$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: WISi5XcC33vOjakXB6IarKk76c1kgoukTbginmGgEe4= Subject key identifier: BE:0F:49:13:81:DC:7B:E0:07:B3:4B:4F:38:57:23:A5:06:CA:2D:44 Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 5E Signing time: Sat 18 May 2024 17:26:46 +0000 Manifest this update: Sat 18 May 2024 17:26:46 +0000 Manifest next update: Sat 25 May 2024 17:26:46 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: LyldH4wb+Aj3fFtnoVdXVxNTtyhOUbcSgfY7mdCCLX8=) 2: A265A002901611EE89038D46C4F9AE02.roa (hash: Zt5qvo7bdT8x4NuI4JryFe04Cr3lcEVUUTE57WJ4weQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: May 18 17:26:46 2024 GMT Not After : May 25 17:26:46 2024 GMT Subject: CN=6648e4d6-c6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:ed:89:c3:97:e0:84:5e:12:c1:64:02:79: e9:4c:af:77:93:3d:2f:02:28:bb:ee:77:34:29:47: 92:f0:94:42:8f:4d:ee:c5:49:5a:8b:fd:3f:95:9f: b3:91:6e:6d:50:c8:a5:d5:14:9c:43:87:87:e4:b0: b2:e6:14:f6:2f:44:e2:dd:e4:00:0a:45:20:15:25: 12:fd:02:c1:53:70:bb:f5:66:59:3f:c3:af:72:c0: a2:e4:90:88:de:8f:a3:e5:2d:58:f7:79:8b:8c:19: 10:e5:e8:76:84:ab:bc:fa:33:0a:b7:04:8f:1b:2c: cb:52:c6:cf:73:72:0f:58:f6:97:00:67:b1:b1:00: 79:4f:1c:c9:47:4d:fd:55:d5:74:2d:8d:5b:aa:d9: 85:94:18:33:2d:5c:0e:2f:85:a7:e1:13:b0:d8:18: d5:58:49:bf:18:bb:1e:4e:04:f6:e1:b0:66:80:ba: fc:31:3c:7b:66:69:b7:20:29:15:e9:39:bc:2b:7f: 35:15:39:2d:c5:11:56:00:da:aa:49:69:ab:cd:61: f3:4f:53:57:22:62:67:e5:0f:3a:8e:f0:5d:7c:f7: c7:b7:93:47:2a:91:d2:40:e6:5d:bb:7b:62:00:7c: 3a:b5:01:fd:83:3d:16:67:b4:ab:26:86:37:61:c8: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0F:49:13:81:DC:7B:E0:07:B3:4B:4F:38:57:23:A5:06:CA:2D:44 X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:20:91:c6:2d:2a:60:8c:a2:7e:e6:2e:35:3e:f8:ae:0d:98: 8e:a8:5b:a6:5b:b6:bd:b9:c7:3e:e1:16:82:c8:1b:93:e4:ff: 69:a6:ad:5e:f5:e1:a1:4c:4b:9b:29:26:5a:17:b0:cb:f1:e6: b1:ed:a3:6f:33:94:02:32:b4:e7:23:2a:0d:f8:08:24:ac:20: 94:92:7c:6f:0e:ff:3c:c4:fd:69:40:14:ed:76:b1:43:4e:2f: 62:ac:20:8b:43:8b:8b:21:cc:62:27:68:2b:65:99:11:91:57: 00:b0:2c:cc:79:62:fe:51:1c:70:2d:6e:bd:37:e8:59:79:59: a8:90:46:52:00:a6:98:75:4d:ef:57:13:16:be:f5:44:cf:b3: 07:35:22:0d:1e:ae:5b:8a:79:41:37:9f:3d:16:4c:12:f2:77: 97:55:e6:1f:27:d4:d1:ce:7f:dd:ef:10:7d:4c:45:85:ca:01: 84:39:a3:e5:7d:4d:06:7d:da:22:4c:74:b3:69:30:54:39:c7: 01:a1:de:43:40:58:19:5c:e8:44:6a:8d:5d:e5:ba:06:14:4c: 33:5c:a1:95:2b:cd:95:34:1b:f4:cd:1a:52:ac:3f:1b:b9:52: 38:85:ad:2c:89:3f:9e:fe:db:60:fe:0c:96:d4:69:da:7d:1a: 01:bb:b1:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RkE0OTExMC8GA1UEBRMoQ0Q2NUU2NzQwQkFFN0VCMzNCRDVFNTM4QzlFRTZERThC MzM1NDQzMTAeFw0yNDA1MTgxNzI2NDZaFw0yNDA1MjUxNzI2NDZaMBgxFjAUBgNV BAMTDTY2NDhlNGQ2LWM2ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj3u2Jw5fghF4SwWQCeelMr3eTPS8CKLvudzQpR5LwlEKPTe7FSVqL/T+Vn7OR bm1QyKXVFJxDh4fksLLmFPYvROLd5AAKRSAVJRL9AsFTcLv1Zlk/w69ywKLkkIje j6PlLVj3eYuMGRDl6HaEq7z6Mwq3BI8bLMtSxs9zcg9Y9pcAZ7GxAHlPHMlHTf1V 1XQtjVuq2YWUGDMtXA4vhafhE7DYGNVYSb8Yux5OBPbhsGaAuvwxPHtmabcgKRXp ObwrfzUVOS3FEVYA2qpJaavNYfNPU1ciYmflDzqO8F1898e3k0cqkdJA5l27e2IA fDq1Af2DPRZntKsmhjdhyH8NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvg9JE4Hc e+AHs0tPOFcjpQbKLUQwHwYDVR0jBBgwFoAUzWXmdAuufrM71eU4ye5t6LM1RDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGQTQ5L0E0QzBDQTk2OTAw OTExRUU5RTU0QTAzM0M0RjlBRTAyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveldYbWRBdXVmck03MWVVNHllNXQ2TE0xUkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG QTQ5L0E0QzBDQTk2OTAwOTExRUU5RTU0QTAzM0M0RjlBRTAyL3pXWG1kQXV1ZnJN NzFlVTR5ZTV0NkxNMVJERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGAgkcYtKmCMon7mLjU++K4NmI6oW6Zbtr25xz7hFoLIG5Pk/2mmrV71 4aFMS5spJloXsMvx5rHto28zlAIytOcjKg34CCSsIJSSfG8O/zzE/WlAFO12sUNO L2KsIItDi4shzGInaCtlmRGRVwCwLMx5Yv5RHHAtbr036Fl5WaiQRlIApph1Te9X Exa+9UTPswc1Ig0erluKeUE3nz0WTBLyd5dV5h8n1NHOf93vEH1MRYXKAYQ5o+V9 TQZ92iJMdLNpMFQ5xwGh3kNAWBlc6ERqjV3lugYUTDNcoZUrzZU0G/TNGlKsPxu5 UjiFrSyJP57+22D+DJbUadp9GgG7sQg= -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org