$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft File: ZmruIMmoyx9DEkGPHiBXqoprxPs.mft (raw, json) Hash identifier: Ssz6w15hAbQ4RRWouy8VYAV/CItC26ibqHjrFSUnhFY= Subject key identifier: 71:5E:1F:71:A2:2A:6A:5B:4A:BB:02:07:A2:C3:19:07:99:2E:AF:7B Authority key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB Certificate issuer: /CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft Manifest number: 0313 Signing time: Fri 03 May 2024 03:13:00 +0000 Manifest this update: Fri 03 May 2024 03:13:00 +0000 Manifest next update: Fri 10 May 2024 03:13:00 +0000 Files and hashes: 1: ZmruIMmoyx9DEkGPHiBXqoprxPs.crl (hash: cDstWWqVCNqeNfR+zXWlbXj6po0lssuPq0FSyI1IeEU=) 2: 563C52F8827011ECB06A7E29C4F9AE02.roa (hash: x/cf4sYRLQ2j9Yf/UYJIoN7cj+sIgUVHQyGy6+lDz3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB Validity Not Before: May 3 03:13:00 2024 GMT Not After : May 10 03:13:00 2024 GMT Subject: CN=6634563c-7445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:14:f1:e0:dc:4d:22:2b:65:1d:6f:d2:58: 38:2b:67:28:08:15:a9:51:52:5e:cd:5b:80:af:cf: 10:42:5d:43:24:4c:fb:62:fb:3e:55:80:53:d8:1e: 2e:34:51:fa:f0:20:48:a6:47:3e:00:e7:fb:ce:6a: 20:d6:78:ce:36:12:cb:e7:df:46:3a:64:18:a3:0d: 74:7a:f1:3d:5c:96:5a:f8:86:7a:c7:b4:3a:79:1b: 22:e1:af:98:7a:74:d0:cf:c5:c0:87:79:77:17:bf: b9:8a:ef:63:46:7e:4c:fa:65:40:dc:f1:8a:37:03: d1:ce:50:35:3b:63:11:3a:a2:2c:2b:03:27:6d:b2: 74:4c:ea:be:d3:a1:cd:31:51:60:73:6c:47:07:e4: 9c:1b:de:44:b1:7f:4d:dc:3b:fe:a2:99:bd:14:57: 22:ec:a5:78:30:ea:1c:28:10:48:87:0b:20:be:d2: 05:58:01:11:fe:a6:07:c3:fd:9c:6b:d2:3d:d7:fb: c6:bb:5e:42:a9:9c:b1:b6:be:5b:90:f3:4c:58:22: 9a:21:18:87:59:4a:be:8d:88:5a:e7:0b:87:42:db: 23:d2:80:85:8b:b3:85:f4:2e:41:29:30:48:20:20: 1d:6d:33:83:90:10:d8:84:a3:71:4e:8d:8b:5f:4a: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:1F:71:A2:2A:6A:5B:4A:BB:02:07:A2:C3:19:07:99:2E:AF:7B X509v3 Authority Key Identifier: keyid:66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:94:f6:fa:99:a8:c8:f6:20:60:f4:7a:85:00:27:61:17:74: 0d:b0:01:d6:61:c7:4f:99:dc:af:5a:01:af:18:23:76:3a:58: e3:76:29:59:7c:44:91:5a:af:ca:45:e9:31:7a:0a:6d:a0:46: cd:7e:02:38:e3:7e:1c:25:49:b9:5c:cc:27:15:10:af:23:b3: d3:34:67:ac:15:5a:f8:f1:5f:23:36:64:1e:82:52:18:9e:8e: 91:5e:2b:ea:cd:a1:99:78:2e:c0:47:b4:d3:02:ac:87:41:5b: a4:c1:dc:86:73:2e:ca:b3:21:29:3a:cb:82:68:e2:f7:cc:41: 78:24:ac:55:1d:83:69:50:aa:cb:71:56:97:58:bb:2f:44:c4: 2f:0a:58:d9:1d:ad:21:8a:96:53:5c:d0:25:b9:28:57:45:16: 0d:12:a1:2c:6c:c6:d1:5e:d5:26:74:ee:18:44:2a:02:65:2b: e5:82:33:d3:14:49:e7:e4:d8:75:db:0b:09:be:0b:90:4f:f8: 63:a4:87:49:d6:bc:03:b9:55:6c:69:f8:ad:94:55:b1:58:a4: 85:58:42:76:b1:a9:9f:5a:ba:8b:2f:b0:cd:5d:77:3c:44:11: 71:7d:9e:18:50:4f:13:7e:5c:34:0c:e7:c7:3b:6d:34:c9:87: 10:c6:73:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGQzAxMTAvBgNVBAUTKDY2NkFFRTIwQzlBOENCMUY0MzEyNDE4RjFFMjA1N0FB OEE2QkM0RkIwHhcNMjQwNTAzMDMxMzAwWhcNMjQwNTEwMDMxMzAwWjAYMRYwFAYD VQQDEw02NjM0NTYzYy03NDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YgU8eDcTSIrZR1v0lg4K2coCBWpUVJezVuAr88QQl1DJEz7Yvs+VYBT2B4u NFH68CBIpkc+AOf7zmog1njONhLL599GOmQYow10evE9XJZa+IZ6x7Q6eRsi4a+Y enTQz8XAh3l3F7+5iu9jRn5M+mVA3PGKNwPRzlA1O2MROqIsKwMnbbJ0TOq+06HN MVFgc2xHB+ScG95EsX9N3Dv+opm9FFci7KV4MOocKBBIhwsgvtIFWAER/qYHw/2c a9I91/vGu15CqZyxtr5bkPNMWCKaIRiHWUq+jYha5wuHQtsj0oCFi7OF9C5BKTBI ICAdbTODkBDYhKNxTo2LX0qJWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFeH3Gi KmpbSrsCB6LDGQeZLq97MB8GA1UdIwQYMBaAFGZq7iDJqMsfQxJBjx4gV6qKa8T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUZDMC8wRTQ1ODA3Qzgy NkMxMUVDQkQzOThCNThDNEY5QUUwMi9abXJ1SU1tb3l4OURFa0dQSGlCWHFvcHJ4 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ptcnVJTW1veXg5REVrR1BIaUJYcW9wcnhQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUZDMC8wRTQ1ODA3QzgyNkMxMUVDQkQzOThCNThDNEY5QUUwMi9abXJ1SU1tb3l4 OURFa0dQSGlCWHFvcHJ4UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhlPb6majI9iBg9HqFACdhF3QNsAHWYcdPmdyvWgGvGCN2OljjdilZ fESRWq/KRekxegptoEbNfgI4434cJUm5XMwnFRCvI7PTNGesFVr48V8jNmQeglIY no6RXivqzaGZeC7AR7TTAqyHQVukwdyGcy7KsyEpOsuCaOL3zEF4JKxVHYNpUKrL cVaXWLsvRMQvCljZHa0hipZTXNAluShXRRYNEqEsbMbRXtUmdO4YRCoCZSvlgjPT FEnn5Nh12wsJvguQT/hjpIdJ1rwDuVVsafitlFWxWKSFWEJ2samfWrqLL7DNXXc8 RBFxfZ4YUE8Tflw0DOfHO200yYcQxnOv -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org