$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft File: byZ-RWYIP-sjaiw5I7cDlgC955Q.mft (raw, json) Hash identifier: i0dFPriz/vTcRope7YvoAvuKNUfceoWBVzZShFxT/2Q= Subject key identifier: 73:FE:1F:A6:35:82:0C:C8:8D:55:A4:17:1F:A5:F9:33:C2:07:B1:F5 Authority key identifier: 6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 Certificate issuer: /CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft Manifest number: 0A42 Signing time: Sat 04 May 2024 20:41:08 +0000 Manifest this update: Sat 04 May 2024 20:41:08 +0000 Manifest next update: Sat 11 May 2024 20:41:08 +0000 Files and hashes: 1: byZ-RWYIP-sjaiw5I7cDlgC955Q.crl (hash: g/N+c+Hh24mV5aYRLCVChbxrUbScXYclmQIeJ3bXGgA=) 2: A86EF6C8C9AF11EAA26C015FC4F9AE02.roa (hash: kONUJBoxY/BhLOEc4dA2tylYELY1wDWg8sTmx/gxQHk=) 3: 40569A6AC9AE11EAA7F2915BC4F9AE02.roa (hash: wgftKb4IInisu650djsPHH84sPf1yKI2QWeFmfVp8Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C24/serialNumber=6F267E4566083FEB236A2C3923B7039600BDE794 Validity Not Before: May 4 20:41:08 2024 GMT Not After : May 11 20:41:08 2024 GMT Subject: CN=66369d64-f4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:bb:07:00:af:f7:d9:1f:d6:23:cc:82:a3: be:5a:f0:f9:d4:c3:fb:3d:30:14:9a:80:2d:ad:f4: 9b:bf:8e:91:76:9f:75:10:1c:94:80:fe:7e:76:30: 24:e2:3f:33:a3:76:19:24:b2:4b:7f:02:27:d4:e7: 1e:c3:a6:f1:de:ae:b9:bb:c1:61:3b:96:c9:5c:0b: e0:86:d9:ed:a3:8e:30:1c:0e:d6:c2:9b:af:41:45: 85:13:77:2f:4e:5d:7e:a7:c1:ba:de:be:7e:9e:57: 02:56:7b:d6:6f:38:f5:e6:57:46:da:dc:07:11:08: a0:a7:9c:ae:da:10:93:23:21:dc:1c:25:df:77:3f: 66:ac:5c:20:be:67:e2:28:6a:80:41:f5:3b:3f:95: 7c:ec:a1:f0:e7:4d:7c:6a:23:87:e1:ce:f3:20:6b: 35:b6:76:c2:c8:41:9a:10:ec:7d:28:c4:d0:5c:30: 35:65:f6:f2:87:da:15:a1:a8:00:34:c8:86:10:ce: 5c:8d:43:b0:c0:14:e1:de:60:6a:92:b0:30:81:e8: 16:31:ec:9d:ab:bc:ba:62:48:c2:33:a7:18:88:69: fd:0e:0a:9f:4e:19:52:e6:1f:66:e0:90:eb:42:f8: 33:fa:2a:46:f3:f4:69:e5:e2:ca:00:17:b6:26:57: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FE:1F:A6:35:82:0C:C8:8D:55:A4:17:1F:A5:F9:33:C2:07:B1:F5 X509v3 Authority Key Identifier: keyid:6F:26:7E:45:66:08:3F:EB:23:6A:2C:39:23:B7:03:96:00:BD:E7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byZ-RWYIP-sjaiw5I7cDlgC955Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C24/18C8B692443211EA9CADFD1CC4F9AE02/byZ-RWYIP-sjaiw5I7cDlgC955Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d8:c9:62:f2:ba:35:8f:4e:ff:13:1d:a8:f8:82:96:2d:66: f8:64:6b:5a:52:0d:7a:8f:fd:1f:1b:b0:18:d7:ce:f7:15:e2: 59:18:6f:dd:48:e1:02:63:de:3a:55:c3:67:02:a5:e2:a0:84: 42:c2:3a:7a:8f:85:b5:4c:90:f8:52:df:73:f5:d4:3c:28:40: 14:91:d8:19:7c:7e:ca:e7:40:39:62:c6:26:23:2f:89:db:bb: 18:e8:fb:de:4d:57:ca:ed:c4:8f:29:4b:4c:e1:6e:7c:78:95: c7:49:48:17:aa:5b:5c:cc:c7:ff:1f:4a:24:5e:81:cd:90:e9: f8:6d:c7:e0:62:f7:f0:6e:3b:e8:09:83:83:c4:01:66:a4:1a: 9f:d4:f4:99:8d:f9:12:b1:5a:2d:12:c4:b7:a2:23:c4:fc:8c: 2a:1d:88:1d:20:2c:3c:39:58:7d:35:f7:92:1e:ef:05:5d:d9: 39:3d:e4:c0:9c:db:82:bf:61:89:dc:3c:6a:66:70:29:96:38: 50:7c:40:70:6b:d8:72:31:97:15:48:e2:39:ab:74:39:01:d2: 83:30:5b:12:40:1c:6f:1c:2a:86:18:21:4a:48:ca:1b:4e:0c: 87:21:a9:b8:f7:82:a5:9e:57:64:0b:40:b8:d2:d8:6c:49:aa: ae:fc:89:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMjQxMTAvBgNVBAUTKDZGMjY3RTQ1NjYwODNGRUIyMzZBMkMzOTIzQjcwMzk2 MDBCREU3OTQwHhcNMjQwNTA0MjA0MTA4WhcNMjQwNTExMjA0MTA4WjAYMRYwFAYD VQQDEw02NjM2OWQ2NC1mNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2S7BwCv99kf1iPMgqO+WvD51MP7PTAUmoAtrfSbv46Rdp91EByUgP5+djAk 4j8zo3YZJLJLfwIn1Ocew6bx3q65u8FhO5bJXAvghtnto44wHA7WwpuvQUWFE3cv Tl1+p8G63r5+nlcCVnvWbzj15ldG2twHEQigp5yu2hCTIyHcHCXfdz9mrFwgvmfi KGqAQfU7P5V87KHw5018aiOH4c7zIGs1tnbCyEGaEOx9KMTQXDA1Zfbyh9oVoagA NMiGEM5cjUOwwBTh3mBqkrAwgegWMeydq7y6YkjCM6cYiGn9DgqfThlS5h9m4JDr Qvgz+ipG8/Rp5eLKABe2JlfGCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP+H6Y1 ggzIjVWkFx+l+TPCB7H1MB8GA1UdIwQYMBaAFG8mfkVmCD/rI2osOSO3A5YAveeU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyNC8xOEM4QjY5MjQ0 MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAtc2phaXc1STdjRGxnQzk1 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5Wi1SV1lJUC1zamFpdzVJN2NEbGdDOTU1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyNC8xOEM4QjY5MjQ0MzIxMUVBOUNBREZEMUNDNEY5QUUwMi9ieVotUldZSVAt c2phaXc1STdjRGxnQzk1NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2Mli8ro1j07/Ex2o+IKWLWb4ZGtaUg16j/0fG7AY1873FeJZGG/d SOECY946VcNnAqXioIRCwjp6j4W1TJD4Ut9z9dQ8KEAUkdgZfH7K50A5YsYmIy+J 27sY6PveTVfK7cSPKUtM4W58eJXHSUgXqltczMf/H0okXoHNkOn4bcfgYvfwbjvo CYODxAFmpBqf1PSZjfkSsVotEsS3oiPE/IwqHYgdICw8OVh9NfeSHu8FXdk5PeTA nNuCv2GJ3DxqZnApljhQfEBwa9hyMZcVSOI5q3Q5AdKDMFsSQBxvHCqGGCFKSMob TgyHIam494KlnldkC0C40thsSaqu/IkW -----END CERTIFICATE-----Generated at Sat May 4 21:33:01 2024 by rpki-client on console-fra.rpki-client.org