$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: 1rqY4wrKZlUxU3p7MOcOLrTxyAXOL0rVC2zqzlzt7ik= Subject key identifier: 4E:EE:F0:44:44:12:7C:81:28:E7:3C:03:BF:1F:3F:81:F0:48:3F:14 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 0254 Signing time: Sun 19 May 2024 03:53:40 +0000 Manifest this update: Sun 19 May 2024 03:53:40 +0000 Manifest next update: Sun 26 May 2024 03:53:40 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: E3nE90Ulb2AibDX5NsBpDI00ylbZeuoITeCCsq5Rrg8=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: FFZhO7+zoHshR/RjOvXtom/0MyVEmhHyk48EA2oY0UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: May 19 03:53:40 2024 GMT Not After : May 26 03:53:40 2024 GMT Subject: CN=664977c4-fb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:bd:30:ec:ce:10:84:e2:7e:83:87:09:c1: bc:b2:26:ee:1d:15:82:fa:ce:cc:61:76:95:19:92: 81:02:51:38:d1:b1:99:ab:98:c5:90:a9:39:b5:54: 43:1b:83:b8:6c:c1:ba:f8:8b:88:0a:8b:e5:cf:e5: 1e:b7:79:55:ce:74:be:32:8b:28:b7:4f:fc:63:a4: 4d:ec:df:3a:ce:ad:0a:da:80:0b:03:6e:39:15:30: 78:e3:8f:c3:42:e9:08:b4:0e:d1:55:fe:42:04:21: 6d:4a:c4:27:68:da:ed:d2:2e:ff:6b:f9:83:e2:75: 9a:e8:e0:6e:e4:28:a2:ac:39:2c:ed:2f:d4:ca:f7: 8b:d9:93:16:15:5d:ca:1d:c8:e2:18:a5:20:ef:38: 71:35:16:26:ff:e9:5a:60:a6:0d:61:02:c2:c9:4a: e8:a9:b9:38:32:30:88:bd:79:05:9c:53:4b:b9:af: a0:73:21:a1:d6:8b:97:22:9d:5c:30:5f:e4:77:d4: 86:d1:6e:14:85:2c:56:38:65:50:78:19:b2:4d:8c: 91:e1:b0:62:e2:f0:87:0f:2b:44:98:c5:58:d2:b0: 23:ab:e3:2b:91:ee:2d:32:d5:3a:38:62:0f:ab:6f: 91:2d:10:bc:1b:9a:ff:8c:fd:c4:fa:97:2d:1b:00: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:F0:44:44:12:7C:81:28:E7:3C:03:BF:1F:3F:81:F0:48:3F:14 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:af:36:dc:d2:77:45:d8:94:4e:30:76:7a:8f:d3:3d:98:b1: 0f:bc:e0:62:3b:0b:18:0c:0a:2a:f1:93:86:be:cc:ae:81:32: d5:10:db:91:d2:a8:1b:29:10:5f:78:91:4d:34:e5:0f:14:eb: 6c:fc:bf:11:23:d7:53:11:15:ff:8c:c3:d0:08:75:15:0f:19: eb:57:93:f0:54:97:f7:9e:1a:82:91:ab:26:0a:94:17:dd:56: 80:24:a8:b1:1e:e4:48:cf:fa:78:6c:63:51:ca:59:c9:74:16: 70:8f:53:92:dd:d0:c7:55:1b:b8:0e:4e:55:4e:08:f0:9f:cb: 16:1e:30:c9:55:2c:24:c9:24:09:09:1e:7c:a8:47:6b:03:09: 59:e2:57:92:d9:cc:d8:40:98:79:bd:33:60:21:08:91:ce:95: b5:b0:0a:24:39:63:38:d3:c1:eb:7a:9e:50:6a:f4:da:a3:c9: 34:f5:5a:a8:db:e2:a6:1d:62:4b:33:e3:0c:84:01:bc:83:2a: a9:6e:8d:31:2a:be:22:89:07:36:5b:04:3d:91:49:51:d5:7d: ad:a0:af:ca:a8:7c:b2:67:9b:76:f2:c6:73:e4:c9:64:b4:ec: 2d:77:4e:0c:ba:92:2f:4a:e0:22:22:25:43:f6:73:1f:73:fd: 2e:1b:2d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjQwNTE5MDM1MzQwWhcNMjQwNTI2MDM1MzQwWjAYMRYwFAYD VQQDEw02NjQ5NzdjNC1mYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4X69MOzOEITifoOHCcG8sibuHRWC+s7MYXaVGZKBAlE40bGZq5jFkKk5tVRD G4O4bMG6+IuICovlz+Uet3lVznS+Mosot0/8Y6RN7N86zq0K2oALA245FTB444/D QukItA7RVf5CBCFtSsQnaNrt0i7/a/mD4nWa6OBu5CiirDks7S/UyveL2ZMWFV3K HcjiGKUg7zhxNRYm/+laYKYNYQLCyUroqbk4MjCIvXkFnFNLua+gcyGh1ouXIp1c MF/kd9SG0W4UhSxWOGVQeBmyTYyR4bBi4vCHDytEmMVY0rAjq+Mrke4tMtU6OGIP q2+RLRC8G5r/jP3E+pctGwAFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7u8ERE EnyBKOc8A78fP4HwSD8UMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8rzbc0ndF2JROMHZ6j9M9mLEPvOBiOwsYDAoq8ZOGvsyugTLVENuR 0qgbKRBfeJFNNOUPFOts/L8RI9dTERX/jMPQCHUVDxnrV5PwVJf3nhqCkasmCpQX 3VaAJKixHuRIz/p4bGNRylnJdBZwj1OS3dDHVRu4Dk5VTgjwn8sWHjDJVSwkySQJ CR58qEdrAwlZ4leS2czYQJh5vTNgIQiRzpW1sAokOWM408Hrep5QavTao8k09Vqo 2+KmHWJLM+MMhAG8gyqpbo0xKr4iiQc2WwQ9kUlR1X2toK/KqHyyZ5t28sZz5Mlk tOwtd04MupIvSuAiIiVD9nMfc/0uGy2Q -----END CERTIFICATE-----Generated at Sun May 19 04:22:03 2024 by rpki-client on console-fra.rpki-client.org