$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: 8T+hVlBtAh1YAZJ05+ZIZh9FyO0Ij9zhYd3oYAfk/hI= Subject key identifier: E1:4C:AE:2D:AD:EA:30:6B:5A:54:B6:42:D5:84:BD:CD:64:A2:84:24 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 4B Signing time: Fri 17 May 2024 08:04:55 +0000 Manifest this update: Fri 17 May 2024 08:04:54 +0000 Manifest next update: Fri 24 May 2024 08:04:54 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 7QU+U73KcPP5rX9qb5FSmbOIvBPJb7EKe/+N0umMkoM=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 3TQM9ELa80hVtdt9LrT4vgc7x9okKSlCin85/6OAPc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: May 17 08:04:54 2024 GMT Not After : May 24 08:04:54 2024 GMT Subject: CN=66470fa6-f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:67:a1:d4:83:0e:bc:a7:ce:01:ce:b1:ea: b1:f9:71:04:28:8e:99:18:d7:40:e9:1c:7c:06:7a: 6c:c2:93:9a:4d:a8:08:4c:55:97:08:ca:dc:96:49: 31:c2:24:54:11:b4:fd:27:61:29:b6:b6:c8:e3:58: 7c:37:7e:89:84:96:80:34:9a:93:a4:83:c2:48:53: f5:7a:24:3a:88:87:63:cb:9b:d2:25:17:fa:08:54: fb:a8:dc:56:5d:99:2e:e4:9d:14:49:ea:78:31:f9: 40:84:0f:be:46:44:a4:f0:01:c2:e9:e6:75:da:5a: d2:94:69:2f:d5:80:b9:76:ee:8b:7d:07:c7:61:9f: f0:39:b9:db:c4:16:d6:21:ea:53:84:ba:c4:b6:8b: 3b:0b:da:d4:51:f5:d2:08:cc:5d:1e:a1:be:93:bb: f3:f9:da:c4:db:26:71:6b:fd:a5:3d:d1:45:79:bd: 9b:24:15:85:1f:d0:2a:33:a7:d1:6a:0e:1b:80:ea: 05:a2:75:96:d1:bb:6d:35:d2:1e:0e:e4:f7:ad:87: 26:50:9c:b6:98:5f:1c:24:14:af:a7:a5:0c:7f:a2: a7:29:f4:e4:1e:96:86:c2:8b:6b:f9:11:08:fe:91: 1e:8f:a1:4a:3b:27:fa:c5:1c:bc:86:d2:6e:83:8d: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:AE:2D:AD:EA:30:6B:5A:54:B6:42:D5:84:BD:CD:64:A2:84:24 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:49:38:db:b1:2d:18:62:23:7e:93:8d:4e:7c:a3:e0:7a:81: 99:2f:cb:a5:47:78:9a:47:24:1d:86:71:db:4f:b6:cf:85:7c: fe:50:d4:d1:61:9c:f8:77:ee:59:06:4a:a5:06:3e:35:45:e7: f6:bc:e2:85:ae:1e:d5:cb:27:0d:b9:8b:b9:49:f1:7b:94:a5: e3:72:15:ef:db:6e:d8:fb:04:8c:94:a7:a0:d0:df:1b:96:bc: 7a:2a:16:be:b7:31:79:ab:e2:ea:ce:9b:f5:25:c5:ec:ea:51: 8b:5d:92:ab:57:1c:a4:65:c3:51:33:1a:96:6b:a4:27:f0:bd: f7:1e:cd:3f:b9:83:97:d9:8d:27:a7:82:d5:1c:3f:e0:14:30: f9:5e:c3:3a:0e:02:1b:1d:56:b5:3f:8b:2c:af:b3:04:db:c9: a1:73:18:50:69:15:d5:2a:e7:15:1f:1d:f9:52:d5:e0:83:17: 8f:8d:21:e4:0f:00:68:93:1b:1c:91:43:21:c0:9b:dc:2d:15: 5d:19:99:be:17:e0:ed:cd:3e:23:87:55:a0:19:5a:54:cb:54: 36:8f:2f:18:29:5e:ee:8f:57:e6:b3:02:32:4a:f8:2c:2c:f4: 2c:a4:8e:db:cc:87:d5:d9:5a:32:3b:1d:c3:ff:56:5d:55:73: 25:40:36:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjM1MjExMC8GA1UEBRMoMEFCN0YzNkE3RERFNEUxMUY0QjAxNTk3REYwREU3QTI5 QTgwQkM0NDAeFw0yNDA1MTcwODA0NTRaFw0yNDA1MjQwODA0NTRaMBgxFjAUBgNV BAMTDTY2NDcwZmE2LWY1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtW2eh1IMOvKfOAc6x6rH5cQQojpkY10DpHHwGemzCk5pNqAhMVZcIytyWSTHC JFQRtP0nYSm2tsjjWHw3fomEloA0mpOkg8JIU/V6JDqIh2PLm9IlF/oIVPuo3FZd mS7knRRJ6ngx+UCED75GRKTwAcLp5nXaWtKUaS/VgLl27ot9B8dhn/A5udvEFtYh 6lOEusS2izsL2tRR9dIIzF0eob6Tu/P52sTbJnFr/aU90UV5vZskFYUf0Cozp9Fq DhuA6gWidZbRu2010h4O5PethyZQnLaYXxwkFK+npQx/oqcp9OQelobCi2v5EQj+ kR6PoUo7J/rFHLyG0m6Djc3rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4UyuLa3q MGtaVLZC1YS9zWSihCQwHwYDVR0jBBgwFoAUCrfzan3eThH0sBWX3w3nopqAvEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMzUyLzNEOUQ3RjVFQTFG QjExRUVBMzYwOTI1QUM0RjlBRTAyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3JmemFuM2VUaEgwc0JXWDN3M25vcHFBdkVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG MzUyLzNEOUQ3RjVFQTFGQjExRUVBMzYwOTI1QUM0RjlBRTAyL0NyZnphbjNlVGhI MHNCV1gzdzNub3BxQXZFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNJONuxLRhiI36TjU58o+B6gZkvy6VHeJpHJB2GcdtPts+FfP5Q1NFh nPh37lkGSqUGPjVF5/a84oWuHtXLJw25i7lJ8XuUpeNyFe/bbtj7BIyUp6DQ3xuW vHoqFr63MXmr4urOm/UlxezqUYtdkqtXHKRlw1EzGpZrpCfwvfcezT+5g5fZjSen gtUcP+AUMPlewzoOAhsdVrU/iyyvswTbyaFzGFBpFdUq5xUfHflS1eCDF4+NIeQP AGiTGxyRQyHAm9wtFV0Zmb4X4O3NPiOHVaAZWlTLVDaPLxgpXu6PV+azAjJK+Cws 9CykjtvMh9XZWjI7HcP/Vl1VcyVANk4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org