$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: UUWZcvU+aj9bAUhhm9QuRMM09GUtEUy8nqnxrSZATkY= Subject key identifier: B6:71:F3:11:75:6C:BC:8D:DF:2E:88:4A:37:39:7D:9D:5A:98:27:C3 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 33B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 33B9 Signing time: Thu 02 May 2024 14:44:39 +0000 Manifest this update: Thu 02 May 2024 14:44:39 +0000 Manifest next update: Thu 09 May 2024 14:44:39 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: hJ6eTHescOEX1F9ukt95gcsC6A1tH9Lwuavy48iXcp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13241 (0x33b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: May 2 14:44:39 2024 GMT Not After : May 9 14:44:39 2024 GMT Subject: CN=6633a6d7-6171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:fa:81:c8:15:93:0c:fd:a0:64:69:d0:67: 69:ef:ad:b1:1b:cf:c2:ec:1c:97:f0:f1:38:d2:08: a8:68:53:77:74:b3:47:08:22:c5:09:b4:35:c3:90: 0b:65:c9:e9:e6:0f:ec:19:a2:cb:1b:6e:a8:3b:7a: 1f:a2:18:f6:1b:31:85:eb:10:16:18:fa:f4:6f:df: 8b:97:45:3d:cf:8f:6e:c9:54:aa:02:67:e0:8f:ba: 7b:7b:e5:3b:37:60:bc:c7:ec:51:b1:79:ed:bb:aa: 8f:bd:1d:60:eb:d2:c8:a3:b6:fe:2f:cd:9a:7b:eb: 02:1c:7b:cb:d6:99:79:32:b2:95:44:a7:19:44:fb: d3:aa:fc:47:6a:6e:d7:90:a2:18:f2:ca:d8:fb:1d: ce:da:bd:7a:f2:55:06:57:57:71:07:4c:d1:02:be: d9:33:de:df:38:fe:89:48:82:29:6b:0a:d1:4c:1f: eb:37:dd:2a:ac:c8:dc:f9:2a:84:c4:27:d2:26:2e: 47:e9:ad:12:1d:61:07:a7:e2:0d:8b:a7:ae:48:bd: 70:d3:1f:c0:fc:9e:a2:e8:41:08:83:62:99:45:bb: bf:aa:0b:18:cd:88:89:17:d1:1d:ce:56:29:4f:60: a5:c7:7e:be:e8:66:24:27:a7:2d:1d:29:94:bd:67: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:71:F3:11:75:6C:BC:8D:DF:2E:88:4A:37:39:7D:9D:5A:98:27:C3 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:13:eb:19:f7:82:e5:3d:95:c9:2c:d4:28:0c:04:b0:88:f1: 0c:48:40:a9:57:59:47:a9:50:79:9b:5b:77:86:b5:92:b5:d4: 42:d6:70:41:27:d6:af:0a:d8:67:32:51:e6:75:3c:8b:7b:df: 71:0a:1c:b7:45:40:da:c2:5f:43:d4:59:75:db:41:96:32:85: 31:09:83:6c:97:81:56:bd:cf:f7:0f:76:b3:6f:78:3a:55:4c: 37:14:29:8d:52:d3:b7:56:e9:b4:8e:b4:eb:dd:45:27:6a:24: cd:ac:d6:d9:d1:7f:0b:e7:cf:30:84:dc:5a:44:4f:9a:e7:9c: 5a:0b:19:eb:a5:55:22:36:87:2c:1b:ca:41:a1:0e:00:68:24: 84:59:cf:6a:c4:c1:3e:e4:b9:96:b7:02:5b:24:ec:a7:82:28: c3:21:d3:cd:9c:60:8f:71:41:8a:e0:36:ed:4e:54:1a:44:a1: 18:37:76:4c:14:77:e3:13:c8:1d:a1:ad:ef:22:19:d3:d1:bd: 53:68:64:44:a5:d8:c4:62:4a:fb:67:77:10:b6:49:5c:47:3e: 00:2b:bc:c8:17:99:d3:bd:f3:f2:a7:ae:94:01:60:05:70:02: 65:08:64:d4:11:5d:2b:3f:f1:e0:79:89:cb:53:17:43:df:95: 64:0a:fa:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjQwNTAyMTQ0NDM5WhcNMjQwNTA5MTQ0NDM5WjAYMRYwFAYD VQQDEw02NjMzYTZkNy02MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWP6gcgVkwz9oGRp0Gdp762xG8/C7ByX8PE40gioaFN3dLNHCCLFCbQ1w5AL Zcnp5g/sGaLLG26oO3ofohj2GzGF6xAWGPr0b9+Ll0U9z49uyVSqAmfgj7p7e+U7 N2C8x+xRsXntu6qPvR1g69LIo7b+L82ae+sCHHvL1pl5MrKVRKcZRPvTqvxHam7X kKIY8srY+x3O2r168lUGV1dxB0zRAr7ZM97fOP6JSIIpawrRTB/rN90qrMjc+SqE xCfSJi5H6a0SHWEHp+INi6euSL1w0x/A/J6i6EEIg2KZRbu/qgsYzYiJF9EdzlYp T2Clx36+6GYkJ6ctHSmUvWfHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZx8xF1 bLyN3y6ISjc5fZ1amCfDMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIE+sZ94LlPZXJLNQoDASwiPEMSECpV1lHqVB5m1t3hrWStdRC1nBB J9avCthnMlHmdTyLe99xChy3RUDawl9D1Fl120GWMoUxCYNsl4FWvc/3D3azb3g6 VUw3FCmNUtO3Vum0jrTr3UUnaiTNrNbZ0X8L588whNxaRE+a55xaCxnrpVUiNocs G8pBoQ4AaCSEWc9qxME+5LmWtwJbJOyngijDIdPNnGCPcUGK4DbtTlQaRKEYN3ZM FHfjE8gdoa3vIhnT0b1TaGREpdjEYkr7Z3cQtklcRz4AK7zIF5nTvfPyp66UAWAF cAJlCGTUEV0rP/HgeYnLUxdD35VkCvoW -----END CERTIFICATE-----Generated at Thu May 2 17:18:25 2024 by rpki-client on console-ams.rpki-client.org