$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: OcuOArqdYXf82Cm8YEtBpRkgOE4JD/V9U2L+MlHUNQs= Subject key identifier: 80:BD:A8:5F:34:A0:4C:ED:0C:23:78:B4:56:4D:58:58:8E:04:55:20 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: 47 Signing time: Sun 15 Sep 2024 09:46:23 +0000 Manifest this update: Sun 15 Sep 2024 09:46:22 +0000 Manifest next update: Sun 22 Sep 2024 09:46:22 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: TsTjp+K62O5nXEcM1vsroQzW/3gCGeraKT/S41hwGWo=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Sep 15 09:46:22 2024 GMT Not After : Sep 22 09:46:22 2024 GMT Subject: CN=66e6acef-9ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:bc:fd:d1:5f:84:09:14:03:c1:3b:5a:84: 2c:8a:84:91:5e:b9:26:f1:00:f0:bf:1f:02:e3:0d: ab:1c:eb:a6:c1:5f:8c:c3:d6:18:e2:bc:39:90:11: 9f:07:54:05:c8:bd:a9:95:a0:e7:ed:0f:b5:7a:ef: 77:03:36:d2:c7:94:3b:07:87:04:64:0a:3c:28:ae: ac:f1:f9:c8:d8:93:d5:66:46:53:44:81:60:46:25: 2f:ab:eb:d4:71:f3:20:70:42:fb:8c:df:b1:c3:65: 3b:17:78:fe:dd:fd:38:f8:16:33:1c:78:d0:37:5d: 41:1f:e9:2e:f4:4a:f3:46:c0:e4:ca:67:cc:6f:d6: 5f:ee:dc:f4:15:2a:71:a4:5b:a5:ce:a2:7e:1a:36: 1a:2a:c6:f9:16:7f:5a:85:11:67:da:62:48:14:65: be:5d:75:e6:95:a3:a3:ed:09:9c:b1:fe:92:a8:3e: 20:03:25:0c:64:d9:e8:9a:08:96:ef:1b:04:7a:1d: 76:f5:68:ed:de:9b:88:2f:68:f5:ab:40:cd:1a:4b: d5:e2:88:a1:f7:0a:e6:af:a2:8f:21:4a:a6:d2:48: 69:4b:c2:81:74:29:ad:81:ab:97:0e:b5:2b:c0:b3: fd:8c:da:0a:dd:cc:c9:92:3a:17:e9:81:ea:5a:fe: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BD:A8:5F:34:A0:4C:ED:0C:23:78:B4:56:4D:58:58:8E:04:55:20 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:62:9f:da:0e:bf:2b:d8:8a:51:03:bb:89:61:33:46:74:2e: 67:a0:1b:b6:d0:0b:95:aa:af:02:0f:07:4c:20:3d:c2:e9:28: cd:86:e6:18:35:34:50:31:e7:a0:35:53:be:a6:b8:19:34:0b: a8:6b:a2:1b:03:62:6b:1f:6c:54:00:e9:d5:d3:4b:3e:87:46: a1:5e:97:ae:60:9c:02:f2:f5:1a:64:bc:96:e4:72:cc:5f:96: 8f:2e:da:c2:ff:b1:66:69:d4:cf:4c:b6:80:fe:17:3d:3f:41: 1f:96:5f:22:68:c4:64:5d:de:7a:ef:71:0e:0f:6a:e1:59:36: 12:93:dc:96:2d:1e:49:00:e3:00:2d:13:f8:e8:56:a4:b8:e1: 9b:27:f3:13:e5:50:02:0d:77:b6:6a:38:ca:e0:94:16:20:5f: e4:7c:0f:33:f0:cf:3f:9a:ae:1c:45:f3:1e:f7:f0:e5:2f:ab: 0a:a9:d2:17:cc:49:1a:be:3a:50:43:40:d1:05:16:57:0a:df: ed:f0:ea:a3:a4:ec:ff:7b:db:02:81:50:02:8a:bb:27:31:09: 78:9f:4a:c5:b8:70:9e:7f:ae:35:d4:9d:ed:1a:cf:dc:5d:69: 3b:83:df:3e:20:07:22:0f:d0:65:0a:a0:ba:6a:d6:bb:a6:68: 89:a0:e5:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUyQjExMC8GA1UEBRMoNEIzQjlEOTMwNTg4MEZGNjZCN0YxRTRDOTBGRjk4NzUy ODg2MzgxMTAeFw0yNDA5MTUwOTQ2MjJaFw0yNDA5MjIwOTQ2MjJaMBgxFjAUBgNV BAMTDTY2ZTZhY2VmLTllZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKY7z90V+ECRQDwTtahCyKhJFeuSbxAPC/HwLjDasc66bBX4zD1hjivDmQEZ8H VAXIvamVoOftD7V673cDNtLHlDsHhwRkCjworqzx+cjYk9VmRlNEgWBGJS+r69Rx 8yBwQvuM37HDZTsXeP7d/Tj4FjMceNA3XUEf6S70SvNGwOTKZ8xv1l/u3PQVKnGk W6XOon4aNhoqxvkWf1qFEWfaYkgUZb5ddeaVo6PtCZyx/pKoPiADJQxk2eiaCJbv GwR6HXb1aO3em4gvaPWrQM0aS9XiiKH3Cuavoo8hSqbSSGlLwoF0Ka2Bq5cOtSvA s/2M2grdzMmSOhfpgepa/hRVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgL2oXzSg TO0MI3i0Vk1YWI4EVSAwHwYDVR0jBBgwFoAUSzudkwWID/Zrfx5MkP+YdSiGOBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTJCL0Y4MzZCREVDMENF QzExRUY5RjgxRjYzRkM0RjlBRTAyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09C RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3p1ZGt3V0lEX1pyZng1TWtQLVlkU2lHT0JFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTJCL0Y4MzZCREVDMENFQzExRUY5RjgxRjYzRkM0RjlBRTAyL1N6dWRrd1dJRF9a cmZ4NU1rUC1ZZFNpR09CRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJpin9oOvyvYilEDu4lhM0Z0LmegG7bQC5WqrwIPB0wgPcLpKM2G5hg1 NFAx56A1U76muBk0C6hrohsDYmsfbFQA6dXTSz6HRqFel65gnALy9RpkvJbkcsxf lo8u2sL/sWZp1M9MtoD+Fz0/QR+WXyJoxGRd3nrvcQ4PauFZNhKT3JYtHkkA4wAt E/joVqS44Zsn8xPlUAINd7ZqOMrglBYgX+R8DzPwzz+arhxF8x738OUvqwqp0hfM SRq+OlBDQNEFFlcK3+3w6qOk7P972wKBUAKKuycxCXifSsW4cJ5/rjXUne0az9xd aTuD3z4gByIP0GUKoLpq1rumaImg5fY= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:24 2024 by rpki-client on console-ams.rpki-client.org