: f9:0d:f9:76:f3:72:43:4d:c2:07:e5:bb:53:0a:8b: 6a:5a:0b:20:1a:f1:dd:22:23:fb:7b:82:11:b1:ad: e2:6c:f9:8b:3a:61:08:27:fc:41:4c:95:41:04:0c: f0:67:a6:10:ea:d3:b1:aa:70:ae:d6:fd:ec:c1:ba: e7:8f:1f:f0:58:ac:ab:8a:23:55:a2:06:9c:d7:94: 59:7e:2f:ba:03:47:4e:1a:77:0e:8d:0d:d4:39:6e: 56:f8:fd:8f:6b:f5:11:81:b3:40:22:c4:16:55:39: 99:85:0c:92:c6:14:20:5c:6e:8e:ac:5c:2c:d9:65: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:09:17:E2:0C:21:0B:D3:0C:08:56:D3:E5:11:22:63:4B:20:D1:D6 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b8:19:34:09:f5:47:f6:d3:d6:c3:58:72:67:77:5b:81:04: a3:ba:f1:6f:18:91:5c:01:28:15:58:00:25:58:99:47:9e:bd: c1:a5:6d:47:04:c4:a7:b5:e8:e2:93:0a:29:e6:c8:75:f3:03: a3:d4:72:59:7e:c6:a1:8a:e0:ef:43:ac:f3:67:9a:1d:35:6f: 78:11:85:81:6a:10:64:09:71:7b:7f:1b:6e:eb:9b:ec:b5:a0: df:9d:15:14:10:a6:99:2a:f6:0b:60:1f:ca:f8:2e:05:8f:2a: 9b:89:b8:f0:d5:f9:c0:bb:d4:f5:19:6e:6e:1d:61:c0:1e:37: 42:b2:36:57:b2:47:70:fa:c6:9c:d2:46:4c:b9:03:f2:43:15: d4:7b:ff:ca:9c:14:80:27:79:e9:5f:d8:fc:47:57:5f:c3:b2: f2:7f:cb:42:2a:52:01:28:70:8f:c4:42:c8:19:83:13:e9:1b: 56:40:cf:aa:54:aa:4a:86:cf:40:4c:42:4f:96:f1:17:02:a9: 6b:f7:b8:49:8e:ff:c8:3f:8e:a6:51:9a:55:5f:46:1c:d6:09: 84:ba:b0:cb:aa:0f:e6:e4:21:1a:53:dd:7a:28:2f:28:3f:7c: f6:8a:05:6e:57:21:7d:6b:58:4b:ba:4e:48:cb:02:9d:bd:8f: fe:52:1b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjQwNTE5MDIyNDA4WhcNMjQwNTI2MDIyNDA4WjAYMRYwFAYD VQQDEw02NjQ5NjJjOC05MDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA31gvvQIHMuO5NbCttAlX0tjdRXet2Bhi5KzJXPYbYlajLgS0SxT3yIV92/ SHz4cgjw1T0q12lupflvnRa75zEQyT0xSJscjkYnlj3fk+ro5b7hyi8UsRHI9g+j r1UafXqDDxdFYmWgRaxErMc6Z+WryMSr+FmS/C9xE2MbgRPgPbYtZY35Dfl283JD TcIH5btTCotqWgsgGvHdIiP7e4IRsa3ibPmLOmEIJ/xBTJVBBAzwZ6YQ6tOxqnCu 1v3swbrnjx/wWKyriiNVogac15RZfi+6A0dOGncOjQ3UOW5W+P2Pa/URgbNAIsQW VTmZhQySxhQgXG6OrFws2WXHNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQJF+IM IQvTDAhW0+URImNLINHWMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRuBk0CfVH9tPWw1hyZ3dbgQSjuvFvGJFcASgVWAAlWJlHnr3BpW1H BMSntejikwop5sh18wOj1HJZfsahiuDvQ6zzZ5odNW94EYWBahBkCXF7fxtu65vs taDfnRUUEKaZKvYLYB/K+C4Fjyqbibjw1fnAu9T1GW5uHWHAHjdCsjZXskdw+sac 0kZMuQPyQxXUe//KnBSAJ3npX9j8R1dfw7Lyf8tCKlIBKHCPxELIGYMT6RtWQM+q VKpKhs9ATEJPlvEXAqlr97hJjv/IP46mUZpVX0Yc1gmEurDLqg/m5CEaU916KC8o P3z2igVuVyF9a1hLuk5IywKdvY/+UhuB -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org