$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: SOjcpkidBxMwRxaOGWminNdy+v6Z/S9hr/ZOOVslBuM= Subject key identifier: E0:6B:4B:CB:19:BA:06:BB:71:E5:AA:9F:F9:3C:CC:B6:DD:05:A0:7D Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0B76 Signing time: Sat 18 May 2024 19:28:53 +0000 Manifest this update: Sat 18 May 2024 19:28:52 +0000 Manifest next update: Sat 25 May 2024 19:28:52 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: ymCG/QqbOQjUzdKuHoxy63myWZoRiPGMUE3RclxyI2w=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: pgs8om6xi1TP39xxFw8N3NgLddKie/UkUnHR6yP+VBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: May 18 19:28:52 2024 GMT Not After : May 25 19:28:52 2024 GMT Subject: CN=66490174-9453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:65:cd:7a:be:19:04:51:38:1a:95:4a:37: 54:cb:1b:3b:d2:99:63:1a:c3:1d:d3:c9:cc:99:7a: 27:22:c5:8f:31:37:d5:b2:81:92:0a:48:c0:d1:71: 35:9d:ee:b4:79:d9:3d:cd:87:32:c8:f3:72:3f:9b: d3:82:54:11:a2:d6:df:6c:49:36:90:50:5c:c7:4c: 0c:80:24:81:61:f0:aa:90:7d:fc:44:f9:be:49:c5: 2b:43:60:3e:6c:8b:eb:6c:3a:34:0b:60:ab:01:46: ab:ff:65:af:44:7f:cf:8c:77:69:7a:60:64:28:f3: ca:8b:38:a3:60:ea:1a:56:78:53:a7:f5:5c:b0:63: 9c:ff:c8:25:17:17:34:de:82:f0:6e:08:50:52:be: 69:d6:76:b3:0a:ff:22:dc:a4:a1:14:c6:6d:6b:bf: 55:69:73:bc:d8:26:eb:3e:ee:3a:10:2e:7a:08:60: be:2c:54:ba:fe:5a:49:82:41:ef:63:48:4b:33:61: 3f:5a:3e:05:e1:51:91:2f:2e:50:bf:78:14:77:9f: 34:78:01:7f:11:98:29:91:4d:23:22:02:95:7d:63: 47:5d:00:23:6e:c4:2b:28:2e:ea:a9:1d:27:52:c2: 76:a6:25:f5:05:39:d8:db:ca:be:09:6e:9d:ba:db: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:4B:CB:19:BA:06:BB:71:E5:AA:9F:F9:3C:CC:B6:DD:05:A0:7D X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e2:46:19:3a:df:11:cc:3b:0f:e3:19:ef:9f:48:80:63:3d: f8:f0:d4:ef:1a:ec:10:30:0e:04:9f:4d:a0:3d:33:c8:ad:72: 90:0d:0d:85:fa:af:31:45:fb:64:61:ce:d8:18:07:17:20:42: 31:1a:4c:cb:f8:a8:25:e2:f2:82:6a:09:cb:c7:59:bc:43:48: 88:67:db:3a:3d:a6:73:a4:bd:7f:1b:48:df:0e:8a:44:01:5e: b6:bd:01:ef:92:d3:ba:d5:a0:9d:96:15:82:0b:6c:47:8d:95: 7a:28:54:cb:96:0c:44:8b:0e:c1:24:46:02:d1:e0:da:8f:cd: 40:3d:96:56:24:51:58:60:62:87:3f:3b:63:3b:0a:25:38:f1: 07:2c:7c:43:44:a0:4e:7d:60:8c:61:8c:0f:cf:31:25:77:6f: f1:6b:53:4b:04:01:f8:70:84:7b:04:cb:53:76:bf:97:0c:e9: f2:ba:5f:88:67:7b:a5:be:83:60:5a:2c:94:98:63:68:e2:a1: 42:9e:14:69:dc:db:14:e3:3b:97:84:77:c2:04:97:23:6e:13: 58:9a:43:73:38:68:4c:ae:8d:09:18:e5:8f:78:72:f7:0e:2f: 5a:3e:21:33:58:85:43:91:e1:46:7a:ce:01:c9:d4:68:f9:f9: b3:51:1a:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjQwNTE4MTkyODUyWhcNMjQwNTI1MTkyODUyWjAYMRYwFAYD VQQDEw02NjQ5MDE3NC05NDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYBlzXq+GQRROBqVSjdUyxs70pljGsMd08nMmXonIsWPMTfVsoGSCkjA0XE1 ne60edk9zYcyyPNyP5vTglQRotbfbEk2kFBcx0wMgCSBYfCqkH38RPm+ScUrQ2A+ bIvrbDo0C2CrAUar/2WvRH/PjHdpemBkKPPKizijYOoaVnhTp/VcsGOc/8glFxc0 3oLwbghQUr5p1nazCv8i3KShFMZta79VaXO82CbrPu46EC56CGC+LFS6/lpJgkHv Y0hLM2E/Wj4F4VGRLy5Qv3gUd580eAF/EZgpkU0jIgKVfWNHXQAjbsQrKC7qqR0n UsJ2piX1BTnY28q+CW6dutsddQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBrS8sZ uga7ceWqn/k8zLbdBaB9MB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi4kYZOt8RzDsP4xnvn0iAYz348NTvGuwQMA4En02gPTPIrXKQDQ2F +q8xRftkYc7YGAcXIEIxGkzL+Kgl4vKCagnLx1m8Q0iIZ9s6PaZzpL1/G0jfDopE AV62vQHvktO61aCdlhWCC2xHjZV6KFTLlgxEiw7BJEYC0eDaj81APZZWJFFYYGKH PztjOwolOPEHLHxDRKBOfWCMYYwPzzEld2/xa1NLBAH4cIR7BMtTdr+XDOnyul+I Z3ulvoNgWiyUmGNo4qFCnhRp3NsU4zuXhHfCBJcjbhNYmkNzOGhMro0JGOWPeHL3 Di9aPiEzWIVDkeFGes4BydRo+fmzURq+ -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org