$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: C5+dQ/WdaqNONIEpPoARs7jJtF+JwfadxsGFnKM6Ilk= Subject key identifier: 54:1D:59:6D:36:07:A5:01:28:F0:57:F2:FD:BC:0E:EB:13:6F:55:A1 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 029D Signing time: Sat 18 May 2024 22:30:13 +0000 Manifest this update: Sat 18 May 2024 22:30:12 +0000 Manifest next update: Sat 25 May 2024 22:30:12 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: xMV/0d6oFMEDd33jqtFQ2YBChV27A0bIsuoUf9rH5uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: May 18 22:30:12 2024 GMT Not After : May 25 22:30:12 2024 GMT Subject: CN=66492bf4-ef44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:dd:0c:b0:4a:87:ef:13:ca:2f:50:c0:ad: 1f:dd:c3:0d:10:42:18:6d:6c:d8:36:4c:97:f9:e0: 0d:eb:d7:a1:89:73:b9:21:d7:02:01:ad:67:9e:cd: 4b:e0:8e:10:3a:cb:8f:44:6e:58:82:62:c6:73:af: ec:1e:1d:bf:14:87:24:15:51:3b:25:d1:f9:cd:14: e2:ff:25:1d:0b:0d:bc:3e:5d:a4:60:ed:d6:5e:8d: 5f:d7:fb:e8:52:cd:c7:fb:e8:ad:98:83:54:70:cb: 82:e9:b8:42:22:ce:4d:92:f1:e5:2e:fa:b9:79:14: 97:ba:e2:5b:0d:11:67:cc:90:9d:77:1c:06:64:96: db:45:28:09:b8:a5:b0:b1:13:3f:9d:9d:3e:6a:73: 0d:36:60:6e:c5:af:89:e4:92:d9:a1:bd:49:f1:c9: c0:e2:fd:c2:b4:05:9f:e2:56:3f:63:ee:62:fb:92: 37:e0:74:27:f6:c5:df:03:25:2e:5c:aa:ae:ef:f5: bc:cb:4c:fa:45:d1:8e:c9:d6:68:6f:43:9a:d3:4a: 37:71:a9:27:71:53:9f:99:e2:a1:9a:2c:01:39:18: e1:e6:f3:0c:fc:76:ba:bc:a0:e5:f2:b5:7f:8b:c2: 64:05:21:37:1c:dd:7b:50:ba:6b:68:02:3d:14:80: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:59:6D:36:07:A5:01:28:F0:57:F2:FD:BC:0E:EB:13:6F:55:A1 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:5f:52:67:d5:e3:68:76:84:4c:93:cb:f1:68:ca:ba:e5:db: bb:57:c2:f1:19:88:ae:49:af:ce:f4:ad:11:de:29:57:9b:cc: aa:c8:50:c0:5b:fa:ae:6e:13:82:8e:e1:28:cb:94:07:a3:a6: a6:6e:cd:e4:f3:87:5e:4b:d4:24:14:92:cf:05:a8:b5:12:df: cd:a8:a3:ed:bb:84:9a:39:f1:e0:cc:00:c4:7f:65:d5:85:87: 64:f9:68:08:f8:ee:15:39:4c:ef:58:c0:5d:a7:20:87:17:81: 4b:66:df:a1:89:e3:8b:fd:4e:9a:d4:38:bc:0f:1e:66:ba:8e: 6b:8a:5f:16:4b:47:19:b3:97:e8:56:b4:9e:12:09:9e:38:45: b1:2e:d9:bc:35:53:cb:f5:62:00:27:fd:41:f0:7d:00:2b:22: 08:c1:17:e3:94:a3:a2:28:aa:7b:8f:d7:4f:9d:ea:26:1e:2f: 9c:92:45:23:57:c5:38:12:09:45:df:18:f6:ee:b0:49:65:9b: 25:ac:91:82:48:50:9b:f3:88:d1:b0:4c:b7:e3:b9:35:5c:bc: 63:50:df:70:d6:79:94:83:59:63:a9:56:d8:b3:5c:9a:8b:19: 70:7a:f8:58:f3:70:f7:78:21:38:dd:27:95:fc:77:ce:7a:07: 3a:34:f3:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjQwNTE4MjIzMDEyWhcNMjQwNTI1MjIzMDEyWjAYMRYwFAYD VQQDEw02NjQ5MmJmNC1lZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9vdDLBKh+8Tyi9QwK0f3cMNEEIYbWzYNkyX+eAN69ehiXO5IdcCAa1nns1L 4I4QOsuPRG5YgmLGc6/sHh2/FIckFVE7JdH5zRTi/yUdCw28Pl2kYO3WXo1f1/vo Us3H++itmINUcMuC6bhCIs5NkvHlLvq5eRSXuuJbDRFnzJCddxwGZJbbRSgJuKWw sRM/nZ0+anMNNmBuxa+J5JLZob1J8cnA4v3CtAWf4lY/Y+5i+5I34HQn9sXfAyUu XKqu7/W8y0z6RdGOydZob0Oa00o3cakncVOfmeKhmiwBORjh5vMM/Ha6vKDl8rV/ i8JkBSE3HN17ULpraAI9FICxtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQdWW02 B6UBKPBX8v28DusTb1WhMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiX1Jn1eNodoRMk8vxaMq65du7V8LxGYiuSa/O9K0R3ilXm8yqyFDA W/qubhOCjuEoy5QHo6ambs3k84deS9QkFJLPBai1Et/NqKPtu4SaOfHgzADEf2XV hYdk+WgI+O4VOUzvWMBdpyCHF4FLZt+hieOL/U6a1Di8Dx5muo5ril8WS0cZs5fo VrSeEgmeOEWxLtm8NVPL9WIAJ/1B8H0AKyIIwRfjlKOiKKp7j9dPneomHi+ckkUj V8U4EglF3xj27rBJZZslrJGCSFCb84jRsEy347k1XLxjUN9w1nmUg1ljqVbYs1ya ixlwevhY83D3eCE43SeV/HfOegc6NPNB -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org