$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: pqspZDHjqKhWGYqkmBq3n49jewGo5cAHvAoVe4HjmKo= Subject key identifier: 07:A3:32:82:B9:E4:BC:85:BC:3C:0A:E0:10:6B:24:8E:49:05:5F:8D Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 06BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 126C Signing time: Fri 26 Apr 2024 19:07:01 +0000 Manifest this update: Fri 26 Apr 2024 19:07:00 +0000 Manifest next update: Fri 03 May 2024 19:07:00 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: jwLk3ypj6D+1v+1NI4d1+lLVNXEH93tJprar2zuttKo=) 2: 1D88932A452911EB9118413EC4F9AE02.roa (hash: SCl5aD29N8FQzsS4y+Nxw7MEzPWUyh/cTZ5qei2/m40=) 3: 4022ED5A1E0E11EB8169D187C4F9AE02.roa (hash: j2zHgmp8Nt5vKv0t1qg4uegQ3l4vSDeq4GLVEWp1JqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1722 (0x6ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Apr 26 19:07:00 2024 GMT Not After : May 3 19:07:00 2024 GMT Subject: CN=662bfb55-70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:30:0f:0b:18:b1:30:2c:ae:fd:59:82:d5: 4c:1a:d0:59:9e:77:70:0e:b8:7f:6b:11:30:ac:2c: d3:0d:7a:17:9e:98:b8:28:31:f4:4e:7e:b7:0d:30: 52:2e:a4:30:cf:28:3f:9b:10:9f:b9:b6:90:03:c5: 38:24:92:0a:ef:55:1a:39:a9:b3:48:4c:25:63:07: 45:e0:52:e8:ae:75:bc:af:80:e4:dc:fd:cc:cd:59: 40:c6:5a:0b:4e:86:77:bf:f6:85:5e:cf:8a:71:04: a1:f0:b2:5a:cd:34:5b:61:4d:33:6c:11:8f:c3:8f: 0d:4d:7f:cf:03:ea:76:9d:cc:c5:61:92:83:eb:09: 44:e5:de:ab:b8:78:91:a2:e0:ab:8a:cf:b2:d4:d9: bb:70:83:79:59:39:96:e9:9f:a9:67:65:84:1c:95: 7a:7e:3f:85:b3:82:0b:2c:b5:55:a3:8e:d7:6b:57: 3b:65:b4:42:39:bb:5c:72:47:39:7e:c8:eb:14:be: 52:7a:5f:d2:1d:83:65:be:9e:24:c7:fc:de:3f:80: 8c:03:79:cb:ee:a2:08:80:25:39:86:65:83:b3:e9: b0:a2:bb:70:2b:c4:22:0a:2d:37:d6:f5:14:20:bd: be:0a:6f:16:9e:d5:fb:cf:14:1e:83:f7:aa:ca:cd: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:32:82:B9:E4:BC:85:BC:3C:0A:E0:10:6B:24:8E:49:05:5F:8D X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d3:07:38:e0:cd:b1:bb:63:b4:ee:e4:50:35:44:87:81:4b: f5:6c:dc:b1:25:11:1d:4c:4d:a9:7c:39:7c:a5:53:e0:25:7a: 5e:21:c3:9d:a5:9f:8e:ee:ac:42:10:6a:87:8c:b0:cc:a5:15: 13:bb:ce:32:27:7c:71:6d:c2:d9:5b:56:d2:03:41:64:00:b5: f5:ea:2d:3b:3b:dc:88:39:df:b9:64:c2:1a:a7:0a:27:a8:3a: 08:c3:ce:4f:31:f9:3a:1a:3f:ab:56:f6:a7:30:2f:82:a6:07: d3:cb:3d:eb:37:95:fb:e1:36:b9:12:aa:56:bf:50:2d:db:41: 3b:d9:68:3e:d7:50:99:bc:dd:ae:63:d0:7f:ec:50:46:5d:a3: 54:68:74:46:6b:c9:1c:78:4b:ac:7b:d3:98:61:18:9a:22:0a: 15:1b:e8:f2:d7:ea:59:6f:b7:d3:33:47:f7:c5:31:8f:3e:64: 61:c2:73:a6:83:0e:2e:42:53:54:cb:30:d0:26:67:50:98:88: dc:a3:39:22:14:12:32:dd:08:bf:84:0a:8e:a1:03:ca:08:ae: 37:a3:f4:cf:69:3e:0e:f0:a9:b8:86:62:b8:c9:cc:e9:95:4f: dc:db:f5:18:6d:d2:02:35:6d:bb:24:32:04:4c:ae:fb:2f:03: 8d:36:56:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjQwNDI2MTkwNzAwWhcNMjQwNTAzMTkwNzAwWjAYMRYwFAYD VQQDEw02NjJiZmI1NS03MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEUwDwsYsTAsrv1ZgtVMGtBZnndwDrh/axEwrCzTDXoXnpi4KDH0Tn63DTBS LqQwzyg/mxCfubaQA8U4JJIK71UaOamzSEwlYwdF4FLornW8r4Dk3P3MzVlAxloL ToZ3v/aFXs+KcQSh8LJazTRbYU0zbBGPw48NTX/PA+p2nczFYZKD6wlE5d6ruHiR ouCris+y1Nm7cIN5WTmW6Z+pZ2WEHJV6fj+Fs4ILLLVVo47Xa1c7ZbRCObtcckc5 fsjrFL5Sel/SHYNlvp4kx/zeP4CMA3nL7qIIgCU5hmWDs+mwortwK8QiCi031vUU IL2+Cm8WntX7zxQeg/eqys2bawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAejMoK5 5LyFvDwK4BBrJI5JBV+NMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL0wc44M2xu2O07uRQNUSHgUv1bNyxJREdTE2pfDl8pVPgJXpeIcOd pZ+O7qxCEGqHjLDMpRUTu84yJ3xxbcLZW1bSA0FkALX16i07O9yIOd+5ZMIapwon qDoIw85PMfk6Gj+rVvanMC+CpgfTyz3rN5X74Ta5EqpWv1At20E72Wg+11CZvN2u Y9B/7FBGXaNUaHRGa8kceEuse9OYYRiaIgoVG+jy1+pZb7fTM0f3xTGPPmRhwnOm gw4uQlNUyzDQJmdQmIjcozkiFBIy3Qi/hAqOoQPKCK43o/TPaT4O8Km4hmK4yczp lU/c2/UYbdICNW27JDIETK77LwONNlYK -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org