$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: YdGXg6LkpOS8OHSmyHi5VF9SbcfYYfeK6WNe49jomXE= Subject key identifier: 60:68:36:6C:1B:43:30:A2:DE:A4:A9:85:F1:43:6E:53:8A:E7:DF:3E Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: 3E Signing time: Sun 19 May 2024 08:13:17 +0000 Manifest this update: Sun 19 May 2024 08:13:16 +0000 Manifest next update: Sun 26 May 2024 08:13:16 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: sKY6RZTf9Ivv9vQNE2WVJuqkM/Q5DJIK6CjYwQ5DGuE=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: Yh/0O+/9sJ9Bo7kh2InfCjfpVJvuhcPwhFDv9ZgEWQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: May 19 08:13:16 2024 GMT Not After : May 26 08:13:16 2024 GMT Subject: CN=6649b49c-f43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:97:cd:8e:14:af:09:02:58:11:fd:9e:4b: e3:e5:e5:c4:26:3d:fd:a4:dd:c1:9e:bb:f8:e3:b6: 41:8e:55:cc:96:1c:57:8f:b3:7b:5f:f0:48:b1:2a: 85:06:66:a0:8e:e7:a2:76:81:0b:0e:86:92:3d:9c: 29:06:9f:da:de:d7:05:de:6a:ff:35:e7:a4:31:a4: 54:e8:cb:9b:f6:33:45:60:5f:93:51:df:4e:bd:39: fd:fb:26:aa:58:c6:2f:cd:63:8b:a6:b9:e6:5a:9b: de:c6:3b:35:dd:b5:5e:96:a3:58:e8:a3:ac:c7:6e: d9:50:a8:59:06:d2:21:2d:32:fe:7b:86:a3:e3:ca: 70:1b:21:bc:d4:e5:72:1f:9b:58:74:1a:21:34:56: 66:a0:ef:72:23:2e:65:3e:ce:b5:44:60:77:5e:a3: c6:72:68:25:b8:b3:db:36:08:31:fb:cb:9e:37:51: a7:42:eb:01:25:cd:2a:e1:4e:5b:81:11:c5:6f:21: 5f:7b:49:93:13:56:25:76:53:7f:41:b0:c6:de:26: 0f:ff:b3:ce:e2:4a:ac:57:8d:2d:41:26:b2:0b:d2: 12:31:6a:9f:1f:87:ec:e1:21:89:26:fa:a9:e0:5c: ca:bf:2c:13:01:d6:ed:cd:0b:f8:2e:68:a3:8f:aa: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:36:6C:1B:43:30:A2:DE:A4:A9:85:F1:43:6E:53:8A:E7:DF:3E X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:a6:bd:4c:36:5e:b6:73:c0:c8:b3:50:0e:02:57:c1:82:72: d5:f8:24:1f:2b:3f:42:a2:a5:90:31:50:95:ad:20:4e:af:da: d3:56:5e:6f:42:51:9d:cf:1a:be:7e:4c:9e:74:f8:36:11:fa: 84:75:20:b9:ef:97:1e:8c:d1:9c:5b:3f:09:4c:8c:91:81:1d: 82:0c:b4:3d:f4:22:21:ed:79:06:75:d8:b8:2c:3a:36:1d:24: e1:fd:a9:34:90:be:10:3f:53:5d:3f:94:69:d4:a5:d2:a9:22: 4d:62:77:34:6e:80:8d:6c:78:77:b8:5e:63:ca:a5:ab:00:2c: f7:26:0b:15:e0:b6:2b:8d:d8:53:02:f3:b9:15:07:6f:0f:ec: 4e:a4:db:0a:66:2a:af:78:fd:e8:0c:ea:18:a9:12:b0:d8:c7: a6:45:a4:b0:38:a9:bb:9e:5c:29:a1:61:dc:bd:e2:3a:e5:91: db:c4:fa:00:e1:08:01:b0:3b:cb:0c:8d:29:5b:39:19:99:6e: 5b:0d:4d:e6:8b:10:7c:2a:69:e0:e6:19:bd:75:9b:1a:47:49: 5a:45:f5:1f:45:18:b9:b6:09:f8:c5:4d:90:87:32:11:f8:61: 1a:c9:46:bd:7d:21:d2:f5:21:69:fb:0a:0b:ae:82:cf:85:9f: 9f:a1:93:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTM0RTExMC8GA1UEBRMoNjUzODgxOUYzQkY0OTMyQ0EwODJDMTQ2QUYyRkVBQ0JF Rjg3OENCODAeFw0yNDA1MTkwODEzMTZaFw0yNDA1MjYwODEzMTZaMBgxFjAUBgNV BAMTDTY2NDliNDljLWY0M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtJfNjhSvCQJYEf2eS+Pl5cQmPf2k3cGeu/jjtkGOVcyWHFePs3tf8EixKoUG ZqCO56J2gQsOhpI9nCkGn9re1wXeav8156QxpFToy5v2M0VgX5NR3069Of37JqpY xi/NY4umueZam97GOzXdtV6Wo1joo6zHbtlQqFkG0iEtMv57hqPjynAbIbzU5XIf m1h0GiE0Vmag73IjLmU+zrVEYHdeo8ZyaCW4s9s2CDH7y543UadC6wElzSrhTluB EcVvIV97SZMTViV2U39BsMbeJg//s87iSqxXjS1BJrIL0hIxap8fh+zhIYkm+qng XMq/LBMB1u3NC/guaKOPqqpJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYGg2bBtD MKLepKmF8UNuU4rn3z4wHwYDVR0jBBgwFoAUZTiBnzv0kyyggsFGry/qy++HjLgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMzRFLzJCRkYxNDEyQkI1 RDExRUU4MzMwMjA3M0M0RjlBRTAyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpM Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlRpQm56djBreXlnZ3NGR3J5X3F5LS1IakxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MzRFLzJCRkYxNDEyQkI1RDExRUU4MzMwMjA3M0M0RjlBRTAyL1pUaUJuenYwa3l5 Z2dzRkdyeV9xeS0tSGpMZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOemvUw2XrZzwMizUA4CV8GCctX4JB8rP0KipZAxUJWtIE6v2tNWXm9C UZ3PGr5+TJ50+DYR+oR1ILnvlx6M0ZxbPwlMjJGBHYIMtD30IiHteQZ12LgsOjYd JOH9qTSQvhA/U10/lGnUpdKpIk1idzRugI1seHe4XmPKpasALPcmCxXgtiuN2FMC 87kVB28P7E6k2wpmKq94/egM6hipErDYx6ZFpLA4qbueXCmhYdy94jrlkdvE+gDh CAGwO8sMjSlbORmZblsNTeaLEHwqaeDmGb11mxpHSVpF9R9FGLm2CfjFTZCHMhH4 YRrJRr19IdL1IWn7Cguugs+Fn5+hk4I= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org