$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft File: i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json) Hash identifier: MNyBNW441Hau4BqXUACyQUz4wn5ftMcLG5GxXzUMPAY= Subject key identifier: 2F:0E:21:5C:A0:62:3B:03:4C:9E:26:E3:3A:B3:AC:47:47:DA:7B:1F Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 Certificate issuer: /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft Manifest number: 1304 Signing time: Mon 06 May 2024 19:47:05 +0000 Manifest this update: Mon 06 May 2024 19:47:05 +0000 Manifest next update: Mon 13 May 2024 19:47:05 +0000 Files and hashes: 1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: QfGLnjLbAokzLdtcAnym+4Ye1kxaDM0St39WSIpjWnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290 Validity Not Before: May 6 19:47:05 2024 GMT Not After : May 13 19:47:05 2024 GMT Subject: CN=663933b9-6488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:00:5a:95:7a:3f:8c:e4:8a:a2:9e:7a:fe: e3:1e:46:a5:c9:98:3a:0a:52:e9:c2:35:cd:f9:13: 5a:0c:bf:8d:8d:18:1e:ba:09:d4:5a:a9:f5:21:de: 82:d8:44:d7:7f:63:27:46:f2:64:d5:f1:71:c5:69: fc:b3:f6:10:f5:1a:1c:2c:0b:4d:7b:03:ae:ba:9d: 4f:ca:a5:ff:c2:0d:04:65:35:42:5b:59:50:63:9b: 42:02:3b:c2:53:46:73:41:29:81:85:40:6f:38:bb: 8e:71:ab:7f:f6:f3:ff:3f:80:c8:3c:8f:f9:3d:6b: 2d:c2:0f:86:45:bb:c2:4a:27:eb:af:4d:05:b6:bd: 83:c0:ae:fd:00:99:7b:85:e9:ba:e3:7d:a6:c8:bd: bb:5c:05:58:e9:11:ac:71:dd:bd:53:8f:d1:fe:32: 2b:8e:f0:f4:34:47:44:79:1e:44:ba:b2:75:22:aa: cc:b2:c1:61:c2:16:b4:2d:cc:6e:b2:af:c7:2e:40: c0:d3:45:ee:bc:3d:a4:b0:80:8a:f8:84:5b:ba:a8: 61:6e:d2:22:29:85:e9:3b:7b:1c:ad:f6:66:1e:35: e9:1f:49:36:d4:a4:9c:c9:2f:85:39:34:7d:42:f0: 7b:da:da:86:b1:5a:a0:74:1f:3e:4d:09:42:c4:12: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0E:21:5C:A0:62:3B:03:4C:9E:26:E3:3A:B3:AC:47:47:DA:7B:1F X509v3 Authority Key Identifier: keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:8d:08:19:b5:b8:55:e1:e9:73:29:7c:f2:a6:ee:bd:f1: 49:7c:b4:f7:25:e8:74:17:2a:3a:0d:cd:6b:05:c7:d0:9c:38: d5:4e:38:82:c5:4d:07:f7:2a:1c:4d:b0:69:4a:ea:fe:42:33: 3c:46:5e:13:16:05:67:38:f5:2d:d2:8a:d3:76:ca:9e:35:c6: 21:f0:17:2b:18:62:05:eb:d7:7c:12:c4:e8:40:a1:90:df:b1: 0f:95:df:0e:f1:7b:a2:90:51:85:4d:3f:ba:5d:8d:58:8a:59: d7:54:18:4f:39:03:90:1e:fe:ba:2f:b9:55:19:82:97:26:08: f9:80:fa:38:c6:41:28:ba:29:5e:4b:6e:cc:b6:05:5d:54:10: ff:fd:83:bb:ab:b9:4b:e7:c4:bd:0e:dd:92:39:85:be:06:5b: ed:a7:15:cf:7d:e4:56:03:c5:af:0d:75:04:86:4e:63:f8:71: 0f:fb:d7:4f:3c:11:b0:eb:a4:6b:0f:ff:46:90:d9:47:46:a1: 46:87:f6:df:e6:b6:70:df:cc:86:93:cd:21:4d:a7:5e:9d:85: 13:66:51:e3:99:81:79:cb:5e:49:26:f4:52:6c:40:8c:40:38: fe:df:e5:64:b9:91:68:c7:dc:c5:79:4a:72:3c:86:c2:85:fe: 45:39:fa:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKDhCRTlEOTJFM0IzMUQ0MENBMzNCM0JCNjI5NDc0MzJF ODQ1NkQyOTAwHhcNMjQwNTA2MTk0NzA1WhcNMjQwNTEzMTk0NzA1WjAYMRYwFAYD VQQDEw02NjM5MzNiOS02NDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0IAWpV6P4zkiqKeev7jHkalyZg6ClLpwjXN+RNaDL+NjRgeugnUWqn1Id6C 2ETXf2MnRvJk1fFxxWn8s/YQ9RocLAtNewOuup1PyqX/wg0EZTVCW1lQY5tCAjvC U0ZzQSmBhUBvOLuOcat/9vP/P4DIPI/5PWstwg+GRbvCSifrr00Ftr2DwK79AJl7 hem6432myL27XAVY6RGscd29U4/R/jIrjvD0NEdEeR5EurJ1IqrMssFhwha0Lcxu sq/HLkDA00XuvD2ksICK+IRbuqhhbtIiKYXpO3scrfZmHjXpH0k21KScyS+FOTR9 QvB72tqGsVqgdB8+TQlCxBLWvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8OIVyg YjsDTJ4m4zqzrEdH2nsfMB8GA1UdIwQYMBaAFIvp2S47MdQMozs7tilHQy6EVtKQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFBeWpPenUyS1VkRExvUlcw cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktblpManN4MUF5ak96dTJLVWRETG9SVzBwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi9pLW5aTGpzeDFB eWpPenUyS1VkRExvUlcwcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXWI0IGbW4VeHpcyl88qbuvfFJfLT3Jeh0Fyo6Dc1rBcfQnDjVTjiC xU0H9yocTbBpSur+QjM8Rl4TFgVnOPUt0orTdsqeNcYh8BcrGGIF69d8EsToQKGQ 37EPld8O8XuikFGFTT+6XY1YilnXVBhPOQOQHv66L7lVGYKXJgj5gPo4xkEouile S27MtgVdVBD//YO7q7lL58S9Dt2SOYW+BlvtpxXPfeRWA8WvDXUEhk5j+HEP+9dP PBGw66RrD/9GkNlHRqFGh/bf5rZw38yGk80hTadenYUTZlHjmYF5y15JJvRSbECM QDj+3+VkuZFox9zFeUpyPIbChf5FOfpx -----END CERTIFICATE-----Generated at Mon May 6 22:40:59 2024 by rpki-client on console-ams.rpki-client.org