$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: +6YcmEX0jbcEycyetlPZVIrys44cgUW/3/jEemR5V1I= Subject key identifier: BC:4A:E9:15:47:5A:F0:3B:28:CE:30:1C:EA:ED:48:11:F2:93:DD:09 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 33C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 33C3 Signing time: Sat 18 May 2024 14:30:51 +0000 Manifest this update: Sat 18 May 2024 14:30:51 +0000 Manifest next update: Sat 25 May 2024 14:30:51 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: PfuKt6Wz1W1r+RmJVOCF8hAQr5ygbmKbxCGkdIfzBBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13255 (0x33c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: May 18 14:30:51 2024 GMT Not After : May 25 14:30:51 2024 GMT Subject: CN=6648bb9b-57bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:1d:f4:a0:bb:51:ba:d8:45:17:52:5d:c5: 6b:04:9c:c1:d2:34:cb:84:b3:83:9e:7f:a4:86:6b: 0a:d6:84:34:86:ea:a3:3d:ca:6d:92:a7:25:9a:d8: 39:26:6b:96:ab:85:e6:64:05:8a:11:2e:b1:fd:93: 75:b4:71:1a:55:fa:22:ad:11:43:d2:83:e7:6d:61: 51:66:46:a5:37:02:77:f2:65:b1:b4:3d:5f:b8:36: 90:70:6e:84:ca:7f:a2:93:da:a3:9f:b0:7d:82:11: ac:ec:2d:6a:08:1c:4c:06:bd:ca:8f:dd:27:0b:21: b7:cb:2e:50:7e:d6:ca:e4:6d:fa:96:7d:1b:8d:3d: 52:e3:30:68:df:f0:62:6f:9f:86:60:d2:03:b8:e0: 7f:36:21:bf:6f:4d:27:ea:74:6a:f7:92:36:f9:d3: c1:93:68:ae:e7:1f:d7:6c:57:2d:cd:ff:92:93:69: bb:6f:f9:70:23:b4:4b:df:1b:a6:b5:cc:ff:e1:69: d4:e5:a4:01:8e:62:5a:bf:dc:30:18:b3:c2:48:24: 84:28:8e:0b:5b:83:5b:3e:df:f6:44:e5:86:f1:77: df:2e:bb:f2:40:71:bb:59:b0:66:bc:c0:cd:5e:13: c8:93:a8:e8:7b:a1:28:c9:8d:b3:91:8d:24:cf:8c: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4A:E9:15:47:5A:F0:3B:28:CE:30:1C:EA:ED:48:11:F2:93:DD:09 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2a:f5:f3:76:cd:f8:36:4c:c5:ef:44:da:05:88:b1:90:a4: 67:52:3f:70:6f:42:96:66:65:34:80:d0:75:3d:96:2b:6b:a4: c3:1b:08:33:f6:90:8b:90:80:f0:0d:b2:7c:97:c3:47:75:f9: bd:d2:1b:40:88:42:db:e0:f2:51:1a:e8:c5:dd:9e:85:ac:c8: 6c:eb:8e:ad:45:34:f9:7a:ac:d9:3e:b4:1a:d6:7c:ec:3f:43: 5f:0e:a2:f7:10:c2:a0:2d:25:0c:68:4a:41:1d:da:01:c4:8b: a7:de:03:46:4c:39:32:57:33:8f:65:fc:c5:d1:c1:1d:54:eb: c7:0e:0f:09:3b:ee:c9:21:65:5a:88:f6:3e:34:96:74:05:f6: eb:20:d6:cc:10:24:99:1c:e4:bb:92:aa:65:71:1e:1b:22:04: af:8b:cd:36:5f:79:91:2f:72:33:c4:65:97:47:69:ad:11:90: 64:40:b9:2c:51:97:bc:3f:13:3a:c3:cc:1c:77:53:9f:70:3d: 7b:75:40:1e:e6:03:f9:e1:95:cc:31:b0:12:d7:ba:22:7a:50: 51:54:b6:9e:64:7c:06:48:13:ea:23:f6:87:1a:4b:33:bd:02: 64:68:15:17:be:90:55:82:93:1e:cc:9b:0b:d2:c3:29:50:57: df:25:e6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjQwNTE4MTQzMDUxWhcNMjQwNTI1MTQzMDUxWjAYMRYwFAYD VQQDEw02NjQ4YmI5Yi01N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxkd9KC7UbrYRRdSXcVrBJzB0jTLhLODnn+khmsK1oQ0huqjPcptkqclmtg5 JmuWq4XmZAWKES6x/ZN1tHEaVfoirRFD0oPnbWFRZkalNwJ38mWxtD1fuDaQcG6E yn+ik9qjn7B9ghGs7C1qCBxMBr3Kj90nCyG3yy5QftbK5G36ln0bjT1S4zBo3/Bi b5+GYNIDuOB/NiG/b00n6nRq95I2+dPBk2iu5x/XbFctzf+Sk2m7b/lwI7RL3xum tcz/4WnU5aQBjmJav9wwGLPCSCSEKI4LW4NbPt/2ROWG8XffLrvyQHG7WbBmvMDN XhPIk6joe6EoyY2zkY0kz4xD9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxK6RVH WvA7KM4wHOrtSBHyk90JMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfKvXzds34NkzF70TaBYixkKRnUj9wb0KWZmU0gNB1PZYra6TDGwgz 9pCLkIDwDbJ8l8NHdfm90htAiELb4PJRGujF3Z6FrMhs646tRTT5eqzZPrQa1nzs P0NfDqL3EMKgLSUMaEpBHdoBxIun3gNGTDkyVzOPZfzF0cEdVOvHDg8JO+7JIWVa iPY+NJZ0BfbrINbMECSZHOS7kqplcR4bIgSvi802X3mRL3IzxGWXR2mtEZBkQLks UZe8PxM6w8wcd1OfcD17dUAe5gP54ZXMMbAS17oielBRVLaeZHwGSBPqI/aHGksz vQJkaBUXvpBVgpMezJsL0sMpUFffJeb9 -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org