$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: mmAmU/yDeoA4HxyZDPVROI8HeLFiXG4OuDdC/R48urY= Subject key identifier: A8:E6:AD:94:66:BE:4C:81:8E:CB:82:52:7B:2F:EC:53:C4:07:9D:F0 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: B0 Signing time: Fri 17 May 2024 06:42:16 +0000 Manifest this update: Fri 17 May 2024 06:42:15 +0000 Manifest next update: Fri 24 May 2024 06:42:15 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: trRE/kCGpTXXYl2kSk9EjEjCEibQcV4HrBTpmhQH+is=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: jXocr6dknpIt7+UAWYaXZ5PIXEsUlaTBPLc+ZcPV93A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: May 17 06:42:15 2024 GMT Not After : May 24 06:42:15 2024 GMT Subject: CN=6646fc48-918f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:a1:97:7a:8c:85:63:39:cd:f4:fc:7d:4a: 84:e8:8b:49:b7:16:e7:39:4c:3b:e1:e7:93:45:60: fe:5c:4b:f4:df:68:ec:aa:38:05:13:90:91:ef:d5: 6d:8b:4f:c2:cf:4f:e5:8b:2e:23:76:04:90:89:ff: c6:a3:5b:84:42:94:86:d7:98:87:39:90:8d:b2:39: 43:05:42:29:d8:c1:1a:78:71:5c:3d:82:0c:4b:4a: d7:44:f5:ec:49:74:1c:92:56:af:3d:c0:17:79:9f: ed:25:c9:e9:0a:3b:2a:ba:c1:72:8e:68:93:2c:5b: 6e:21:29:46:e1:56:3d:a2:26:cb:b0:94:0f:0f:33: 20:ed:f3:88:01:f4:8d:40:ce:15:54:a1:1f:50:d4: bb:78:3a:c0:2d:c1:42:49:b4:61:eb:98:bf:94:0b: d1:4c:6f:98:00:b0:c4:73:eb:30:2b:a5:9f:56:c0: a6:ab:0d:42:38:e0:5e:0d:52:1a:b5:57:93:00:54: 0b:f7:9b:df:99:30:fb:46:71:13:90:c8:96:21:1d: f5:05:86:1f:b8:cb:15:16:74:07:ce:6f:bf:7b:70: 21:11:b2:aa:33:a6:4e:92:4b:f9:0f:4f:dc:74:9f: 5a:55:d6:e4:5a:20:4f:29:72:87:06:b0:0a:f8:6b: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E6:AD:94:66:BE:4C:81:8E:CB:82:52:7B:2F:EC:53:C4:07:9D:F0 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8c:4c:1d:d1:bd:60:12:bf:86:b4:ee:89:4b:20:57:ec:ce: b1:37:f7:d0:e9:5d:32:4b:2e:79:6e:c2:75:ff:23:a4:67:67: 76:15:19:03:b8:90:d3:98:aa:e3:9d:60:d4:7e:af:e5:04:f4: 32:a6:d7:ac:26:87:09:07:1e:d4:04:14:36:4a:f1:b6:4b:65: 17:10:e6:76:f8:86:f8:11:9b:1b:15:75:c4:76:b8:81:e8:d1: d9:57:b7:81:a7:0c:bb:fc:a2:02:b2:da:8c:e0:40:d2:59:52: b9:6d:34:a2:ef:bb:2e:75:61:53:97:b3:1f:e4:d6:b1:cd:79: a2:d6:52:4a:80:69:16:42:85:42:de:f5:6f:bb:a0:c2:65:cf: cf:21:b3:18:25:0f:0e:14:0e:b4:f6:7f:af:f9:34:b2:33:eb: e2:e2:69:61:18:a8:6b:0b:83:2a:8f:46:3d:3d:f1:13:a4:85: d3:85:ed:a3:e4:1b:5a:17:d3:bf:cb:9c:d5:0b:d4:c7:d3:a0: 70:fe:bc:91:3b:9f:6b:be:97:c6:6a:ff:7f:a4:5c:fa:ef:ea: 8f:b8:c0:68:6a:52:b3:c9:9a:04:b3:61:72:ed:19:90:41:53: 0a:6b:30:dd:a0:69:9f:a5:f5:f5:13:75:8b:52:1f:60:d9:0f: 56:26:7d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjQwNTE3MDY0MjE1WhcNMjQwNTI0MDY0MjE1WjAYMRYwFAYD VQQDEw02NjQ2ZmM0OC05MThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU+hl3qMhWM5zfT8fUqE6ItJtxbnOUw74eeTRWD+XEv032jsqjgFE5CR79Vt i0/Cz0/liy4jdgSQif/Go1uEQpSG15iHOZCNsjlDBUIp2MEaeHFcPYIMS0rXRPXs SXQcklavPcAXeZ/tJcnpCjsqusFyjmiTLFtuISlG4VY9oibLsJQPDzMg7fOIAfSN QM4VVKEfUNS7eDrALcFCSbRh65i/lAvRTG+YALDEc+swK6WfVsCmqw1COOBeDVIa tVeTAFQL95vfmTD7RnETkMiWIR31BYYfuMsVFnQHzm+/e3AhEbKqM6ZOkkv5D0/c dJ9aVdbkWiBPKXKHBrAK+Gv5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjmrZRm vkyBjsuCUnsv7FPEB53wMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSjEwd0b1gEr+GtO6JSyBX7M6xN/fQ6V0ySy55bsJ1/yOkZ2d2FRkD uJDTmKrjnWDUfq/lBPQyptesJocJBx7UBBQ2SvG2S2UXEOZ2+Ib4EZsbFXXEdriB 6NHZV7eBpwy7/KICstqM4EDSWVK5bTSi77sudWFTl7Mf5NaxzXmi1lJKgGkWQoVC 3vVvu6DCZc/PIbMYJQ8OFA609n+v+TSyM+vi4mlhGKhrC4Mqj0Y9PfETpIXThe2j 5BtaF9O/y5zVC9TH06Bw/ryRO59rvpfGav9/pFz67+qPuMBoalKzyZoEs2Fy7RmQ QVMKazDdoGmfpfX1E3WLUh9g2Q9WJn39 -----END CERTIFICATE-----Generated at Fri May 17 08:52:53 2024 by rpki-client on console-ams.rpki-client.org