$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft File: pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json) Hash identifier: uLaMz/C/E03HRHwW+DwBmTy3L1hQIcsl1vLQ50/7qrk= Subject key identifier: 02:9F:C3:93:08:4C:40:FA:17:1B:F7:07:98:CB:9D:B9:5B:25:FB:1C Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 33CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft Manifest number: 33C6 Signing time: Sat 04 May 2024 14:46:31 +0000 Manifest this update: Sat 04 May 2024 14:46:30 +0000 Manifest next update: Sat 11 May 2024 14:46:30 +0000 Files and hashes: 1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: x1J9lCIWufBxlQORyr4eqOUBSRfQLYLv+dJHtu3ql1A=) 2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: CqC2WS4k+jAfUMh1262qZ3ivnWlVTCbJ81XP/w8JHWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13260 (0x33cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: May 4 14:46:30 2024 GMT Not After : May 11 14:46:30 2024 GMT Subject: CN=66364a47-03c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:08:81:55:60:65:bb:a0:6e:5a:e2:58:f5: 41:5e:1c:55:b2:5a:39:b2:99:b2:cb:18:87:89:27: 04:69:b2:4f:1e:a1:09:13:15:10:5b:2a:73:bf:dd: b4:8c:92:29:5f:1a:f1:a5:6d:da:75:4d:a4:2e:f3: ab:7d:b4:2c:4e:04:9f:b5:9a:dd:e2:c7:bd:9a:cc: 55:b0:b3:1d:15:89:fa:03:72:88:29:70:af:b9:5e: 0e:e0:c4:30:80:c5:61:01:7e:a6:44:0a:7a:a6:de: fa:a5:d8:04:5f:4a:50:95:20:b3:75:c2:d7:17:3f: 1f:6c:4a:95:cd:cd:49:0b:7e:0b:95:8e:0c:b5:44: 7d:ee:ca:26:71:7b:16:f8:50:cc:c9:3b:65:27:ac: 53:fd:0b:93:76:58:dc:6e:ad:08:18:6a:2f:32:cb: 06:a7:96:9e:2c:a6:7b:05:c7:29:63:1c:96:53:2f: e8:0c:00:f5:00:c7:89:62:12:31:de:17:48:8b:0a: 1b:9c:7d:b9:aa:ac:d7:93:9b:b0:ac:3c:e2:74:d7: 0b:bd:15:66:7f:a0:db:7f:ad:81:2f:75:da:2e:12: 27:d2:cf:fa:da:b0:a7:16:4b:3f:c8:59:1a:79:3f: d4:34:5b:a6:5a:4d:13:30:c2:b6:cf:d0:88:71:a3: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:C3:93:08:4C:40:FA:17:1B:F7:07:98:CB:9D:B9:5B:25:FB:1C X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e5:f7:4f:b3:35:b5:a2:a6:77:7d:5b:37:72:68:14:50:59: 60:61:a1:97:80:bf:08:d3:4b:f9:71:6b:b3:0a:f8:9c:02:4d: 98:f2:b2:ac:9a:a4:2c:f3:75:c6:cd:53:95:90:a4:86:0f:96: fc:ef:4a:8c:18:6e:60:86:c8:d0:26:73:b7:28:94:55:2f:25: c6:d1:54:51:e6:53:48:28:af:a1:1c:cd:e3:3c:8c:af:81:54: 00:0a:b2:41:2d:3a:1d:31:2f:8e:22:ca:d1:a9:f3:38:8d:81: eb:67:9b:d7:22:4f:2f:69:a7:c8:fb:cd:e9:e0:0e:a6:e2:c0: 68:27:03:81:33:1e:49:e2:d5:22:83:22:f9:57:72:30:25:34: c2:32:03:e7:79:dd:8f:49:5a:91:98:4c:7e:48:14:6e:07:31: 70:7d:19:e0:a9:97:c8:15:06:90:33:c0:79:aa:97:e3:44:15: 25:2f:95:69:7d:66:bf:cb:46:39:db:1b:ce:d3:28:d1:53:bc: 3c:0b:29:cb:0c:16:ff:18:56:b2:11:bc:4d:74:c5:fe:1d:90: 4c:e6:06:db:3d:4b:74:56:d7:64:90:61:cc:f1:07:00:0c:77: 6e:56:fc:3e:8d:7f:bd:46:20:dc:ef:b6:b0:73:bc:af:81:0f: 80:2a:bd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjQwNTA0MTQ0NjMwWhcNMjQwNTExMTQ0NjMwWjAYMRYwFAYD VQQDEw02NjM2NGE0Ny0wM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yMIgVVgZbugblriWPVBXhxVslo5spmyyxiHiScEabJPHqEJExUQWypzv920 jJIpXxrxpW3adU2kLvOrfbQsTgSftZrd4se9msxVsLMdFYn6A3KIKXCvuV4O4MQw gMVhAX6mRAp6pt76pdgEX0pQlSCzdcLXFz8fbEqVzc1JC34LlY4MtUR97somcXsW +FDMyTtlJ6xT/QuTdljcbq0IGGovMssGp5aeLKZ7BccpYxyWUy/oDAD1AMeJYhIx 3hdIiwobnH25qqzXk5uwrDzidNcLvRVmf6Dbf62BL3XaLhIn0s/62rCnFks/yFka eT/UNFumWk0TMMK2z9CIcaOEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKfw5MI TED6Fxv3B5jLnblbJfscMB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkFBNS9FNjdGNjM2NDFEOEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZa d2V1SDBOWHFQdXhaUHR6LXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA75fdPszW1oqZ3fVs3cmgUUFlgYaGXgL8I00v5cWuzCvicAk2Y8rKs mqQs83XGzVOVkKSGD5b870qMGG5ghsjQJnO3KJRVLyXG0VRR5lNIKK+hHM3jPIyv gVQACrJBLTodMS+OIsrRqfM4jYHrZ5vXIk8vaafI+83p4A6m4sBoJwOBMx5J4tUi gyL5V3IwJTTCMgPned2PSVqRmEx+SBRuBzFwfRngqZfIFQaQM8B5qpfjRBUlL5Vp fWa/y0Y52xvO0yjRU7w8CynLDBb/GFayEbxNdMX+HZBM5gbbPUt0VtdkkGHM8QcA DHduVvw+jX+9RiDc77awc7yvgQ+AKr02 -----END CERTIFICATE-----Generated at Sat May 4 15:54:59 2024 by rpki-client on console-ams.rpki-client.org