$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: 6UDP1Qhw2dicYODfaL0kQY0FQv0elqLc9lZVrk/T7xA= Subject key identifier: FB:7F:1B:90:6A:BA:16:25:80:E9:A1:0F:73:8C:09:38:37:98:A6:6D Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 0104 Signing time: Sun 19 May 2024 05:35:10 +0000 Manifest this update: Sun 19 May 2024 05:35:09 +0000 Manifest next update: Sun 26 May 2024 05:35:09 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: V4K/Gb1ySkxJbZD+DoqlTqylujjoWP+ivrgzuio8v/E=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: vxp9DdAEwv8w7T2TYeLcZ04S/h06V4VND1+Sikmui+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: May 19 05:35:09 2024 GMT Not After : May 26 05:35:09 2024 GMT Subject: CN=66498f8d-5c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:2b:56:eb:b2:7c:6b:61:7e:d2:af:1d:f0: 98:19:18:d4:e8:1d:bb:fc:50:f0:13:15:b3:72:72: 11:b0:c4:f5:65:e3:73:28:cb:64:4f:e2:03:e0:d2: 34:99:59:44:50:75:89:6d:01:0f:c7:ed:31:3a:4a: f8:06:0c:1a:ed:96:af:cc:a3:dd:01:fc:b0:36:bc: 29:b6:a0:10:6d:c3:d8:ed:ee:c8:22:98:79:8b:20: 4a:0c:0c:79:d2:02:00:b9:63:34:2c:a8:ff:17:a0: 5b:dd:d3:21:26:53:35:7e:ca:42:c2:7c:79:a0:05: 57:5f:73:22:4c:26:2b:98:91:83:3d:e0:e9:d9:95: ee:a8:2a:e7:16:c4:ee:e6:66:46:ad:0a:24:86:b0: 85:cb:bf:9d:37:ec:c3:86:33:53:46:9c:e2:87:9d: 1b:02:e4:66:5d:99:ba:d7:37:c0:b2:8c:99:28:5f: a0:a4:e9:cd:b0:b3:bb:81:e0:0f:f0:4a:02:e4:0a: 78:4d:d1:86:a5:1f:fc:3c:12:c2:70:8d:1b:73:64: 21:25:fd:23:a2:02:d2:e2:39:10:04:ac:ea:4f:70: 86:51:fc:76:4b:83:91:30:cb:86:3a:c8:f6:d3:9d: 2f:5d:66:bd:8c:b2:c8:86:59:2d:71:db:ce:51:f0: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:1B:90:6A:BA:16:25:80:E9:A1:0F:73:8C:09:38:37:98:A6:6D X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:38:7f:75:a0:ea:2e:6d:33:35:f2:06:c0:f6:99:2a:35: a7:f9:0d:78:ed:5c:9b:81:00:12:4c:c5:66:fa:1e:20:26:9b: 8a:b4:86:5c:a4:78:8d:a3:00:ea:dc:63:23:8b:22:aa:8e:cd: b9:67:97:a9:b5:57:bb:51:da:7a:cb:75:df:ad:8f:f6:99:59: 31:20:40:d3:35:08:a9:ef:19:94:48:3b:2c:b6:9e:7f:d8:0e: 83:7c:d8:d0:2f:5a:d6:92:c3:64:91:e0:7b:f7:85:b4:33:89: 2d:9c:63:3f:52:4a:12:4e:de:29:ba:33:f8:8a:25:26:99:6c: e0:e3:5b:e5:d4:4c:61:ab:12:a4:eb:d2:9c:f8:52:f8:2e:9d: 3e:1c:8e:72:92:a8:13:6e:95:7a:11:95:1d:84:21:c0:8a:6d: 6f:23:4b:4c:04:7e:81:ae:fe:27:8f:66:59:96:d9:e3:58:fb: e1:72:52:14:48:05:4c:3f:c0:8c:19:ad:27:c9:1b:2c:2e:d4: ed:3b:47:1b:f0:43:a8:2b:3d:51:36:6d:1d:05:25:88:ca:fa: 52:08:93:3b:fe:fd:67:5b:41:75:00:fb:5b:24:b2:a3:c4:a3: 62:ae:ee:f9:bc:13:8a:2b:23:70:b8:f4:e0:e8:59:75:5f:ae: e0:b5:ef:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjQwNTE5MDUzNTA5WhcNMjQwNTI2MDUzNTA5WjAYMRYwFAYD VQQDEw02NjQ5OGY4ZC01YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNMrVuuyfGthftKvHfCYGRjU6B27/FDwExWzcnIRsMT1ZeNzKMtkT+ID4NI0 mVlEUHWJbQEPx+0xOkr4Bgwa7ZavzKPdAfywNrwptqAQbcPY7e7IIph5iyBKDAx5 0gIAuWM0LKj/F6Bb3dMhJlM1fspCwnx5oAVXX3MiTCYrmJGDPeDp2ZXuqCrnFsTu 5mZGrQokhrCFy7+dN+zDhjNTRpzih50bAuRmXZm61zfAsoyZKF+gpOnNsLO7geAP 8EoC5Ap4TdGGpR/8PBLCcI0bc2QhJf0jogLS4jkQBKzqT3CGUfx2S4ORMMuGOsj2 050vXWa9jLLIhlktcdvOUfBf/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt/G5Bq uhYlgOmhD3OMCTg3mKZtMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywDh/daDqLm0zNfIGwPaZKjWn+Q147VybgQASTMVm+h4gJpuKtIZc pHiNowDq3GMjiyKqjs25Z5eptVe7Udp6y3XfrY/2mVkxIEDTNQip7xmUSDsstp5/ 2A6DfNjQL1rWksNkkeB794W0M4ktnGM/UkoSTt4pujP4iiUmmWzg41vl1ExhqxKk 69Kc+FL4Lp0+HI5ykqgTbpV6EZUdhCHAim1vI0tMBH6Brv4nj2ZZltnjWPvhclIU SAVMP8CMGa0nyRssLtTtO0cb8EOoKz1RNm0dBSWIyvpSCJM7/v1nW0F1APtbJLKj xKNiru75vBOKKyNwuPTg6Fl1X67gte+2 -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org