$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: gPO0LTQyNCb88s/0HP33OXYJCqbaG6pXAXVi9ziBhiw= Subject key identifier: 86:F2:2F:34:02:36:90:72:05:B3:42:5E:A2:95:14:93:09:53:D3:F1 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 33BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 33BE Signing time: Tue 30 Apr 2024 15:25:06 +0000 Manifest this update: Tue 30 Apr 2024 15:25:05 +0000 Manifest next update: Tue 07 May 2024 15:25:05 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: pHaKptqUCPr/vZJd2LIb8BfqXfCX0Zlt3QFLJuus3ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13246 (0x33be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Apr 30 15:25:05 2024 GMT Not After : May 7 15:25:05 2024 GMT Subject: CN=66310d52-aac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:35:64:8f:f3:3c:f0:07:d8:aa:79:08:67: b1:a4:57:05:3b:d4:87:0d:8a:d9:00:67:56:91:5f: ba:84:57:6a:9e:c4:3d:9a:c3:9b:e8:12:0c:b9:39: 2d:7d:18:73:e6:c3:eb:d2:9b:8d:ae:84:6b:8c:ae: 91:a5:d6:a4:ea:0c:dc:d7:f5:56:c0:50:81:66:fa: 9d:66:fd:f2:86:da:ee:f3:96:ac:77:dc:00:a9:11: 07:24:fa:ca:b4:cf:ce:4a:ba:2b:57:fe:63:e7:a4: 18:04:b1:27:fd:0a:eb:86:b1:33:92:1e:2b:c8:06: 75:78:66:e4:19:b8:11:16:88:ca:01:5a:cf:31:20: d2:1b:bc:f6:6b:24:2e:3a:12:51:d2:67:e5:b5:44: 2b:b0:58:80:d3:d7:e1:e1:a9:a9:3d:c8:55:48:de: 32:43:ac:be:6f:80:9e:59:78:46:ed:4d:0a:5d:bd: 89:eb:26:d7:6a:53:cd:33:d7:2d:20:86:12:33:5f: 29:4f:55:21:36:86:bf:a0:6c:68:88:30:40:bf:bf: 69:a6:62:04:68:2b:06:4b:6e:bf:d3:f3:1d:26:09: 05:92:fa:15:c5:dc:22:82:51:cb:5a:44:a6:98:fc: e0:86:a8:af:6d:5c:27:d1:f5:ed:0a:54:10:e9:59: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:2F:34:02:36:90:72:05:B3:42:5E:A2:95:14:93:09:53:D3:F1 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:5d:5a:0c:ee:f6:df:e6:94:6e:2a:e4:05:9b:dc:ac:bf: 67:5e:0c:8f:9a:dd:62:6d:fc:0b:a8:11:71:d4:d3:53:c9:b1: 80:11:25:a9:fb:74:56:ed:e1:64:cb:7f:96:26:90:d1:c1:a2: e0:54:13:d7:8d:ca:95:ee:93:84:5e:e7:91:44:84:e1:41:a2: 68:20:20:52:07:0c:ce:be:d0:7b:17:cf:e2:52:92:42:2b:72: 09:2a:94:d6:f5:9e:ea:47:20:0e:1e:c2:2e:61:57:9a:06:ae: 18:83:4d:06:20:ab:ac:f7:62:fc:2d:30:96:7d:b3:dd:b4:71: 86:1d:14:fc:e1:9f:89:6b:64:d1:33:4f:6b:04:f1:9b:28:60: 5a:01:a5:f0:92:2f:87:7a:20:4d:98:57:3b:4a:a4:2e:4a:21: ef:88:43:2b:fa:41:80:bf:02:9d:50:e6:4a:3c:87:9f:59:f5: 34:50:12:f9:07:fa:ac:58:79:57:12:8e:b9:2e:da:01:37:08: a3:7c:21:46:43:54:d2:a7:1f:47:2d:d7:53:36:0b:62:3e:5e: 54:bf:00:6f:22:4d:b6:5c:35:37:b0:3b:c1:b3:91:e2:57:c8: c6:48:96:44:de:b0:11:a4:e2:7e:20:4b:18:e3:4c:28:9f:b9: 92:77:c9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjQwNDMwMTUyNTA1WhcNMjQwNTA3MTUyNTA1WjAYMRYwFAYD VQQDEw02NjMxMGQ1Mi1hYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+A1ZI/zPPAH2Kp5CGexpFcFO9SHDYrZAGdWkV+6hFdqnsQ9msOb6BIMuTkt fRhz5sPr0puNroRrjK6Rpdak6gzc1/VWwFCBZvqdZv3yhtru85asd9wAqREHJPrK tM/OSrorV/5j56QYBLEn/QrrhrEzkh4ryAZ1eGbkGbgRFojKAVrPMSDSG7z2ayQu OhJR0mfltUQrsFiA09fh4ampPchVSN4yQ6y+b4CeWXhG7U0KXb2J6ybXalPNM9ct IIYSM18pT1UhNoa/oGxoiDBAv79ppmIEaCsGS26/0/MdJgkFkvoVxdwiglHLWkSm mPzghqivbVwn0fXtClQQ6VmuEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbyLzQC NpByBbNCXqKVFJMJU9PxMB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtl1aDO723+aUbirkBZvcrL9nXgyPmt1ibfwLqBFx1NNTybGAESWp +3RW7eFky3+WJpDRwaLgVBPXjcqV7pOEXueRRIThQaJoICBSBwzOvtB7F8/iUpJC K3IJKpTW9Z7qRyAOHsIuYVeaBq4Yg00GIKus92L8LTCWfbPdtHGGHRT84Z+Ja2TR M09rBPGbKGBaAaXwki+HeiBNmFc7SqQuSiHviEMr+kGAvwKdUOZKPIefWfU0UBL5 B/qsWHlXEo65LtoBNwijfCFGQ1TSpx9HLddTNgtiPl5UvwBvIk22XDU3sDvBs5Hi V8jGSJZE3rARpOJ+IEsY40won7mSd8nK -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:56 2024 by rpki-client on console-ams.rpki-client.org