$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft File: sZJ_E4KvyIRDDJZerSibw77GS-w.mft (raw, json) Hash identifier: uxPj3YGnjlhukTbUrxmlL6TwcubmRrEvPQjdq3fhhs0= Subject key identifier: 0C:E8:10:46:CA:3F:D2:41:50:58:0F:8A:AE:61:49:3A:F9:00:E0:FA Authority key identifier: B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC Certificate issuer: /CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft Manifest number: 41 Signing time: Fri 17 May 2024 08:12:42 +0000 Manifest this update: Fri 17 May 2024 08:12:42 +0000 Manifest next update: Fri 24 May 2024 08:12:42 +0000 Files and hashes: 1: sZJ_E4KvyIRDDJZerSibw77GS-w.crl (hash: NXI+eWpCW8p8BFtar/6gD012su6L1oizDC4TBC6gF1o=) 2: B0A65A04B2A711EEA3E1C240C4F9AE02.roa (hash: hORZ5AISHPiAhkgQPGt4LkQHQaYezLZ+UwdT1yQrlr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8F7/serialNumber=B1927F1382AFC884430C965EAD289BC3BEC64BEC Validity Not Before: May 17 08:12:42 2024 GMT Not After : May 24 08:12:42 2024 GMT Subject: CN=6647117a-85fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:79:c6:9b:e2:bd:6c:a7:25:5e:ca:9c:be:43: 90:b6:5a:95:99:12:e5:30:fb:e5:44:18:6b:3b:22: 80:9b:99:1c:b1:30:ca:00:c5:eb:b9:c9:5e:59:8c: 31:5b:46:ad:ed:aa:6c:37:5e:d5:b5:9a:50:df:d3: 77:1a:df:58:01:29:79:f6:58:6f:0a:e0:48:72:10: f6:8e:c8:a0:d0:cf:8b:8b:be:87:28:4a:fe:53:20: 5b:29:0b:fe:f2:3a:a6:11:51:10:ad:b4:87:eb:30: 0f:4c:ad:6f:51:e8:c8:b6:95:50:5e:48:ac:49:c2: 61:cc:78:23:da:72:40:a1:08:e0:9e:f7:11:99:95: 6b:c7:22:bf:83:af:c6:d8:9d:49:91:4d:c2:14:a4: 8d:72:ef:30:8c:5e:98:3a:35:d7:6d:44:d1:7d:46: 33:a9:3d:5d:d2:d0:44:e3:37:ca:0f:82:63:66:c0: 3f:c0:d7:b0:98:51:7e:be:06:7e:8b:9c:e8:fd:fb: ae:0b:17:f4:0a:0c:c7:db:39:a1:1e:45:5c:73:e8: c6:9a:5b:0c:02:03:07:12:35:c8:0f:cf:c7:40:5f: dd:3d:42:72:65:47:f2:67:fb:6f:16:08:4b:67:c5: 28:84:21:5d:b3:ea:9b:15:ff:20:7e:70:89:e6:0b: 0e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:10:46:CA:3F:D2:41:50:58:0F:8A:AE:61:49:3A:F9:00:E0:FA X509v3 Authority Key Identifier: keyid:B1:92:7F:13:82:AF:C8:84:43:0C:96:5E:AD:28:9B:C3:BE:C6:4B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZJ_E4KvyIRDDJZerSibw77GS-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8F7/8093C308B2A511EE90DEA220C4F9AE02/sZJ_E4KvyIRDDJZerSibw77GS-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:58:39:98:cc:56:55:55:d5:b4:23:9f:cd:35:76:51:8d:68: b6:17:62:a3:b5:a1:80:cc:48:1d:e2:cf:35:4c:2a:22:a9:c8: d1:29:e4:4c:27:49:68:28:47:de:ff:f9:28:f2:3e:d0:dc:e1: c2:04:40:58:2b:fd:4e:93:99:9b:bf:8a:ce:45:fd:73:b3:c4: 29:dc:4e:22:bb:24:87:3f:25:b7:93:68:49:f2:d5:38:70:d8: f8:9a:ae:a9:0e:64:11:ef:2b:ca:3b:7e:e4:f9:32:13:ba:06: 74:e6:91:06:76:e2:3b:56:84:1d:e7:07:d1:e0:39:d8:d0:48: 77:e1:20:39:ea:ab:a2:b4:97:42:f3:19:c4:f6:ef:0d:dc:be: 96:7e:6e:6f:1a:e2:e1:9f:b2:91:8f:e8:05:a4:f9:26:fe:47: f5:e8:63:5e:7f:e9:b1:f6:6e:b2:9d:46:47:96:31:76:e0:c5: 76:92:48:c3:0f:11:6e:39:42:a9:95:42:b9:92:d3:43:4f:12: fc:1f:f6:5a:3b:8d:db:b7:eb:9f:19:2c:f5:75:d4:a0:90:cc: d8:6e:97:af:86:4d:8f:62:24:97:b4:9f:08:85:6b:cc:52:87: 89:1f:5c:9a:78:aa:78:0b:4b:eb:9a:5d:b7:e4:78:05:57:5b: c9:b7:91:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzhGNzExMC8GA1UEBRMoQjE5MjdGMTM4MkFGQzg4NDQzMEM5NjVFQUQyODlCQzNC RUM2NEJFQzAeFw0yNDA1MTcwODEyNDJaFw0yNDA1MjQwODEyNDJaMBgxFjAUBgNV BAMTDTY2NDcxMTdhLTg1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0ecab4r1spyVeypy+Q5C2WpWZEuUw++VEGGs7IoCbmRyxMMoAxeu5yV5ZjDFb Rq3tqmw3XtW1mlDf03ca31gBKXn2WG8K4EhyEPaOyKDQz4uLvocoSv5TIFspC/7y OqYRURCttIfrMA9MrW9R6Mi2lVBeSKxJwmHMeCPackChCOCe9xGZlWvHIr+Dr8bY nUmRTcIUpI1y7zCMXpg6NddtRNF9RjOpPV3S0ETjN8oPgmNmwD/A17CYUX6+Bn6L nOj9+64LF/QKDMfbOaEeRVxz6MaaWwwCAwcSNcgPz8dAX909QnJlR/Jn+28WCEtn xSiEIV2z6psV/yB+cInmCw7nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDOgQRso/ 0kFQWA+KrmFJOvkA4PowHwYDVR0jBBgwFoAUsZJ/E4KvyIRDDJZerSibw77GS+ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOEY3LzgwOTNDMzA4QjJB NTExRUU5MERFQTIyMEM0RjlBRTAyL3NaSl9FNEt2eUlSRERKWmVyU2lidzc3R1Mt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1pKX0U0S3Z5SVJEREpaZXJTaWJ3NzdHUy13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OEY3LzgwOTNDMzA4QjJBNTExRUU5MERFQTIyMEM0RjlBRTAyL3NaSl9FNEt2eUlS RERKWmVyU2lidzc3R1Mtdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhYOZjMVlVV1bQjn801dlGNaLYXYqO1oYDMSB3izzVMKiKpyNEp5Ewn SWgoR97/+SjyPtDc4cIEQFgr/U6TmZu/is5F/XOzxCncTiK7JIc/JbeTaEny1Thw 2PiarqkOZBHvK8o7fuT5MhO6BnTmkQZ24jtWhB3nB9HgOdjQSHfhIDnqq6K0l0Lz GcT27w3cvpZ+bm8a4uGfspGP6AWk+Sb+R/XoY15/6bH2brKdRkeWMXbgxXaSSMMP EW45QqmVQrmS00NPEvwf9lo7jdu3658ZLPV11KCQzNhul6+GTY9iJJe0nwiFa8xS h4kfXJp4qngLS+uaXbfkeAVXW8m3kRI= -----END CERTIFICATE-----Generated at Fri May 17 10:10:53 2024 by rpki-client on console-fra.rpki-client.org