$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: 5M/00zP+v5C+GzwNffwqNlU0jEYL+AwZlChY5U1tFL4= Subject key identifier: 84:A6:2F:08:F9:C0:52:F2:5C:92:06:0C:7E:02:5D:4E:F2:A4:D1:86 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0156 Signing time: Sun 19 May 2024 04:52:14 +0000 Manifest this update: Sun 19 May 2024 04:52:14 +0000 Manifest next update: Sun 26 May 2024 04:52:14 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: GTTXKCDbnkztphNbPInIDOz82DcKN+MOR0UgDhcuOgw=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: C51lZrSkmiHfhRN2orS87DL386YZSDAlrqGSAk6Pr1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: May 19 04:52:14 2024 GMT Not After : May 26 04:52:14 2024 GMT Subject: CN=6649857e-a180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:5b:bc:85:ed:ac:06:d4:04:13:89:62:82: 54:08:f6:0b:ea:e9:50:0a:16:f5:97:13:a1:e9:ab: bd:06:01:ee:0a:5f:0f:d6:21:1d:a1:60:43:2e:e9: f2:b3:b2:0e:61:34:23:2e:c4:ab:66:5e:78:46:f3: 1c:06:c6:c3:09:f9:fb:f5:55:bf:58:c3:dc:79:5d: a1:37:e4:e8:6e:1c:b6:22:8e:78:e1:14:eb:2d:28: c2:8e:51:37:59:eb:8d:fc:5d:ec:0e:2f:52:ad:53: 83:92:bd:3e:52:60:16:b5:f5:58:51:76:0a:cb:f8: b4:92:d9:3a:38:cf:5b:2a:e7:e8:97:63:15:dd:cf: f5:33:03:16:af:c7:a2:75:01:53:47:5d:1f:ac:c9: cd:9e:6b:87:91:69:2e:3a:33:c5:45:00:8c:28:0e: 5b:b7:3b:54:3f:52:10:c5:a5:a3:35:6c:af:0d:89: e0:f8:d3:c5:28:db:67:42:64:a1:29:1b:1b:9d:c0: 2e:b3:34:b4:cd:2c:db:19:bc:4e:07:41:17:f6:a0: 43:05:df:7d:94:c5:db:23:3b:84:9e:93:29:e6:90: f5:a3:cd:4a:ac:3b:ed:a4:c2:41:48:07:92:89:ca: 87:b3:f7:c7:98:aa:a0:a4:ca:fd:64:75:71:04:59: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A6:2F:08:F9:C0:52:F2:5C:92:06:0C:7E:02:5D:4E:F2:A4:D1:86 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:73:a5:2f:76:93:9a:6f:2d:7f:ee:ca:e4:e4:98:3d:d9:96: 48:11:85:c8:e8:d7:59:40:ee:85:40:8e:c3:9a:61:3e:5c:a0: c2:c1:fb:05:ea:39:d3:43:8a:a3:4d:1c:2e:00:40:6b:e3:9b: 75:7a:ed:c6:a5:b5:03:ce:51:15:39:20:f5:98:41:f7:5d:21: e4:c6:32:15:b4:57:27:32:43:17:3a:07:9a:e3:d0:5b:61:14: dc:7e:89:a3:14:47:ee:dd:bf:11:a3:32:f6:7a:83:85:53:2a: 07:95:59:5a:61:10:98:85:b1:3c:d3:63:44:6b:bd:b3:35:f4: a8:ec:9a:2e:93:56:9d:8d:ba:94:7d:48:c3:c8:57:99:ef:fb: dd:35:51:b0:3d:29:23:3e:4d:29:d5:45:54:d9:90:d5:87:b2: c9:a1:ca:d0:f2:a1:e8:58:cd:06:97:5b:fd:f3:fb:36:0a:ee: 3a:78:a9:77:75:62:bc:18:e0:8e:9e:71:4c:7b:29:de:1b:a2: a6:65:cb:1c:b3:2c:a9:aa:17:22:68:eb:15:cd:99:83:b8:da: a1:27:56:0b:d5:d9:b3:c1:cc:b1:e6:8d:4e:a2:83:00:7e:4c: 5d:e6:3b:8d:1c:43:1a:23:b8:9e:5c:d6:21:51:55:3d:cb:b1: 2f:0d:7a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjQwNTE5MDQ1MjE0WhcNMjQwNTI2MDQ1MjE0WjAYMRYwFAYD VQQDEw02NjQ5ODU3ZS1hMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwadbvIXtrAbUBBOJYoJUCPYL6ulQChb1lxOh6au9BgHuCl8P1iEdoWBDLuny s7IOYTQjLsSrZl54RvMcBsbDCfn79VW/WMPceV2hN+Tobhy2Io544RTrLSjCjlE3 WeuN/F3sDi9SrVODkr0+UmAWtfVYUXYKy/i0ktk6OM9bKufol2MV3c/1MwMWr8ei dQFTR10frMnNnmuHkWkuOjPFRQCMKA5btztUP1IQxaWjNWyvDYng+NPFKNtnQmSh KRsbncAuszS0zSzbGbxOB0EX9qBDBd99lMXbIzuEnpMp5pD1o81KrDvtpMJBSAeS icqHs/fHmKqgpMr9ZHVxBFnTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISmLwj5 wFLyXJIGDH4CXU7ypNGGMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCac6UvdpOaby1/7srk5Jg92ZZIEYXI6NdZQO6FQI7DmmE+XKDCwfsF 6jnTQ4qjTRwuAEBr45t1eu3GpbUDzlEVOSD1mEH3XSHkxjIVtFcnMkMXOgea49Bb YRTcfomjFEfu3b8RozL2eoOFUyoHlVlaYRCYhbE802NEa72zNfSo7Jouk1adjbqU fUjDyFeZ7/vdNVGwPSkjPk0p1UVU2ZDVh7LJocrQ8qHoWM0Gl1v98/s2Cu46eKl3 dWK8GOCOnnFMeyneG6KmZcscsyypqhciaOsVzZmDuNqhJ1YL1dmzwcyx5o1OooMA fkxd5juNHEMaI7ieXNYhUVU9y7EvDXrV -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org