$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: PKopXiKQBg0sWRdKy90xtIhDG7mIvCcAgasuo9bv/F4= Subject key identifier: 32:2D:CE:7E:E4:45:DE:72:7D:55:BD:DA:0A:34:71:D7:42:A5:24:97 Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 011B Signing time: Sun 19 May 2024 05:17:59 +0000 Manifest this update: Sun 19 May 2024 05:17:59 +0000 Manifest next update: Sun 26 May 2024 05:17:59 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: wZ7Q7r5FmqBcp4OHk9XP7bKOdRxv1Pk2xHADCRf+p60=) 2: FEFB8698666C11EE99E97C1CC4F9AE02.roa (hash: 176XxzfzBjk8/c0cHQLL3AuB2K5c8na4rKzTdeIsnp8=) 3: 671373E6666B11EEAB1E227CC4F9AE02.roa (hash: BosxTod83Vng94xa6eeQRzzAw/qSDphDhDUbbXlhl0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: May 19 05:17:59 2024 GMT Not After : May 26 05:17:59 2024 GMT Subject: CN=66498b87-f022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:5e:5f:be:1d:35:8c:ef:35:8a:4e:9e:1a: 12:dc:14:12:6a:d8:79:7e:56:a9:a1:15:fd:25:5b: 97:db:4b:d7:3c:40:2b:f9:33:3d:7c:82:a6:37:33: 9f:b3:e1:e5:ad:79:48:4c:53:ea:53:d7:21:37:9a: 48:93:8b:d2:f8:7e:c7:db:4d:ec:19:5d:a0:4b:d7: da:1f:fe:e6:34:21:e7:a0:c0:7f:46:1f:a6:73:5b: 83:6d:69:de:d4:be:a3:18:bd:75:ad:c7:b1:51:c3: 01:ec:83:1e:af:e1:dc:09:91:d8:94:88:b0:63:85: f8:67:05:b0:9b:f3:d0:e5:ba:ed:10:06:49:99:7b: b3:61:29:9c:e6:19:6b:f9:8e:3e:6b:02:d3:db:e9: 0e:01:bd:90:a4:e2:e2:09:cc:e7:2e:ce:c6:ba:61: bd:0f:79:f7:d6:de:c6:9b:94:be:0b:38:48:99:c6: 98:df:8d:a5:81:08:35:39:8d:e1:85:f7:cc:1a:3c: fe:f8:43:47:f9:47:ff:41:0b:de:b0:90:4c:9b:91: 14:72:10:7a:7b:2b:ad:fb:2b:fc:79:5e:27:d7:cd: e0:0a:0b:3d:95:53:86:20:c7:28:be:96:a8:7f:66: 2c:cd:5e:e4:2d:37:2a:a5:19:5d:0b:48:01:04:dd: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2D:CE:7E:E4:45:DE:72:7D:55:BD:DA:0A:34:71:D7:42:A5:24:97 X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:50:d0:e5:ba:71:c1:9f:f1:c4:6c:43:e9:b3:ab:e4:95:3c: e8:c8:37:00:6c:7d:29:b1:b4:8c:0a:b3:bd:52:0e:17:7f:c6: 9a:6d:99:a2:74:11:63:55:ef:49:67:73:41:fa:85:69:35:04: 2b:10:44:f1:15:c8:f7:58:61:22:a7:f6:c0:70:e0:ee:8b:37: 27:92:1d:2c:cf:38:97:e1:3c:87:d6:fc:0a:57:0e:7c:4d:5a: 91:a7:25:0c:d1:a6:9a:cf:54:f3:a1:92:cf:cf:3d:b5:82:76: d6:ff:9a:5a:70:60:f8:45:b4:27:93:42:14:13:24:2a:9d:2d: d0:13:a5:1b:26:d0:c5:f6:23:13:0c:c8:eb:ae:f7:e5:ff:e4: bc:1f:b0:93:8e:07:b3:18:32:7e:4d:51:f8:4b:c0:26:bd:33: 97:d9:35:95:dc:cb:b9:9c:46:2b:3a:de:65:54:16:d1:d3:4a: a5:fe:b4:eb:cb:68:92:c1:66:0e:f9:a3:97:6f:56:97:17:f6: d7:4e:5a:4c:d5:58:4d:15:da:ed:6f:04:94:10:52:71:0c:c9: a7:6c:97:5d:b2:65:72:c2:4f:2e:03:b0:98:f3:85:6d:f5:b7: 41:bc:0a:d6:c5:80:99:69:a2:3d:1a:82:c5:0e:c7:1d:c4:87: 75:ce:76:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjQwNTE5MDUxNzU5WhcNMjQwNTI2MDUxNzU5WjAYMRYwFAYD VQQDEw02NjQ5OGI4Ny1mMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLBeX74dNYzvNYpOnhoS3BQSath5flapoRX9JVuX20vXPEAr+TM9fIKmNzOf s+HlrXlITFPqU9chN5pIk4vS+H7H203sGV2gS9faH/7mNCHnoMB/Rh+mc1uDbWne 1L6jGL11rcexUcMB7IMer+HcCZHYlIiwY4X4ZwWwm/PQ5brtEAZJmXuzYSmc5hlr +Y4+awLT2+kOAb2QpOLiCcznLs7GumG9D3n31t7Gm5S+CzhImcaY342lgQg1OY3h hffMGjz++ENH+Uf/QQvesJBMm5EUchB6eyut+yv8eV4n183gCgs9lVOGIMcovpao f2YszV7kLTcqpRldC0gBBN2GdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDItzn7k Rd5yfVW92go0cddCpSSXMB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrUNDlunHBn/HEbEPps6vklTzoyDcAbH0psbSMCrO9Ug4Xf8aabZmi dBFjVe9JZ3NB+oVpNQQrEETxFcj3WGEip/bAcODuizcnkh0szziX4TyH1vwKVw58 TVqRpyUM0aaaz1TzoZLPzz21gnbW/5pacGD4RbQnk0IUEyQqnS3QE6UbJtDF9iMT DMjrrvfl/+S8H7CTjgezGDJ+TVH4S8AmvTOX2TWV3Mu5nEYrOt5lVBbR00ql/rTr y2iSwWYO+aOXb1aXF/bXTlpM1VhNFdrtbwSUEFJxDMmnbJddsmVywk8uA7CY84Vt 9bdBvArWxYCZaaI9GoLFDscdxId1znbj -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org