$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: Ge06St+IbuIfIxWCNMKZBG1nV/AjKLyC8GnO1evPKoE= Subject key identifier: F3:EF:D7:58:44:86:EA:D3:0B:56:87:65:4E:2E:65:59:EE:A2:3D:FF Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0D00 Signing time: Sat 18 May 2024 18:44:43 +0000 Manifest this update: Sat 18 May 2024 18:44:42 +0000 Manifest next update: Sat 25 May 2024 18:44:42 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: w6TtDhgYXcPcbnEwnMyaNJPlp/pups03ks4pzLUt6G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: May 18 18:44:42 2024 GMT Not After : May 25 18:44:42 2024 GMT Subject: CN=6648f71a-f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:bb:f6:c9:ce:38:f5:a1:6b:ae:f5:83:d8: 5d:51:46:37:ed:d8:7c:e0:bd:78:66:56:44:5d:b7: 73:c7:98:82:91:b3:04:ee:0f:6b:e3:76:1d:e8:a1: 15:89:fb:9a:1d:93:c7:e6:15:ee:0c:47:3e:90:83: 9d:bf:f4:bc:3b:ec:56:7c:3f:9e:e0:57:75:34:84: 61:26:7d:11:0d:d5:d5:b5:8b:8b:fb:44:5c:df:05: d1:0c:eb:64:d0:40:eb:23:9e:09:34:07:89:67:b8: 5e:43:3e:a0:b3:83:c3:60:57:6c:d4:b6:28:da:a6: 62:0a:02:79:f4:b5:47:8a:2d:69:c8:32:44:a0:64: a6:11:02:29:c8:b4:1e:86:91:d3:0a:7a:72:7d:60: a8:af:d7:53:67:05:b4:ff:29:35:60:1a:50:00:d4: e7:06:e4:c0:ff:83:35:44:f8:e9:e7:7b:c8:9a:32: 4f:fd:a8:78:df:1e:19:7c:e3:9a:bf:75:44:fb:07: a5:83:6b:01:5d:58:ca:78:7c:78:58:17:7e:17:c5: 35:09:41:2f:a5:18:61:32:51:48:2a:2d:9e:65:93: 76:d1:71:b0:e7:aa:b7:fc:b0:9a:17:aa:70:f8:d6: fa:eb:93:bc:14:d3:69:3b:a6:7a:6a:9a:39:f6:f9: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:D7:58:44:86:EA:D3:0B:56:87:65:4E:2E:65:59:EE:A2:3D:FF X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f6:e9:7c:4d:0f:84:b4:28:d5:f2:9a:b5:05:5f:e8:18:05: c0:df:8f:ed:1f:b2:a4:83:d8:3d:92:4e:6e:75:84:47:50:92: 0c:76:84:d5:31:63:23:c6:0b:a3:c4:bb:9b:bb:86:d2:83:a4: ed:bb:e1:40:6b:ab:1c:92:75:60:8d:fd:7a:10:4e:2f:34:a4: ea:97:56:0b:60:27:58:27:c2:e0:84:80:09:f7:31:a5:48:a5: 07:9c:54:ea:b0:ec:68:66:b1:c1:be:c6:5f:98:0c:fe:ee:a8: 40:b3:bf:33:97:ba:e7:94:2c:a8:19:2d:e5:cf:e9:bb:4b:a0: a8:12:ef:fe:9a:30:db:2b:f5:ec:51:8c:b6:ef:dc:71:81:f3: fd:47:93:fc:44:f3:e2:e4:6a:b0:ed:29:24:1d:87:58:0f:f7: 72:21:b5:e1:ba:af:66:01:17:21:51:1a:98:11:22:f0:bd:3f: ae:fc:58:8e:f2:f2:67:31:d6:5c:a2:07:38:25:56:1e:d6:d5: 46:33:c2:eb:ad:c4:24:71:37:1f:ff:18:eb:c6:5a:7c:1a:33: bf:19:77:77:6f:f5:41:65:b0:39:3d:ea:2f:32:88:8a:87:b6: ac:a1:4b:c0:20:13:cd:1f:78:6c:dc:e9:13:6f:fc:14:2f:c5: e5:70:74:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjQwNTE4MTg0NDQyWhcNMjQwNTI1MTg0NDQyWjAYMRYwFAYD VQQDEw02NjQ4ZjcxYS1mNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQi79snOOPWha671g9hdUUY37dh84L14ZlZEXbdzx5iCkbME7g9r43Yd6KEV ifuaHZPH5hXuDEc+kIOdv/S8O+xWfD+e4Fd1NIRhJn0RDdXVtYuL+0Rc3wXRDOtk 0EDrI54JNAeJZ7heQz6gs4PDYFds1LYo2qZiCgJ59LVHii1pyDJEoGSmEQIpyLQe hpHTCnpyfWCor9dTZwW0/yk1YBpQANTnBuTA/4M1RPjp53vImjJP/ah43x4ZfOOa v3VE+welg2sBXVjKeHx4WBd+F8U1CUEvpRhhMlFIKi2eZZN20XGw56q3/LCaF6pw +Nb665O8FNNpO6Z6apo59vlfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPv11hE hurTC1aHZU4uZVnuoj3/MB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg9ul8TQ+EtCjV8pq1BV/oGAXA34/tH7Kkg9g9kk5udYRHUJIMdoTV MWMjxgujxLubu4bSg6Ttu+FAa6scknVgjf16EE4vNKTql1YLYCdYJ8LghIAJ9zGl SKUHnFTqsOxoZrHBvsZfmAz+7qhAs78zl7rnlCyoGS3lz+m7S6CoEu/+mjDbK/Xs UYy279xxgfP9R5P8RPPi5Gqw7SkkHYdYD/dyIbXhuq9mARchURqYESLwvT+u/FiO 8vJnMdZcogc4JVYe1tVGM8LrrcQkcTcf/xjrxlp8GjO/GXd3b/VBZbA5PeovMoiK h7asoUvAIBPNH3hs3OkTb/wUL8XlcHSz -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org