$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft File: sZJ_E4KvyIRDDJZerSibw77GS-w.mft (raw, json) Hash identifier: YhaxtNAHevgy+Q+yog/H/5gJBcNVKq4sx9tl6JnXABg= Subject key identifier: AF:58:4D:53:40:60:2D:7C:5E:D7:13:14:CF:3E:3A:94:4A:CF:3C:16 Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC Certificate issuer: /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:06:32 +0000 Manifest this update: Sun 19 May 2024 08:06:31 +0000 Manifest next update: Sun 26 May 2024 08:06:31 +0000 Files and hashes: 1: sZJ_E4KvyIRDDJZerSibw77GS-w.crl (hash: z6imF5yH/N3d8Kiakljv+bq5MIXrfOD27xgN4aovMms=) 2: B0A65A04B2A711EEA3E1C240C4F9AE02.roa (hash: hORZ5AISHPiAhkgQPGt4LkQHQaYezLZ+UwdT1yQrlr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Validity Not Before: May 19 08:06:31 2024 GMT Not After : May 26 08:06:31 2024 GMT Subject: CN=6649b308-0a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:b6:49:83:42:ee:ae:1e:55:74:b8:2f:ea: 4b:12:98:ac:1a:b0:d5:8c:a9:c0:87:62:5a:dc:f5: 33:d7:e4:b4:25:5b:a8:ac:83:73:60:12:54:80:62: af:6f:0b:fa:94:73:1a:92:f8:f7:3d:36:66:81:51: b5:55:8c:dd:0c:6f:ea:91:cc:89:bd:e8:11:b8:75: eb:59:c6:be:1e:b0:c3:2f:35:24:12:ed:d9:17:0f: 0b:f0:e2:a1:6d:33:29:db:dd:74:d2:73:ef:b1:6b: c4:98:8a:00:24:19:5d:0c:6f:04:a8:b9:19:b7:0f: e2:e9:2d:cd:50:d9:60:13:3c:44:d5:7e:af:f9:82: 9e:8a:8d:9f:28:7b:e3:dc:67:9a:bf:70:fb:8b:11: 8c:e8:75:f6:a9:12:fa:43:89:9f:23:30:f7:dd:77: 29:27:94:84:af:8e:3b:5f:c0:44:1d:84:96:66:b0: 05:b0:80:b2:9d:14:4e:91:b4:ae:58:c0:0f:17:54: ec:d7:4a:3d:d8:ee:4f:c4:ef:44:59:26:46:50:c2: d2:ec:a8:78:1f:b8:fd:2a:c0:a3:27:dc:dd:06:7c: 82:5e:1f:65:b0:5b:8e:b8:3f:20:50:c3:3a:3b:bb: f9:cd:2f:0a:47:83:64:94:c0:8e:29:e2:4d:dc:5b: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:4D:53:40:60:2D:7C:5E:D7:13:14:CF:3E:3A:94:4A:CF:3C:16 X509v3 Authority Key Identifier: keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:01:d5:71:43:76:98:91:b6:ca:cd:a8:9d:d6:eb:b3:95: b2:63:92:b2:b6:a3:84:e6:21:d0:e7:0f:e8:7e:ab:28:be:2a: e8:82:d0:d6:01:fa:a1:7a:bc:eb:eb:ac:23:d5:68:d3:dd:cf: ec:ba:4f:5c:1a:9d:c8:8d:c0:ed:c2:c0:71:81:fa:b7:49:0b: f1:6c:19:dd:10:e3:50:77:15:bd:41:66:8d:9a:1d:55:eb:57: 4e:dc:7a:7f:4f:e7:52:25:fe:30:cf:6d:33:7b:98:45:39:71: 06:4c:fc:42:b6:12:b9:5c:9b:18:e6:21:ac:01:43:16:a4:c6: 23:60:f2:61:b9:fa:8e:df:89:c2:de:a3:35:cd:1f:5d:7c:66: 05:8d:42:05:ac:7e:b8:cd:05:80:cb:9f:9d:95:62:33:9a:b7: 84:4c:48:35:cf:fd:80:7f:f6:31:cf:df:f0:e3:c8:94:1f:60: de:c0:eb:75:da:21:9a:fd:87:1c:e3:96:2f:aa:c8:0c:90:c8: 38:c3:12:08:c1:94:16:cb:de:0f:86:b4:f0:e4:3a:c1:6f:d8: dc:98:23:50:de:2b:fd:ab:93:00:5c:4b:34:57:42:c0:2a:aa: 4f:e0:75:ea:e7:f1:1d:03:87:80:f9:13:c0:41:14:99:3e:21: 0d:61:87:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzhGNzExMC8GA1UEBRMoQjE5MjdGMTM4MkFGQzg4NDQzMEM5NjVFQUQyODlCQzNC RUM2NEJFQzAeFw0yNDA1MTkwODA2MzFaFw0yNDA1MjYwODA2MzFaMBgxFjAUBgNV BAMTDTY2NDliMzA4LTBhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZR7ZJg0Lurh5VdLgv6ksSmKwasNWMqcCHYlrc9TPX5LQlW6isg3NgElSAYq9v C/qUcxqS+Pc9NmaBUbVVjN0Mb+qRzIm96BG4detZxr4esMMvNSQS7dkXDwvw4qFt Mynb3XTSc++xa8SYigAkGV0MbwSouRm3D+LpLc1Q2WATPETVfq/5gp6KjZ8oe+Pc Z5q/cPuLEYzodfapEvpDiZ8jMPfddyknlISvjjtfwEQdhJZmsAWwgLKdFE6RtK5Y wA8XVOzXSj3Y7k/E70RZJkZQwtLsqHgfuP0qwKMn3N0GfIJeH2WwW464PyBQwzo7 u/nNLwpHg2SUwI4p4k3cW/WxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr1hNU0Bg LXxe1xMUzz46lErPPBYwHwYDVR0jBBgwFoAUsZJ/E4KvyIRDDJZerSibw77GS+ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOEY3LzgwOTNDMzA4QjJB NTExRUU5MERFQTIyMEM0RjlBRTAyL3NaSl9FNEt2eUlSRERKWmVyU2lidzc3R1Mt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1pKX0U0S3Z5SVJEREpaZXJTaWJ3NzdHUy13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OEY3LzgwOTNDMzA4QjJBNTExRUU5MERFQTIyMEM0RjlBRTAyL3NaSl9FNEt2eUlS RERKWmVyU2lidzc3R1Mtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGouAdVxQ3aYkbbKzaid1uuzlbJjkrK2o4TmIdDnD+h+qyi+KuiC0NYB +qF6vOvrrCPVaNPdz+y6T1wanciNwO3CwHGB+rdJC/FsGd0Q41B3Fb1BZo2aHVXr V07cen9P51Il/jDPbTN7mEU5cQZM/EK2ErlcmxjmIawBQxakxiNg8mG5+o7ficLe ozXNH118ZgWNQgWsfrjNBYDLn52VYjOat4RMSDXP/YB/9jHP3/DjyJQfYN7A63Xa IZr9hxzjli+qyAyQyDjDEgjBlBbL3g+GtPDkOsFv2NyYI1DeK/2rkwBcSzRXQsAq qk/gdern8R0Dh4D5E8BBFJk+IQ1hh7I= -----END CERTIFICATE-----Generated at Sun May 19 09:32:19 2024 by rpki-client on console-ams.rpki-client.org