$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: TdgYsdBR6WF3puxTalivd6fOS43R6OUOTxP/YGkuiik= Subject key identifier: 44:FE:38:EE:D8:C4:3B:27:FC:E3:ED:4F:59:A2:94:D0:37:47:35:A7 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: D1 Signing time: Fri 31 May 2024 07:06:58 +0000 Manifest this update: Fri 31 May 2024 07:06:57 +0000 Manifest next update: Fri 07 Jun 2024 07:06:57 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: s7waUMQkOqemvzYXrgjgHJw/FtI+StdP0Mb5jgL4vvE=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: ssaH/8SpdKsqdDitk2qgJT2SCDl83tgdMRPI1+sqRAs=) 3: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: dISoXNe9nLBdGWh2sRce7YSRAKbxZcsrgrZkFUMnVC8=) 4: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 5gugZWMlRWcGfURdlEL7v6YlsC8vwoJfNVXYniet7Tw=) 5: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: ekxizC7WQ9qSzs8VkX6MZRNz8zMiiZpIlp77LCKctNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: May 31 07:06:57 2024 GMT Not After : Jun 7 07:06:57 2024 GMT Subject: CN=66597712-75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:2c:1f:23:9c:0a:8b:2f:29:c2:da:44:1f: 6b:20:e1:43:80:2b:a4:04:2b:3a:6a:73:35:8c:5e: 88:0c:42:89:18:2d:29:5e:3a:20:b6:72:0c:17:9b: 36:1e:34:da:c9:1b:e9:8e:e9:58:06:f8:66:ed:cb: b9:03:4b:01:87:e8:5e:5f:a0:4f:ba:86:c8:02:82: 76:eb:8c:a3:7f:53:66:86:0b:b7:4f:20:8f:fa:a0: f5:85:1a:5f:a1:c2:1a:7f:22:24:34:f5:1b:61:b2: 7e:1f:1c:25:f2:33:b3:c0:0a:db:4b:d2:f4:9d:06: 02:74:6a:19:1a:14:ef:27:50:55:a1:53:40:56:32: 8b:b3:7f:86:f8:ae:c7:65:10:88:49:86:ab:1f:01: 50:f9:6e:71:60:6c:39:76:10:ce:2c:28:82:07:b9: 49:c8:b1:0b:b3:12:cc:d4:37:d4:4c:a7:70:1f:b3: 34:fb:be:7f:4c:32:69:b9:25:cb:36:1f:ee:ce:4b: 56:36:60:ed:3a:3f:8c:d6:08:be:02:7c:9a:26:c3: 9d:03:28:cd:bf:83:11:0a:c5:b5:65:67:a8:ca:11: 75:63:3e:43:28:d5:db:f5:4b:85:0a:b0:6c:92:55: d4:21:ab:fc:9a:6a:57:16:bf:a5:96:21:e4:39:dd: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FE:38:EE:D8:C4:3B:27:FC:E3:ED:4F:59:A2:94:D0:37:47:35:A7 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b3:f1:5b:65:40:d9:e3:ab:f3:c7:90:15:86:87:d2:98:e7: fb:06:df:b6:2f:bf:79:d5:11:13:05:6f:48:0e:07:70:6a:31: 24:f8:ec:91:39:0e:0e:7d:52:7e:70:0c:ff:bd:6e:74:07:74: fa:c1:6d:63:46:3f:72:71:ec:29:2a:cd:ed:2d:80:52:7e:44: db:47:4b:0e:7c:fc:c0:c9:eb:4a:3f:72:fd:e4:b8:49:27:dc: 17:e5:07:23:40:3f:57:86:31:61:0e:18:af:0a:88:f3:ad:23: 07:49:cc:51:e8:4a:97:4c:39:63:b0:40:d2:7c:28:ef:7d:64: 12:bb:0c:20:2b:05:ff:1b:77:5c:b1:b6:90:5b:0a:48:78:23: 76:d1:77:2f:c7:78:08:00:ab:d9:86:21:fd:00:7c:49:fa:cd: 1a:82:b1:4c:82:8e:e7:63:e3:2b:91:24:d4:4a:07:83:34:4f: 82:cc:b4:72:12:e6:09:15:d3:89:41:2d:0c:5a:50:a0:50:24: d8:90:3c:1d:b3:73:94:57:8f:48:d1:22:5e:73:67:d3:8b:8e: cd:0f:ef:8b:fa:10:1a:72:b1:c1:09:3a:ed:99:1e:b6:b7:7c: b7:ff:03:35:3b:60:14:2c:3a:1a:e2:6f:4d:54:f9:0e:d9:3f: 12:69:5d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjQwNTMxMDcwNjU3WhcNMjQwNjA3MDcwNjU3WjAYMRYwFAYD VQQDEw02NjU5NzcxMi03NWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3josHyOcCosvKcLaRB9rIOFDgCukBCs6anM1jF6IDEKJGC0pXjogtnIMF5s2 HjTayRvpjulYBvhm7cu5A0sBh+heX6BPuobIAoJ264yjf1Nmhgu3TyCP+qD1hRpf ocIafyIkNPUbYbJ+Hxwl8jOzwArbS9L0nQYCdGoZGhTvJ1BVoVNAVjKLs3+G+K7H ZRCISYarHwFQ+W5xYGw5dhDOLCiCB7lJyLELsxLM1DfUTKdwH7M0+75/TDJpuSXL Nh/uzktWNmDtOj+M1gi+AnyaJsOdAyjNv4MRCsW1ZWeoyhF1Yz5DKNXb9UuFCrBs klXUIav8mmpXFr+lliHkOd2OjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET+OO7Y xDsn/OPtT1milNA3RzWnMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNs/FbZUDZ46vzx5AVhofSmOf7Bt+2L7951RETBW9IDgdwajEk+OyR OQ4OfVJ+cAz/vW50B3T6wW1jRj9ycewpKs3tLYBSfkTbR0sOfPzAyetKP3L95LhJ J9wX5QcjQD9XhjFhDhivCojzrSMHScxR6EqXTDljsEDSfCjvfWQSuwwgKwX/G3dc sbaQWwpIeCN20Xcvx3gIAKvZhiH9AHxJ+s0agrFMgo7nY+MrkSTUSgeDNE+CzLRy EuYJFdOJQS0MWlCgUCTYkDwds3OUV49I0SJec2fTi47ND++L+hAacrHBCTrtmR62 t3y3/wM1O2AULDoa4m9NVPkO2T8SaV2c -----END CERTIFICATE-----Generated at Fri May 31 08:38:28 2024 by rpki-client on console-fra.rpki-client.org