$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: w3l+CdQgsOHzZkVDfAekP2ws7w060PZV1NIBv0/imrE= Subject key identifier: 07:34:6A:C4:C3:91:62:6F:2A:BE:62:FB:39:FC:11:55:67:25:0C:12 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 6B Signing time: Sat 18 May 2024 17:00:54 +0000 Manifest this update: Sat 18 May 2024 17:00:54 +0000 Manifest next update: Sat 25 May 2024 17:00:54 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: ubKFoWAs7N0Nku0QoDeRxtwIYFxW/JJjO9H8+aGN8wg=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: t4KWE6nOao0jySz++9neoQOUBn9gNyPYtoMj0+W/YSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: May 18 17:00:54 2024 GMT Not After : May 25 17:00:54 2024 GMT Subject: CN=6648dec6-2a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:e6:2d:39:32:f5:87:ba:a3:8c:68:71:27: 4b:a2:db:7b:66:a9:6b:d4:3b:8d:30:12:f8:a0:db: 75:55:0f:5c:28:a9:70:65:3f:1e:5e:a6:48:7b:01: d0:4e:0c:3f:22:76:65:08:79:b5:29:53:bc:55:4b: ce:74:4e:22:d6:ca:5e:16:f0:d5:64:7e:18:23:a5: 89:f7:c0:09:e6:64:1b:e1:11:42:85:de:b6:d6:64: a6:5c:51:55:dc:6e:03:7e:06:2f:5c:12:ff:05:36: 2f:23:4b:e4:0d:40:24:2f:ad:5e:1f:01:9d:bc:ce: 74:3c:10:1e:ed:de:94:93:fd:ee:a4:08:97:40:0d: a3:56:b0:f0:05:27:55:b0:5a:ad:aa:1f:78:57:71: de:ea:d6:c9:7b:46:c0:39:04:8e:b0:05:71:8c:fc: 00:34:c1:52:ac:d2:43:1b:11:b3:c9:48:bb:7a:f2: 69:fd:d6:9c:48:bd:c4:39:aa:2b:d2:24:1f:d5:5a: e9:b2:10:c6:24:bf:4b:45:c7:ca:cb:46:bf:21:f4: c5:43:c4:b0:0c:7d:57:0f:6c:71:d3:98:f5:0a:ca: ec:33:cd:e6:9d:ad:44:a8:0f:ab:c0:2f:d4:93:60: 6d:8b:99:56:1d:58:02:70:11:0a:65:3f:4b:c6:18: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:6A:C4:C3:91:62:6F:2A:BE:62:FB:39:FC:11:55:67:25:0C:12 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5b:46:2e:59:0b:0e:f2:61:f2:b5:f0:1b:fb:30:48:43:55: b8:ec:1f:bf:f0:89:f2:fa:9f:68:c7:33:c4:46:78:e5:df:dc: 4c:87:68:25:10:a3:d1:c1:bc:0e:74:ca:25:a1:bd:fa:67:fb: 97:e1:b4:1a:f3:83:18:a7:49:9e:e1:a0:5e:00:d3:cf:fe:c1: c5:16:fd:1e:62:cf:7d:3b:53:6a:a8:98:31:c9:45:49:ea:69: 40:d6:22:6f:3d:d8:95:81:d8:9e:e7:60:4b:6b:f9:ab:3b:f1: 08:26:65:8c:5d:63:c5:11:e7:53:11:6a:c9:af:9b:19:2f:94: 50:c9:ae:00:34:7c:b1:dd:34:8c:6e:ab:79:7b:b7:a4:fd:bf: 67:12:ba:d6:ab:db:e9:99:63:96:4e:aa:07:35:40:52:88:bf: bf:e6:8a:eb:be:aa:0b:31:71:cd:0c:b8:ef:ff:21:f8:6f:f8: ec:a4:2e:50:48:65:62:27:a7:56:90:1e:b3:d4:cf:5c:ca:b3: cb:6a:75:ec:bd:7b:0b:eb:42:b2:8c:09:25:2c:21:52:d3:bf: 4c:ea:b5:75:ab:5f:96:1c:37:4f:ee:4d:91:00:f3:19:8d:9c: d9:4a:e9:b2:47:ec:df:8a:08:73:dd:39:bf:6e:d5:ca:12:32: c4:99:01:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDM2QTExMC8GA1UEBRMoN0I5Q0VEQzgzMjgwMjhBNzQ1NkU5QzQxNEJCNzdEQUZF QkNFNzY1RjAeFw0yNDA1MTgxNzAwNTRaFw0yNDA1MjUxNzAwNTRaMBgxFjAUBgNV BAMTDTY2NDhkZWM2LTJhMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmx+YtOTL1h7qjjGhxJ0ui23tmqWvUO40wEvig23VVD1woqXBlPx5epkh7AdBO DD8idmUIebUpU7xVS850TiLWyl4W8NVkfhgjpYn3wAnmZBvhEUKF3rbWZKZcUVXc bgN+Bi9cEv8FNi8jS+QNQCQvrV4fAZ28znQ8EB7t3pST/e6kCJdADaNWsPAFJ1Ww Wq2qH3hXcd7q1sl7RsA5BI6wBXGM/AA0wVKs0kMbEbPJSLt68mn91pxIvcQ5qivS JB/VWumyEMYkv0tFx8rLRr8h9MVDxLAMfVcPbHHTmPUKyuwzzeadrUSoD6vAL9ST YG2LmVYdWAJwEQplP0vGGOBBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBzRqxMOR Ym8qvmL7OfwRVWclDBIwHwYDVR0jBBgwFoAUe5ztyDKAKKdFbpxBS7d9r+vOdl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMzZBL0M2REQ1MUI0NzM2 RjExRUU5MTdEMDMzNEM0RjlBRTAyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2Rs OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTV6dHlES0FLS2RGYnB4QlM3ZDlyLXZPZGw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MzZBL0M2REQ1MUI0NzM2RjExRUU5MTdEMDMzNEM0RjlBRTAyL2U1enR5REtBS0tk RmJweEJTN2Q5ci12T2RsOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdbRi5ZCw7yYfK18Bv7MEhDVbjsH7/wifL6n2jHM8RGeOXf3EyHaCUQ o9HBvA50yiWhvfpn+5fhtBrzgxinSZ7hoF4A08/+wcUW/R5iz307U2qomDHJRUnq aUDWIm892JWB2J7nYEtr+as78QgmZYxdY8UR51MRasmvmxkvlFDJrgA0fLHdNIxu q3l7t6T9v2cSutar2+mZY5ZOqgc1QFKIv7/miuu+qgsxcc0MuO//Ifhv+OykLlBI ZWInp1aQHrPUz1zKs8tqdey9ewvrQrKMCSUsIVLTv0zqtXWrX5YcN0/uTZEA8xmN nNlK6bJH7N+KCHPdOb9u1coSMsSZARs= -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org