$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: LTqVc0zSompoB6K2+5AXjG22MdijVSNIwJTAAld37ZQ= Subject key identifier: 24:DB:A2:B3:8F:72:36:9E:C3:4B:29:ED:3D:DD:1A:93:5E:2A:4A:CD Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0B89 Signing time: Sat 18 May 2024 19:18:38 +0000 Manifest this update: Sat 18 May 2024 19:18:37 +0000 Manifest next update: Sat 25 May 2024 19:18:37 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: mMDZ27c3giEJDkW5dCC8FOJAgZsm2Fw6Mh/VC/CXG3Q=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: TfslzRg8GnFh8WZZlRlz17hq1aYEemXqD5Pt4nOxrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: May 18 19:18:37 2024 GMT Not After : May 25 19:18:37 2024 GMT Subject: CN=6648ff0d-eb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:8d:05:59:87:06:e3:82:26:19:36:dc:fd: b7:16:62:f7:10:a0:7e:81:92:21:f6:24:5f:dc:e7: 49:95:a2:2a:36:88:e0:c3:36:5d:1b:6d:07:25:c5: dd:1b:61:4a:17:4d:30:3a:d4:82:1c:38:7a:b2:43: c2:3e:1a:4f:32:6a:81:64:52:fe:53:c4:50:8f:33: ad:ea:01:b3:ce:af:0e:40:f3:33:97:b3:ed:5c:36: 53:c3:11:d7:6e:a9:d9:db:4e:2b:44:1c:0b:cb:fa: ab:be:ba:8c:02:61:cf:4d:d6:63:fa:34:5a:e4:ad: 47:57:76:7e:da:77:96:02:4a:ab:6c:3a:fa:a1:d3: 00:3e:30:ef:fe:69:be:9e:8e:0c:3f:b1:65:89:36: 3d:98:80:08:ae:4f:31:5d:88:78:a0:4b:a0:2c:b5: ab:27:f0:60:28:11:6b:cd:fb:ca:89:6f:5c:dc:92: 28:c5:2b:60:30:ff:a0:ad:8c:40:4f:0a:a1:74:7f: 6f:41:9b:53:5e:e4:37:19:8c:45:07:ff:e3:f4:7b: 33:07:10:e6:19:04:ed:2a:1b:d3:99:2c:5a:c6:75: 5f:59:07:d1:67:02:79:ad:72:1c:84:9a:cf:59:6b: f6:fd:86:6d:fc:02:eb:9d:8d:69:27:99:46:1b:0e: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DB:A2:B3:8F:72:36:9E:C3:4B:29:ED:3D:DD:1A:93:5E:2A:4A:CD X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:74:36:c9:e8:fa:85:53:e8:5f:8a:f0:9d:1f:85:bf:51:7a: c3:29:06:48:1a:3c:01:a9:40:bc:55:37:d4:7b:e8:79:d4:65: ec:eb:c2:3e:e9:ff:a8:e4:c2:a9:aa:91:13:3e:01:d3:8f:3b: 04:5e:b4:5f:9e:a8:18:05:59:4f:0a:d0:e8:e1:f4:57:47:38: c4:03:51:c9:ad:31:92:27:c2:37:fd:fa:33:a1:d1:b7:26:6a: 59:80:72:40:a2:3e:26:7f:e3:a8:54:63:84:86:16:52:b3:5a: 8d:8f:19:1c:d5:0e:16:4a:9f:d2:3d:a1:2c:30:2e:ef:ef:64: cb:e9:6e:e5:6f:48:d6:50:84:5b:74:68:5e:fa:ef:28:b7:e0: 8a:f9:f8:3c:8c:96:83:94:35:24:27:80:0c:2e:a1:dc:4d:27: 1b:e1:1d:48:ce:46:e6:1f:53:50:54:3f:f5:35:49:43:46:cc: bc:27:58:ac:33:3d:7d:42:92:b0:23:52:2b:9d:ae:ea:6b:29: 63:84:dd:71:60:29:ab:14:2f:57:cd:cc:cc:5e:5a:0c:e2:de: a6:0a:66:87:e1:d6:87:67:c7:69:2a:05:35:3e:18:cf:38:ee: 4b:d3:5c:bc:5c:68:73:49:8d:52:52:38:5d:18:a6:77:03:da: b2:d7:48:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjQwNTE4MTkxODM3WhcNMjQwNTI1MTkxODM3WjAYMRYwFAYD VQQDEw02NjQ4ZmYwZC1lYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZWNBVmHBuOCJhk23P23FmL3EKB+gZIh9iRf3OdJlaIqNojgwzZdG20HJcXd G2FKF00wOtSCHDh6skPCPhpPMmqBZFL+U8RQjzOt6gGzzq8OQPMzl7PtXDZTwxHX bqnZ204rRBwLy/qrvrqMAmHPTdZj+jRa5K1HV3Z+2neWAkqrbDr6odMAPjDv/mm+ no4MP7FliTY9mIAIrk8xXYh4oEugLLWrJ/BgKBFrzfvKiW9c3JIoxStgMP+grYxA TwqhdH9vQZtTXuQ3GYxFB//j9HszBxDmGQTtKhvTmSxaxnVfWQfRZwJ5rXIchJrP WWv2/YZt/ALrnY1pJ5lGGw6TvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTborOP cjaew0sp7T3dGpNeKkrNMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzdDbJ6PqFU+hfivCdH4W/UXrDKQZIGjwBqUC8VTfUe+h51GXs68I+ 6f+o5MKpqpETPgHTjzsEXrRfnqgYBVlPCtDo4fRXRzjEA1HJrTGSJ8I3/fozodG3 JmpZgHJAoj4mf+OoVGOEhhZSs1qNjxkc1Q4WSp/SPaEsMC7v72TL6W7lb0jWUIRb dGhe+u8ot+CK+fg8jJaDlDUkJ4AMLqHcTScb4R1IzkbmH1NQVD/1NUlDRsy8J1is Mz19QpKwI1Irna7qayljhN1xYCmrFC9XzczMXloM4t6mCmaH4daHZ8dpKgU1PhjP OO5L01y8XGhzSY1SUjhdGKZ3A9qy10jR -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org