$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: JzMNHzLFjFsvLUZv2pBPsYmPT5KRXXnjnS67knlXm+o= Subject key identifier: 78:7F:0D:23:20:DD:9F:D2:1B:55:59:C7:B1:58:71:FC:4B:CA:36:9B Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 012E Signing time: Sun 19 May 2024 05:05:10 +0000 Manifest this update: Sun 19 May 2024 05:05:09 +0000 Manifest next update: Sun 26 May 2024 05:05:09 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: LeOWR8OCZ0ltkrwONuSTr/GwL8AXyLAtnKd11xf38qo=) 2: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: GDcwhYa5gbI2gcDqevQwJxlm3RfAbXFF4Z8H2JAMaHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: May 19 05:05:09 2024 GMT Not After : May 26 05:05:09 2024 GMT Subject: CN=66498885-33eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:ec:76:bb:bd:de:78:9c:1c:5b:93:7a:d9: ba:83:d5:00:7a:43:8b:80:ee:09:17:54:4e:f6:be: 0d:bb:24:be:67:46:c5:43:e2:cb:fb:9b:e4:33:50: 8f:5e:ed:87:3b:da:33:f8:99:bb:2c:b7:89:27:44: 08:f7:08:95:d7:a5:ae:63:c3:77:2b:bd:a8:6a:68: 2d:9b:b2:d3:c3:c3:df:2c:8d:0a:91:84:a4:f9:c3: 21:86:22:66:9b:79:b3:b5:b2:e2:c0:ff:e3:78:4a: 45:7c:85:ec:55:db:3b:be:bb:4a:4a:bc:c2:ac:e3: e0:6e:1f:45:37:89:33:63:6a:ae:4e:41:9b:c3:87: de:28:84:35:5a:79:23:51:1f:ae:79:b0:60:ed:e1: 07:37:74:16:8e:11:27:f6:37:49:28:67:65:ce:f2: fa:32:26:df:14:3c:29:41:93:f2:2c:cb:4f:11:23: 22:70:24:d3:72:1b:3b:58:f9:5f:23:57:a8:26:68: a4:36:0a:5f:7c:55:df:43:33:71:75:9b:da:73:0e: 9d:80:fd:9e:54:f0:14:3d:bd:6a:50:44:d2:3e:1e: 33:85:c0:54:c8:ed:c4:bd:94:f0:68:61:fc:bb:3c: 0a:4e:a5:38:b9:ba:c5:f0:2b:29:a6:34:35:da:08: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:0D:23:20:DD:9F:D2:1B:55:59:C7:B1:58:71:FC:4B:CA:36:9B X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d2:91:ee:a4:a1:2c:65:4f:83:e2:db:3b:fc:ec:c2:00:27: 2b:0e:a5:a0:f2:7f:ff:2d:13:88:d5:3c:18:11:6e:f4:05:4f: 0f:d5:0e:d9:4f:69:4a:bf:29:7b:41:ef:40:30:b7:2b:1c:e2: 82:48:2f:ba:87:b4:25:79:e4:08:bd:6c:2e:2a:94:d9:42:0d: c8:db:72:b2:6d:ab:6f:e3:3d:17:62:f5:86:82:b5:e9:25:67: 32:1c:9a:d0:91:aa:d8:bf:14:3f:71:2f:63:4a:c7:f3:00:ae: 9d:b0:a7:52:ab:9c:aa:9b:a2:38:34:62:f9:ac:f4:84:bc:d5: ac:95:8e:29:76:5c:ca:5a:ff:de:8d:1b:85:76:f3:6f:70:28: c5:07:ae:83:33:e2:55:6d:23:f8:dd:73:78:b4:ac:47:ee:99: 31:98:33:ca:a0:ed:87:22:d1:39:0c:6b:15:e0:1d:fa:81:a1: fb:05:57:7d:2e:39:ff:f5:38:ca:2b:da:23:55:41:2c:14:1c: 55:f7:d6:76:21:5d:8f:25:33:e3:ac:15:1b:73:77:30:bc:9e: 1c:21:38:c6:55:ac:a1:cd:87:2f:56:15:8b:3d:bf:49:56:17: 52:19:a9:99:60:47:3f:f5:14:58:0c:b5:9e:d2:d2:69:70:12: 36:0e:81:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjQwNTE5MDUwNTA5WhcNMjQwNTI2MDUwNTA5WjAYMRYwFAYD VQQDEw02NjQ5ODg4NS0zM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnnsdru93nicHFuTetm6g9UAekOLgO4JF1RO9r4NuyS+Z0bFQ+LL+5vkM1CP Xu2HO9oz+Jm7LLeJJ0QI9wiV16WuY8N3K72oamgtm7LTw8PfLI0KkYSk+cMhhiJm m3mztbLiwP/jeEpFfIXsVds7vrtKSrzCrOPgbh9FN4kzY2quTkGbw4feKIQ1Wnkj UR+uebBg7eEHN3QWjhEn9jdJKGdlzvL6MibfFDwpQZPyLMtPESMicCTTchs7WPlf I1eoJmikNgpffFXfQzNxdZvacw6dgP2eVPAUPb1qUETSPh4zhcBUyO3EvZTwaGH8 uzwKTqU4ubrF8CsppjQ12gig8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHh/DSMg 3Z/SG1VZx7FYcfxLyjabMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0pHupKEsZU+D4ts7/OzCACcrDqWg8n//LROI1TwYEW70BU8P1Q7Z T2lKvyl7Qe9AMLcrHOKCSC+6h7QleeQIvWwuKpTZQg3I23Kybatv4z0XYvWGgrXp JWcyHJrQkarYvxQ/cS9jSsfzAK6dsKdSq5yqm6I4NGL5rPSEvNWslY4pdlzKWv/e jRuFdvNvcCjFB66DM+JVbSP43XN4tKxH7pkxmDPKoO2HItE5DGsV4B36gaH7BVd9 Ljn/9TjKK9ojVUEsFBxV99Z2IV2PJTPjrBUbc3cwvJ4cITjGVayhzYcvVhWLPb9J VhdSGamZYEc/9RRYDLWe0tJpcBI2DoFW -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org