$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: mtHmUlVD2MZLktHZAXpDI4OH2dKOx9RSH8jOpBYWdGo= Subject key identifier: AA:8D:94:27:69:77:14:3D:BB:59:EF:61:7A:BB:F4:0E:1A:3A:51:20 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 0586 Signing time: Sun 19 May 2024 00:35:26 +0000 Manifest this update: Sun 19 May 2024 00:35:25 +0000 Manifest next update: Sun 26 May 2024 00:35:25 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: 2ELDkUd+L4mkxloEoToHk9Evbwlj+7Ix6sKlgkMx+to=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: 7IAANyxDEmXIqjlkqfFbwfy+0yhpr6NgG5FWwa4XecI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: May 19 00:35:25 2024 GMT Not After : May 26 00:35:25 2024 GMT Subject: CN=6649494d-b7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:3e:81:15:72:09:bb:39:56:e6:74:60:e6: 03:3c:02:68:65:fe:4d:a0:e8:40:97:08:4c:b4:8e: 05:64:b8:78:88:99:bb:19:3a:b6:b2:99:45:af:10: 70:0b:19:4e:a7:b5:56:5a:80:f5:71:49:ca:cb:a8: e7:6b:25:4e:11:fb:d1:0a:07:ca:e2:ed:0a:0f:5f: 2d:fc:16:fe:4e:7e:17:6b:c3:b7:8c:b9:56:61:e7: d7:39:12:d5:b7:72:c4:c6:bc:25:28:29:83:58:fe: 10:bb:7b:e5:89:6f:af:37:63:f8:e4:7e:22:02:a5: 31:e9:6d:6d:31:17:31:ca:61:59:68:f0:28:f8:db: 1f:f7:10:d2:70:4a:bd:3c:9b:5b:ee:e6:d2:d4:29: 42:04:39:01:33:98:c7:04:c1:46:65:26:93:da:a6: f2:f3:99:21:a5:1d:fb:58:0a:88:e2:22:70:32:1d: 34:6b:b3:e8:61:6d:41:de:59:ae:06:d7:a9:5f:6c: 2d:6f:84:f4:4c:56:b1:c1:61:4c:0c:6f:8f:76:a7: 2a:17:c9:92:23:c8:93:06:10:f1:e4:bd:9a:8a:a6: f1:48:e4:8a:ec:31:6c:3d:c0:b0:25:67:be:35:7a: cc:f4:8d:11:60:0d:fa:d5:fc:65:ec:01:4d:44:5e: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8D:94:27:69:77:14:3D:BB:59:EF:61:7A:BB:F4:0E:1A:3A:51:20 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fe:15:0e:dd:69:a5:46:ad:18:1a:59:d0:39:b8:83:e7:54: ea:4f:26:41:8f:f2:17:d1:95:23:5c:f0:56:d4:5a:c2:bf:14: 3e:2c:c2:f8:19:37:59:82:75:40:9c:65:2d:21:39:af:32:48: f0:fb:c6:60:48:c5:e0:1e:5a:0b:49:11:dc:81:7e:ac:0d:a8: e0:0a:95:b5:5f:06:0b:07:86:ea:02:38:45:94:9e:8a:fe:17: ae:e7:b7:3d:08:f9:79:b1:4d:d7:e3:fb:97:b4:a3:69:8f:57: 55:96:83:93:84:05:02:3d:9c:39:bc:3b:d3:2e:40:89:38:76: eb:e5:2b:3e:29:6a:c1:2a:87:0a:2f:89:98:91:ad:d6:34:aa: e6:51:ac:a9:ba:23:6b:6d:07:e0:32:16:be:c9:46:15:40:e3: 63:8b:9e:63:ed:24:0f:c0:54:22:ca:29:05:d0:af:a7:64:c1: 27:d9:53:28:16:a5:1f:0c:bb:db:15:08:4f:f3:a6:3e:ad:6d: b5:6e:bb:5a:5f:a5:96:93:82:09:f4:39:2d:d4:41:af:38:a9: af:ef:4a:a1:a3:64:b9:ea:aa:c1:1f:11:0f:9d:12:b1:e2:f4: ed:f5:fe:f8:08:59:6c:a0:c9:3a:4c:11:88:10:eb:17:a8:75: b9:5c:ac:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjQwNTE5MDAzNTI1WhcNMjQwNTI2MDAzNTI1WjAYMRYwFAYD VQQDEw02NjQ5NDk0ZC1iN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt78+gRVyCbs5VuZ0YOYDPAJoZf5NoOhAlwhMtI4FZLh4iJm7GTq2splFrxBw CxlOp7VWWoD1cUnKy6jnayVOEfvRCgfK4u0KD18t/Bb+Tn4Xa8O3jLlWYefXORLV t3LExrwlKCmDWP4Qu3vliW+vN2P45H4iAqUx6W1tMRcxymFZaPAo+Nsf9xDScEq9 PJtb7ubS1ClCBDkBM5jHBMFGZSaT2qby85khpR37WAqI4iJwMh00a7PoYW1B3lmu BtepX2wtb4T0TFaxwWFMDG+PdqcqF8mSI8iTBhDx5L2aiqbxSOSK7DFsPcCwJWe+ NXrM9I0RYA361fxl7AFNRF78gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqNlCdp dxQ9u1nvYXq79A4aOlEgMB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd/hUO3WmlRq0YGlnQObiD51TqTyZBj/IX0ZUjXPBW1FrCvxQ+LML4 GTdZgnVAnGUtITmvMkjw+8ZgSMXgHloLSRHcgX6sDajgCpW1XwYLB4bqAjhFlJ6K /heu57c9CPl5sU3X4/uXtKNpj1dVloOThAUCPZw5vDvTLkCJOHbr5Ss+KWrBKocK L4mYka3WNKrmUaypuiNrbQfgMha+yUYVQONji55j7SQPwFQiyikF0K+nZMEn2VMo FqUfDLvbFQhP86Y+rW21brtaX6WWk4IJ9Dkt1EGvOKmv70qho2S56qrBHxEPnRKx 4vTt9f74CFlsoMk6TBGIEOsXqHW5XKxM -----END CERTIFICATE-----Generated at Sun May 19 00:59:40 2024 by rpki-client on console-fra.rpki-client.org