$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: c+ues5dIbOVsegwORGtEehbgh3MBj7OSEDgwf+BwnJI= Subject key identifier: 10:E1:A4:E3:47:26:3F:33:E6:0D:C3:17:BE:EA:65:C8:3C:2D:50:B7 Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0A48 Signing time: Sat 18 May 2024 20:29:33 +0000 Manifest this update: Sat 18 May 2024 20:29:33 +0000 Manifest next update: Sat 25 May 2024 20:29:33 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: W3bWEUsU3Vw/IpmI/+6JMbAgDbNsKro2SpxRWf7XFXs=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: kONUJBoxY/BhLOEc4dA2tylYELY1wDWg8sTmx/gxQHk=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: wgftKb4IInisu650djsPHH84sPf1yKI2QWeFmfVp8Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2653 (0xa5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: May 18 20:29:33 2024 GMT Not After : May 25 20:29:33 2024 GMT Subject: CN=66490fad-0edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:86:e4:21:f3:62:ef:c2:31:13:d3:47:e7: 52:58:cb:75:e5:cc:54:1c:a0:96:a3:aa:96:09:e1: fd:b3:db:24:2f:a1:f8:6a:e2:10:69:be:6a:fa:a8: d1:1b:a2:2f:e1:0e:8d:41:89:5a:40:95:63:ae:d4: d8:57:0b:c6:d7:52:b2:1b:37:2d:64:e8:b3:fa:d3: f6:93:58:1f:9d:30:a1:16:2c:62:cb:94:c6:16:8b: 23:85:97:39:e7:a9:83:a3:c6:55:6b:3e:91:3c:4c: ba:ac:ac:cb:89:2a:00:f3:5f:9a:4f:cf:14:20:f1: eb:55:8f:c2:c0:a0:48:c4:57:58:77:39:12:32:a5: 71:aa:93:37:c3:24:31:82:59:23:3d:8b:b8:3a:56: 61:bf:6e:bb:2c:5a:3d:fb:6c:42:25:37:f1:92:b7: cf:09:b3:94:96:6c:dc:6b:f7:b2:ce:52:76:5e:f7: b1:89:c5:f5:c7:da:f9:67:30:01:1e:15:d4:35:1f: c0:ca:41:81:c1:60:f3:11:f7:3a:65:aa:d0:31:e0: 65:0c:ee:9d:61:dd:12:e9:1e:61:75:e0:81:84:b2: d4:7a:c3:79:0e:81:56:b0:04:2d:0f:27:e5:5d:1c: 38:9d:74:9c:11:fb:41:a7:18:2e:90:db:cd:6b:a0: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:A4:E3:47:26:3F:33:E6:0D:C3:17:BE:EA:65:C8:3C:2D:50:B7 X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:97:49:6a:25:08:71:60:78:58:96:d9:d3:ab:a0:93:db:a0: ba:08:74:54:1e:cc:f5:38:11:43:24:90:1e:c5:ce:15:ea:3f: fe:1b:85:7c:18:ce:01:68:aa:15:15:5e:d6:bf:a1:f7:35:01: 94:5c:df:68:58:66:7f:4f:69:81:e0:a2:bd:ee:4c:c8:9b:05: 81:9d:17:36:52:1c:3b:e4:f2:85:f1:83:00:2a:4a:d2:4e:74: 45:d6:28:08:cc:11:83:d1:eb:0e:ea:41:fd:2c:b0:dd:13:91: 02:08:39:4b:91:12:2f:e4:a1:6b:7e:18:c9:9a:5f:1c:a9:b6: 4e:75:ae:c7:ba:62:3b:0b:b3:e0:e3:cf:ba:eb:b1:48:9f:f1: 75:b8:2d:a6:32:1e:1c:e7:67:3d:55:a2:0d:e9:cf:ba:e1:c3: 67:88:62:1f:95:b1:76:d4:1c:85:94:5b:de:69:b5:5d:63:09: c2:2a:28:e6:85:c4:c9:56:54:fe:c2:79:e2:36:e1:18:cb:04: c2:b6:cb:b4:8a:2d:d3:71:5c:59:2f:2d:71:c0:cc:42:2e:a8: 35:3c:7f:7d:bb:d5:56:69:83:cf:59:5a:16:39:03:d1:82:05: 22:fd:98:83:22:aa:80:8f:78:13:94:e3:76:db:0b:0c:4a:fb: 7c:0e:99:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjQwNTE4MjAyOTMzWhcNMjQwNTI1MjAyOTMzWjAYMRYwFAYD VQQDEw02NjQ5MGZhZC0wZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUeG5CHzYu/CMRPTR+dSWMt15cxUHKCWo6qWCeH9s9skL6H4auIQab5q+qjR G6Iv4Q6NQYlaQJVjrtTYVwvG11KyGzctZOiz+tP2k1gfnTChFixiy5TGFosjhZc5 56mDo8ZVaz6RPEy6rKzLiSoA81+aT88UIPHrVY/CwKBIxFdYdzkSMqVxqpM3wyQx glkjPYu4OlZhv267LFo9+2xCJTfxkrfPCbOUlmzca/eyzlJ2XvexicX1x9r5ZzAB HhXUNR/AykGBwWDzEfc6ZarQMeBlDO6dYd0S6R5hdeCBhLLUesN5DoFWsAQtDyfl XRw4nXScEftBpxgukNvNa6CxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDhpONH Jj8z5g3DF77qZcg8LVC3MB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSl0lqJQhxYHhYltnTq6CT26C6CHRUHsz1OBFDJJAexc4V6j/+G4V8 GM4BaKoVFV7Wv6H3NQGUXN9oWGZ/T2mB4KK97kzImwWBnRc2Uhw75PKF8YMAKkrS TnRF1igIzBGD0esO6kH9LLDdE5ECCDlLkRIv5KFrfhjJml8cqbZOda7HumI7C7Pg 48+667FIn/F1uC2mMh4c52c9VaIN6c+64cNniGIflbF21ByFlFveabVdYwnCKijm hcTJVlT+wnniNuEYywTCtsu0ii3TcVxZLy1xwMxCLqg1PH99u9VWaYPPWVoWOQPR ggUi/ZiDIqqAj3gTlON22wsMSvt8Dpl6 -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org