$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: AW/AT/l1FxcHoBRefbsbDPYC7XGT8VlCKXT2szMdFK4= Subject key identifier: 0B:E7:40:1E:68:09:23:02:B0:80:B9:A7:D9:66:00:90:86:55:5D:97 Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 072A Signing time: Sat 18 May 2024 22:40:11 +0000 Manifest this update: Sat 18 May 2024 22:40:10 +0000 Manifest next update: Sat 25 May 2024 22:40:10 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: EpKr6tw+/gVnGS+qBoavcAe/XRluNrY0j1I/Mg85kLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: May 18 22:40:10 2024 GMT Not After : May 25 22:40:10 2024 GMT Subject: CN=66492e4a-bfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:f2:25:c6:00:5b:2b:56:59:11:18:15:05: d7:d4:8d:e8:f7:d8:bd:c0:69:64:8f:8f:60:ac:5a: 61:a5:f5:a6:6a:ea:9b:e8:50:df:b7:28:e0:ea:9d: e4:f3:57:d3:aa:26:e9:3e:a0:93:e3:28:4d:43:32: ad:02:7a:34:8b:e2:db:a6:00:b2:ef:e1:fb:fd:66: 94:db:bc:93:a1:99:9b:85:16:eb:09:2d:0c:62:8b: e3:ce:25:17:97:9d:de:5c:b9:8c:ad:91:99:f9:e1: fe:33:8e:f2:0a:99:ce:81:f7:aa:ca:18:4c:fd:6c: 3d:23:e7:a3:38:e0:28:e9:fc:d9:27:7d:c9:15:6d: 95:37:ef:3b:3a:0a:47:b0:f8:aa:5b:7f:78:94:f5: 4f:b0:62:07:f1:4e:6b:10:08:f9:68:4c:88:8d:ba: 23:dd:da:a4:de:67:3f:68:53:49:6a:9d:ac:5a:ca: 28:28:56:15:c9:a1:e2:41:69:c6:f9:53:b9:54:4b: d5:17:56:41:f4:83:65:6b:c5:6b:84:fb:bb:bc:39: 95:0b:c0:a4:37:4c:9d:a3:0a:52:60:7e:25:4c:f9: 97:8f:2e:93:a5:19:17:2b:db:f6:93:a3:67:62:2a: 44:f6:04:de:9d:29:95:69:a6:98:f9:ad:be:16:8a: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:40:1E:68:09:23:02:B0:80:B9:A7:D9:66:00:90:86:55:5D:97 X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:10:34:99:91:df:e0:4b:32:e2:c4:a8:47:7f:5f:fd:d1:5e: 1e:59:21:b5:9a:e1:1a:c7:4e:3c:3c:31:0d:fb:c6:bd:04:10: 0a:8b:a5:f6:36:7d:cf:44:d8:51:35:34:d0:0c:40:97:ab:79: f9:dc:da:e6:fe:d5:87:63:5c:3d:12:12:72:27:54:a7:79:18: 83:8b:5a:e4:1c:8e:a1:0e:d7:f0:eb:66:55:8a:92:a2:ee:a6: b5:25:39:93:9d:15:61:9e:4b:a4:f3:6e:96:7a:7e:f0:a0:ff: 26:d1:29:e5:55:cd:a7:54:d3:29:26:1b:e5:86:8b:41:0d:ed: 57:f3:ac:93:6a:85:c3:46:44:1a:0e:fe:f9:6d:8a:d0:cb:93: 59:2d:96:80:a3:0f:33:f3:60:0c:34:54:00:6f:97:43:b7:10: 48:49:78:58:f2:5e:62:3e:33:52:81:86:31:7b:98:70:3f:92: df:23:2d:c8:37:23:dc:bc:98:e9:9c:11:3e:fa:08:e5:6a:bb: fa:ac:11:69:9a:8e:0a:5a:bd:d5:d0:a0:79:05:e8:85:06:5a: 6b:a6:1c:c2:58:0c:95:03:35:59:73:b7:6b:61:61:e0:f1:d8: 4c:80:58:30:fa:00:6f:b6:8f:4a:40:89:5f:95:f6:23:a6:75: 2e:3c:98:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjQwNTE4MjI0MDEwWhcNMjQwNTI1MjI0MDEwWjAYMRYwFAYD VQQDEw02NjQ5MmU0YS1iZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VTyJcYAWytWWREYFQXX1I3o99i9wGlkj49grFphpfWmauqb6FDftyjg6p3k 81fTqibpPqCT4yhNQzKtAno0i+LbpgCy7+H7/WaU27yToZmbhRbrCS0MYovjziUX l53eXLmMrZGZ+eH+M47yCpnOgfeqyhhM/Ww9I+ejOOAo6fzZJ33JFW2VN+87OgpH sPiqW394lPVPsGIH8U5rEAj5aEyIjboj3dqk3mc/aFNJap2sWsooKFYVyaHiQWnG +VO5VEvVF1ZB9INla8VrhPu7vDmVC8CkN0ydowpSYH4lTPmXjy6TpRkXK9v2k6Nn YipE9gTenSmVaaaY+a2+Fop45wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvnQB5o CSMCsIC5p9lmAJCGVV2XMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPEDSZkd/gSzLixKhHf1/90V4eWSG1muEax048PDEN+8a9BBAKi6X2 Nn3PRNhRNTTQDECXq3n53Nrm/tWHY1w9EhJyJ1SneRiDi1rkHI6hDtfw62ZVipKi 7qa1JTmTnRVhnkuk826Wen7woP8m0SnlVc2nVNMpJhvlhotBDe1X86yTaoXDRkQa Dv75bYrQy5NZLZaAow8z82AMNFQAb5dDtxBISXhY8l5iPjNSgYYxe5hwP5LfIy3I NyPcvJjpnBE++gjlarv6rBFpmo4KWr3V0KB5BeiFBlprphzCWAyVAzVZc7drYWHg 8dhMgFgw+gBvto9KQIlflfYjpnUuPJij -----END CERTIFICATE-----Generated at Sun May 19 00:30:17 2024 by rpki-client on console-ams.rpki-client.org