$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json) Hash identifier: eXu6/DLeaTbt0YTh1jf4tdT07H5D96DF5i8WtqI/CmM= Subject key identifier: FE:C7:E2:F8:BA:F2:4B:12:BB:98:9A:F4:A8:50:B9:1A:E2:15:24:93 Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Certificate serial: 0585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft Manifest number: 0585 Signing time: Sat 04 May 2024 14:45:22 +0000 Manifest this update: Sat 04 May 2024 14:45:21 +0000 Manifest next update: Sat 11 May 2024 14:45:21 +0000 Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: D1kVc1uIeakvelhcHch001VKLU5GiaRiPGZmLx1/h7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Validity Not Before: May 4 14:45:21 2024 GMT Not After : May 11 14:45:21 2024 GMT Subject: CN=66364a01-f74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:be:12:4f:46:17:75:4f:8a:dd:d6:c9:91: 6b:e2:c1:1c:7f:6a:c7:1d:05:b7:e0:05:4a:f5:ed: c0:b2:c7:df:23:fb:55:2c:6a:b4:e7:79:b8:a7:33: df:73:aa:e6:91:01:c5:5b:ef:d5:e5:38:41:66:c4: 14:7f:c4:39:b8:36:ed:83:27:6e:db:d9:7c:29:87: 80:a8:31:ff:bd:a0:9f:55:3b:ad:0f:65:74:c2:8f: c5:c9:71:7a:8e:42:4f:66:fe:ba:32:99:16:3f:0f: 81:e7:d5:ec:27:18:39:c6:cf:aa:bf:b5:18:19:d2: c1:4b:d0:12:c1:06:cc:fa:e5:cb:ad:60:83:de:a4: 2e:3b:18:02:74:fd:9e:a6:9b:6e:1f:ac:0b:a5:7d: d6:a6:de:49:82:cf:a7:31:c6:92:32:a8:95:65:4e: 5a:ae:ab:42:37:81:58:6b:86:ad:87:6a:7b:d4:d9: d7:d4:c7:92:ad:46:93:a4:40:e3:60:e6:47:d6:25: 19:f1:55:be:f9:b5:ff:dc:8b:2f:bf:6a:81:35:c8: e3:a5:87:7f:17:90:9d:22:d5:a5:e1:b4:2b:6e:54: c5:ad:a9:12:24:49:4f:7c:75:08:4b:83:26:67:9d: 6b:35:e5:9d:bc:6d:e1:59:1a:61:05:dd:9c:5a:64: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C7:E2:F8:BA:F2:4B:12:BB:98:9A:F4:A8:50:B9:1A:E2:15:24:93 X509v3 Authority Key Identifier: keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:ee:52:ae:e2:4f:03:ad:3e:5e:2d:e9:7d:53:74:2e:81: 6c:c2:4f:46:10:45:3b:fe:e7:fa:3b:96:ca:29:8e:98:d7:6f: 78:55:dc:12:34:ed:ce:63:dc:4c:25:11:3a:dc:51:e3:5c:3e: da:86:d0:4e:c5:f0:8a:ed:af:5f:42:cf:70:b5:9d:96:cc:fc: 34:44:70:c7:82:79:13:31:ae:bc:2d:ca:a4:94:b1:a2:25:42: e2:73:38:43:9a:4d:e1:d0:ce:10:e5:86:92:ba:46:6f:a4:bc: b4:98:d7:49:d8:49:7f:28:7b:58:ec:0e:b9:a5:b9:3e:cd:73: eb:74:70:ab:51:e2:01:24:18:d7:0d:85:85:8a:15:aa:fd:b0: ba:92:e8:b5:13:97:98:c4:5a:a3:cb:b3:04:40:fe:30:92:b6: 3e:fd:dd:9d:ce:19:17:80:6a:1c:15:82:2a:d4:09:b3:f9:f7: 84:70:8b:46:c5:9b:43:89:b7:72:b6:75:07:9e:c1:48:5c:00: 80:74:91:09:ab:c1:69:b2:d5:4f:9b:5a:1b:3b:2a:4c:bb:87: 9a:ad:8e:d1:90:17:56:10:24:af:e3:d4:95:b7:c4:b5:32:b6: 3d:37:83:4c:a5:8f:18:1a:14:24:21:6d:cb:b3:eb:9c:e3:15: ed:95:21:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG QUFERDQ5QjQwHhcNMjQwNTA0MTQ0NTIxWhcNMjQwNTExMTQ0NTIxWjAYMRYwFAYD VQQDEw02NjM2NGEwMS1mNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNS+Ek9GF3VPit3WyZFr4sEcf2rHHQW34AVK9e3AssffI/tVLGq053m4pzPf c6rmkQHFW+/V5ThBZsQUf8Q5uDbtgydu29l8KYeAqDH/vaCfVTutD2V0wo/FyXF6 jkJPZv66MpkWPw+B59XsJxg5xs+qv7UYGdLBS9ASwQbM+uXLrWCD3qQuOxgCdP2e pptuH6wLpX3Wpt5Jgs+nMcaSMqiVZU5arqtCN4FYa4ath2p71NnX1MeSrUaTpEDj YOZH1iUZ8VW++bX/3Isvv2qBNcjjpYd/F5CdItWl4bQrblTFrakSJElPfHUIS4Mm Z51rNeWdvG3hWRphBd2cWmRUbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7H4vi6 8ksSu5ia9KhQuRriFSSTMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct dmljcWNoNnF6RGo2cmRTYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc5+5SruJPA60+Xi3pfVN0LoFswk9GEEU7/uf6O5bKKY6Y1294VdwS NO3OY9xMJRE63FHjXD7ahtBOxfCK7a9fQs9wtZ2WzPw0RHDHgnkTMa68LcqklLGi JULiczhDmk3h0M4Q5YaSukZvpLy0mNdJ2El/KHtY7A65pbk+zXPrdHCrUeIBJBjX DYWFihWq/bC6kui1E5eYxFqjy7MEQP4wkrY+/d2dzhkXgGocFYIq1Amz+feEcItG xZtDibdytnUHnsFIXACAdJEJq8FpstVPm1obOypMu4earY7RkBdWECSv49SVt8S1 MrY9N4NMpY8YGhQkIW3Ls+uc4xXtlSHa -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org