$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: jUPoZBE9T7UlyL5ry8BwR0uFR58tusUzNieKOb1cHWI= Subject key identifier: 97:1A:31:B8:E3:33:D9:0A:4B:EB:48:41:2F:33:58:02:2D:C1:82:5E Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 2377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 235A Signing time: Mon 06 May 2024 16:13:19 +0000 Manifest this update: Mon 06 May 2024 16:13:19 +0000 Manifest next update: Mon 13 May 2024 16:13:19 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: 6+efktBA4pFNb7hfVrNYs/F4WXw77lnYj0OzGD3XPNQ=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: rYNEGiWrpSP/p46gT0UIbY2vOINTen1a5+WUXMJC+C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9079 (0x2377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: May 6 16:13:19 2024 GMT Not After : May 13 16:13:19 2024 GMT Subject: CN=6639019f-cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:97:94:20:b0:a6:88:83:47:ac:76:11:3e: 86:5a:2e:3b:54:d8:b6:c3:10:17:55:51:e1:b2:59: c4:9a:89:e1:03:36:dc:68:04:6a:17:95:3e:5b:f7: 7e:25:04:a3:4f:4e:53:d2:bc:e0:8f:bc:02:08:26: 15:db:55:1f:a5:d0:70:74:98:b4:ef:74:3d:07:72: c9:1f:ba:30:2c:e3:eb:2a:4f:3c:ad:61:60:52:54: 61:29:e1:e1:5c:3d:52:3c:8e:f2:6e:dc:d1:b6:6a: 75:2f:36:dd:0e:95:17:89:88:21:76:55:5d:98:13: 22:ec:f6:18:be:f1:ab:63:18:68:59:2d:ec:91:d3: 47:78:87:c7:92:04:db:39:f4:39:85:0f:0c:a3:e4: 75:18:31:39:39:b0:96:5b:b9:4b:7d:a7:d0:40:7a: b8:cc:2a:00:dc:d3:cf:72:56:51:81:51:32:65:ca: fd:5a:5c:5d:02:bf:01:c8:f1:82:a1:aa:47:86:74: 91:1f:70:22:4a:61:fc:d5:4a:73:7a:85:0d:8a:97: fd:14:06:22:5c:83:70:ef:81:df:3c:a3:bd:e7:59: c6:54:7c:c4:de:0e:f4:11:86:c7:08:33:f7:96:19: 47:c3:02:3e:00:de:90:9e:70:8f:31:96:95:75:ab: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:31:B8:E3:33:D9:0A:4B:EB:48:41:2F:33:58:02:2D:C1:82:5E X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:8f:48:e8:ab:17:b4:8a:6d:b8:2d:78:b1:72:ff:e0:95:11: 55:bc:bb:8d:cb:1c:3e:d8:5a:94:0d:57:30:8e:89:c4:2a:bd: ad:15:cf:10:db:c2:17:77:24:f2:2e:64:04:6b:4a:5a:c5:68: 96:e3:35:b9:57:bf:05:50:9e:59:96:9f:89:42:1a:12:60:86: 03:08:85:2f:c3:21:84:f1:ef:a0:d5:90:df:a5:ad:0a:f0:f6: a1:69:a5:a7:8c:ae:0b:0e:f5:9b:23:46:c9:82:c8:cf:06:25: 84:6f:ea:91:1f:d3:33:d1:c6:64:4c:30:82:63:97:bd:bb:f5: 16:d3:b8:83:ad:7a:6b:dd:18:36:d8:6e:c7:8c:4a:87:ac:9e: aa:02:93:5c:b8:51:db:79:01:39:af:95:13:9b:4f:0a:eb:a2: 88:65:d9:be:39:c4:73:23:5b:77:69:96:6b:96:0c:89:5f:1c: e0:36:42:34:cb:1f:90:77:70:96:65:74:13:5e:54:11:82:00: c1:5b:9a:96:c9:61:61:63:3a:64:b7:70:63:6d:c7:58:b4:2d: 5d:4c:16:f1:40:26:28:73:85:61:61:99:f7:62:ff:96:df:15: 0d:6c:01:3b:bf:91:48:b1:57:fc:2d:9a:0f:15:46:f1:63:19: 95:23:ab:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjQwNTA2MTYxMzE5WhcNMjQwNTEzMTYxMzE5WjAYMRYwFAYD VQQDEw02NjM5MDE5Zi1jYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmmXlCCwpoiDR6x2ET6GWi47VNi2wxAXVVHhslnEmonhAzbcaARqF5U+W/d+ JQSjT05T0rzgj7wCCCYV21UfpdBwdJi073Q9B3LJH7owLOPrKk88rWFgUlRhKeHh XD1SPI7ybtzRtmp1LzbdDpUXiYghdlVdmBMi7PYYvvGrYxhoWS3skdNHeIfHkgTb OfQ5hQ8Mo+R1GDE5ObCWW7lLfafQQHq4zCoA3NPPclZRgVEyZcr9WlxdAr8ByPGC oapHhnSRH3AiSmH81UpzeoUNipf9FAYiXINw74HfPKO951nGVHzE3g70EYbHCDP3 lhlHwwI+AN6QnnCPMZaVdauv5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcaMbjj M9kKS+tIQS8zWAItwYJeMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTj0joqxe0im24LXixcv/glRFVvLuNyxw+2FqUDVcwjonEKr2tFc8Q 28IXdyTyLmQEa0paxWiW4zW5V78FUJ5Zlp+JQhoSYIYDCIUvwyGE8e+g1ZDfpa0K 8PahaaWnjK4LDvWbI0bJgsjPBiWEb+qRH9Mz0cZkTDCCY5e9u/UW07iDrXpr3Rg2 2G7HjEqHrJ6qApNcuFHbeQE5r5UTm08K66KIZdm+OcRzI1t3aZZrlgyJXxzgNkI0 yx+Qd3CWZXQTXlQRggDBW5qWyWFhYzpkt3BjbcdYtC1dTBbxQCYoc4VhYZn3Yv+W 3xUNbAE7v5FIsVf8LZoPFUbxYxmVI6v4 -----END CERTIFICATE-----Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org