$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: 5w+ScC5y5z5QGk9oXLVcFI2BDVHLC3W22LjX+mJJ3cM= Subject key identifier: 83:AB:98:67:AF:70:63:33:35:EA:96:C6:9E:E9:8B:9C:A0:B3:3B:09 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0BDC Signing time: Fri 26 Apr 2024 19:02:15 +0000 Manifest this update: Fri 26 Apr 2024 19:02:14 +0000 Manifest next update: Fri 03 May 2024 19:02:14 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: pFKdJE4Auq2UyS91bikmh1tkeQmEKgwqtxKpZNgFJwE=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: GxZvBCPaKOQNju2/VPLiSdVyqkBxyg1tR+kGd5L/9/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Apr 26 19:02:14 2024 GMT Not After : May 3 19:02:14 2024 GMT Subject: CN=662bfa37-60d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:15:cb:ce:ee:78:af:6e:ac:47:02:ca:27: 49:71:7d:1a:1d:9e:cd:89:f1:09:5a:63:60:ea:6d: 9b:fe:fe:b2:00:57:24:53:c1:d0:b0:fc:11:cb:1f: 89:5b:4b:26:3e:01:50:52:50:0f:ef:c1:a5:75:24: fb:48:32:40:a0:2f:6d:76:54:47:73:b9:8f:d5:e0: 2a:a8:72:e9:11:2e:47:f5:5b:bf:de:bf:68:1d:ee: e7:39:e6:99:cc:0b:51:56:a2:44:f9:3c:e6:35:33: 50:45:54:c5:cb:c8:c0:98:42:55:59:d7:db:b6:72: e3:0d:5c:bf:82:44:25:38:55:62:38:50:54:20:f5: c7:42:12:5a:57:ce:b3:b6:0d:f6:9a:ff:ff:a5:8e: d8:6a:60:7d:51:3e:c2:65:85:13:f9:af:a2:5b:e6: f0:ae:cc:30:9b:db:6a:d1:f3:60:c3:3d:56:51:4c: 68:b0:60:16:65:89:0a:e3:f6:a7:94:e8:56:4e:c4: 23:a5:0b:fb:bf:38:0a:aa:5f:c4:67:e0:b9:a4:c3: c5:86:5a:51:35:30:78:bf:2c:e0:aa:ec:41:7c:9b: 26:b9:f9:3a:97:39:0e:72:57:e4:59:c5:8a:2c:d9: 59:4a:e1:60:d1:7d:b0:49:f9:9a:ba:6b:0a:17:0d: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AB:98:67:AF:70:63:33:35:EA:96:C6:9E:E9:8B:9C:A0:B3:3B:09 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:c2:ce:4c:7f:01:ba:2b:7b:c4:fc:83:36:f0:90:c6:6b: 63:c0:93:da:d5:69:61:5e:aa:99:51:3b:8e:23:db:38:f2:ca: 5c:68:0c:2f:13:c8:4b:8f:4a:e7:4c:28:6c:1d:9d:7c:ca:69: 6d:86:5c:88:1c:b3:cc:72:32:d2:c2:46:96:fa:ec:3d:cd:6c: 64:ac:65:8a:fb:7b:bd:a0:a0:8a:3e:6a:f6:53:1b:3a:99:a1: 99:b3:a0:72:f6:07:31:94:a3:65:c5:f1:d7:6a:81:cf:b8:6d: 39:99:8b:17:c6:8e:34:fb:29:17:2c:92:fc:e2:96:59:ef:93: 20:d7:37:33:3a:67:5b:f3:a7:34:03:0a:6c:27:b2:bf:92:c9: 15:cb:d6:a2:87:a7:97:af:98:01:4e:19:c0:b6:1b:bd:b7:92: 2d:1a:90:d5:90:ce:f3:f2:9d:02:84:cb:d1:16:81:f5:97:a5: 3a:17:26:4c:85:78:03:15:1c:3a:85:75:1b:28:41:2b:af:87: f2:59:9c:92:97:ff:56:56:3c:4a:84:bf:12:8f:1d:5e:5f:eb: 22:c2:24:d3:e3:e7:70:2d:8b:d0:a8:4f:31:7d:55:00:67:21: a7:6e:4c:3a:b2:99:d2:72:e2:c4:c4:a6:53:51:ea:9e:00:87: b6:e5:c6:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjQwNDI2MTkwMjE0WhcNMjQwNTAzMTkwMjE0WjAYMRYwFAYD VQQDEw02NjJiZmEzNy02MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVQVy87ueK9urEcCyidJcX0aHZ7NifEJWmNg6m2b/v6yAFckU8HQsPwRyx+J W0smPgFQUlAP78GldST7SDJAoC9tdlRHc7mP1eAqqHLpES5H9Vu/3r9oHe7nOeaZ zAtRVqJE+TzmNTNQRVTFy8jAmEJVWdfbtnLjDVy/gkQlOFViOFBUIPXHQhJaV86z tg32mv//pY7YamB9UT7CZYUT+a+iW+bwrswwm9tq0fNgwz1WUUxosGAWZYkK4/an lOhWTsQjpQv7vzgKql/EZ+C5pMPFhlpRNTB4vyzgquxBfJsmufk6lzkOclfkWcWK LNlZSuFg0X2wSfmaumsKFw3TVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOrmGev cGMzNeqWxp7pi5ygszsJMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWMLOTH8Buit7xPyDNvCQxmtjwJPa1WlhXqqZUTuOI9s48spcaAwv E8hLj0rnTChsHZ18ymlthlyIHLPMcjLSwkaW+uw9zWxkrGWK+3u9oKCKPmr2Uxs6 maGZs6By9gcxlKNlxfHXaoHPuG05mYsXxo40+ykXLJL84pZZ75Mg1zczOmdb86c0 AwpsJ7K/kskVy9aih6eXr5gBThnAthu9t5ItGpDVkM7z8p0ChMvRFoH1l6U6FyZM hXgDFRw6hXUbKEErr4fyWZySl/9WVjxKhL8Sjx1eX+siwiTT4+dwLYvQqE8xfVUA ZyGnbkw6spnScuLExKZTUeqeAIe25cZC -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org