$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: Q5xck7sEaOjpQPYDlgITGZgW94ZSptrC/dlX2DWsVMQ= Subject key identifier: 2C:CF:0A:96:49:5D:D5:CD:1C:0E:92:3A:2E:83:06:8D:D7:98:34:5D Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 2D Signing time: Fri 17 May 2024 08:34:47 +0000 Manifest this update: Fri 17 May 2024 08:34:46 +0000 Manifest next update: Fri 24 May 2024 08:34:46 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: 8a2i0zA+PfXaIkoZqEBfyPSdKdGUMm/Ky2DzgOFtJJk=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: jsPnxeM/1ccjB+l/UFdQlnJ1k8qZgj2xXeNtEyTuulI=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: Du13DHYQS04+G+C/2tJR42Y1wTjwagQP4rv6d0IIooA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: May 17 08:34:46 2024 GMT Not After : May 24 08:34:46 2024 GMT Subject: CN=664716a6-7a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:48:3a:bd:21:0f:15:ff:33:5b:57:c4:13: a3:74:96:0b:38:18:39:92:4c:d7:41:05:d6:09:99: 58:2d:8a:03:d2:e3:5c:5d:10:fa:c3:2b:b8:4d:ff: 3e:f2:a7:d9:1f:14:74:a4:9d:4b:76:5e:a7:e2:d2: 46:c5:b3:44:83:f4:26:59:7e:7b:50:8a:45:db:99: d7:bd:56:df:ba:97:33:35:5b:fc:d7:26:1c:92:a1: cb:12:94:6b:61:72:dc:bf:e2:85:18:35:82:76:13: 3b:98:7a:e5:25:93:0e:e1:f3:7f:76:2b:a2:6f:9f: 04:51:50:5b:bc:a4:60:94:88:73:65:17:b4:d7:a1: 12:9a:5d:00:0f:03:9f:5b:b0:81:6f:17:fe:c8:bf: b6:a6:a6:cd:fd:28:50:71:3b:fa:60:39:17:59:97: 00:64:72:a4:14:de:4d:9e:dd:16:4b:b2:ae:09:56: b5:a0:4f:cb:df:1c:83:d2:2b:93:de:d8:cb:a9:24: 4d:99:da:bd:bd:f5:14:ac:57:7c:24:09:e8:4e:1c: 3c:38:89:90:50:68:c5:dd:b0:e3:1d:0e:0d:7e:84: cc:7d:69:f3:ef:fe:64:8c:07:e8:de:37:be:e9:62: a4:6a:fc:47:fd:70:ae:31:01:0a:24:78:90:03:00: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CF:0A:96:49:5D:D5:CD:1C:0E:92:3A:2E:83:06:8D:D7:98:34:5D X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2e:9f:f9:9b:00:e8:70:01:4f:ef:61:94:b8:50:27:4d:d5: ce:41:d8:d2:e5:2d:e2:80:fb:1f:ce:87:ac:2b:d5:6b:f8:ff: 74:8c:32:4e:31:38:27:70:10:27:a6:dd:c1:a2:2a:0b:3f:3e: 5e:b7:47:d2:db:7c:ce:4f:05:b9:68:40:65:fb:54:8d:b3:74: 37:75:a1:66:b5:1d:4e:4d:8f:b2:a6:50:8c:cf:ee:95:2a:ad: bd:4a:b3:3c:dd:3a:85:90:fd:30:38:ff:07:9c:ae:d5:98:91: 4a:8f:b9:61:b4:3d:4a:a7:5c:28:ad:35:6d:6a:fd:09:cd:42: 66:b8:d9:d6:c8:62:c7:51:82:fe:b1:34:2e:91:a3:d9:1b:56: a1:55:24:de:a1:6b:3e:88:80:24:40:aa:83:d6:0b:ea:9c:01: 35:8b:98:94:ba:bc:70:c6:e3:5e:5c:21:11:50:a1:74:69:a9: 43:34:d7:a3:1e:53:90:ad:9e:c2:66:b0:f0:a1:cc:97:7f:c5: ea:d4:00:89:51:39:fb:b1:70:5b:c4:ae:48:91:8f:74:04:3f: d7:7b:1e:1d:b2:5e:cd:f5:06:03:fd:47:dd:f5:c5:62:30:ed: 87:f9:28:ca:2b:93:18:7e:eb:6d:b8:8a:69:b5:02:85:2f:b0: 6b:03:38:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTUwRjExMC8GA1UEBRMoNjYzRjRENUZDODI3MEE0NDIwRkUxRTYxRjkxQURGQTgz N0ZGMUVFNDAeFw0yNDA1MTcwODM0NDZaFw0yNDA1MjQwODM0NDZaMBgxFjAUBgNV BAMTDTY2NDcxNmE2LTdhMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqxUg6vSEPFf8zW1fEE6N0lgs4GDmSTNdBBdYJmVgtigPS41xdEPrDK7hN/z7y p9kfFHSknUt2Xqfi0kbFs0SD9CZZfntQikXbmde9Vt+6lzM1W/zXJhySocsSlGth cty/4oUYNYJ2EzuYeuUlkw7h8392K6JvnwRRUFu8pGCUiHNlF7TXoRKaXQAPA59b sIFvF/7Iv7amps39KFBxO/pgORdZlwBkcqQU3k2e3RZLsq4JVrWgT8vfHIPSK5Pe 2MupJE2Z2r299RSsV3wkCehOHDw4iZBQaMXdsOMdDg1+hMx9afPv/mSMB+jeN77p YqRq/Ef9cK4xAQokeJADACOZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULM8Klkld 1c0cDpI6LoMGjdeYNF0wHwYDVR0jBBgwFoAUZj9NX8gnCkQg/h5h+RrfqDf/HuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNTBGLzU3NzE5ODU0RDEz MzExRUVBQTIwREM4NEM0RjlBRTAyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmo5Tlg4Z25Da1FnX2g1aC1ScmZxRGZfSHVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx NTBGLzU3NzE5ODU0RDEzMzExRUVBQTIwREM4NEM0RjlBRTAyL1pqOU5YOGduQ2tR Z19oNWgtUnJmcURmX0h1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8un/mbAOhwAU/vYZS4UCdN1c5B2NLlLeKA+x/Oh6wr1Wv4/3SMMk4x OCdwECem3cGiKgs/Pl63R9LbfM5PBbloQGX7VI2zdDd1oWa1HU5Nj7KmUIzP7pUq rb1KszzdOoWQ/TA4/wecrtWYkUqPuWG0PUqnXCitNW1q/QnNQma42dbIYsdRgv6x NC6Ro9kbVqFVJN6haz6IgCRAqoPWC+qcATWLmJS6vHDG415cIRFQoXRpqUM016Me U5CtnsJmsPChzJd/xerUAIlROfuxcFvErkiRj3QEP9d7Hh2yXs31BgP9R931xWIw 7Yf5KMorkxh+6224imm1AoUvsGsDOLE= -----END CERTIFICATE-----Generated at Fri May 17 10:59:08 2024 by rpki-client on console-ams.rpki-client.org