$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: kxCLhQ4elQtcQxtZ7L/satOftqmUmAwaciooRasCySk= Subject key identifier: 94:3D:7E:8D:98:E6:BF:DC:24:FB:2A:40:E7:D2:92:97:E0:92:7D:00 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 01B3 Signing time: Sun 19 May 2024 04:32:40 +0000 Manifest this update: Sun 19 May 2024 04:32:40 +0000 Manifest next update: Sun 26 May 2024 04:32:40 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: mQjn0OaT+FaGhOek2xzePT8y+LEGWbNHOZESm/QqkbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: May 19 04:32:40 2024 GMT Not After : May 26 04:32:40 2024 GMT Subject: CN=664980e8-85c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:cf:c2:9f:b5:b2:74:e4:df:4b:8f:0e:66: f2:69:0a:e2:c2:9d:55:09:3f:17:55:70:b6:2a:4e: 48:d7:e1:07:24:26:cb:80:55:b5:a2:92:b4:1a:e1: ec:8f:81:f5:2f:82:25:81:cf:36:15:89:55:8a:43: 7a:8a:2b:9e:ae:32:7f:0b:51:75:26:18:54:cd:70: 02:1b:06:08:cc:ab:2b:8f:97:09:41:38:5c:7a:3c: 6e:d2:0b:62:d2:f1:cc:b9:6a:91:a9:1e:a2:20:c7: e6:88:99:64:8e:e0:a6:c3:20:ef:a0:d8:1e:0d:8d: 6e:59:f3:9d:ae:bd:72:09:25:15:da:32:ee:03:66: b8:b8:57:9c:40:e0:d7:ce:18:4b:d8:47:ad:71:90: 98:14:b6:0e:b4:ca:27:f0:0c:28:4c:d7:28:ea:14: b5:3c:82:97:12:51:61:eb:a3:35:e5:ff:87:9a:1a: c2:37:52:ae:19:96:38:69:62:24:cf:f2:7e:70:c6: b7:da:3f:d8:ad:d4:d0:3d:02:44:08:7c:95:68:62: c3:f4:08:b2:70:4e:cd:7e:ad:63:7f:71:9e:af:80: e3:67:15:9f:1f:53:82:6a:a1:4d:3b:74:ea:1a:e8: 21:4c:11:04:d0:47:ad:7d:89:80:6d:c6:24:3a:cd: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3D:7E:8D:98:E6:BF:DC:24:FB:2A:40:E7:D2:92:97:E0:92:7D:00 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:92:17:33:97:fc:c7:9a:fe:4a:0c:c2:8b:45:c4:6b:24:87: 7b:12:6f:3e:ff:42:0c:44:b4:3b:19:ee:dd:db:9f:56:a5:87: 41:1e:5f:2c:6d:59:d1:ae:35:c2:04:43:e8:5e:f5:1e:d5:26: eb:26:00:cd:c9:5f:29:7e:d2:c1:30:ec:09:9d:7f:f5:ed:40: f0:12:41:ac:72:97:1d:13:b6:d0:b9:73:ee:58:76:22:06:20: fb:4b:ec:f5:34:16:34:43:1f:43:a6:a7:6b:52:a8:d2:e0:fb: d4:27:2e:8b:8a:98:2d:67:db:15:35:c9:c3:c2:54:98:83:40: 99:a3:fa:36:ef:ff:62:82:8c:7a:1f:18:5c:23:a5:68:0f:1e: 3a:23:69:ff:03:24:13:c2:c2:9b:89:17:16:a9:34:03:96:c5: c2:7b:04:a3:d4:07:55:43:7f:5d:60:87:5c:2d:ea:d0:c1:03: a0:d8:1d:c0:e1:e5:4b:0e:a4:f5:3e:95:19:80:8c:cf:9e:12: d0:ea:18:f6:ea:64:0c:4d:93:c6:33:5a:a8:6f:c7:2a:56:4e: 49:d3:d4:df:28:0b:45:00:d1:1f:eb:0b:66:74:33:1b:a3:a1: 1a:7e:2d:9e:c3:c0:6f:81:e1:44:75:86:e3:28:e7:b8:a3:bd: 3e:44:c0:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjQwNTE5MDQzMjQwWhcNMjQwNTI2MDQzMjQwWjAYMRYwFAYD VQQDEw02NjQ5ODBlOC04NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSfPwp+1snTk30uPDmbyaQriwp1VCT8XVXC2Kk5I1+EHJCbLgFW1opK0GuHs j4H1L4Ilgc82FYlVikN6iiuerjJ/C1F1JhhUzXACGwYIzKsrj5cJQThcejxu0gti 0vHMuWqRqR6iIMfmiJlkjuCmwyDvoNgeDY1uWfOdrr1yCSUV2jLuA2a4uFecQODX zhhL2EetcZCYFLYOtMon8AwoTNco6hS1PIKXElFh66M15f+HmhrCN1KuGZY4aWIk z/J+cMa32j/YrdTQPQJECHyVaGLD9AiycE7Nfq1jf3Ger4DjZxWfH1OCaqFNO3Tq GughTBEE0EetfYmAbcYkOs2oOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQ9fo2Y 5r/cJPsqQOfSkpfgkn0AMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6khczl/zHmv5KDMKLRcRrJId7Em8+/0IMRLQ7Ge7d259WpYdBHl8s bVnRrjXCBEPoXvUe1SbrJgDNyV8pftLBMOwJnX/17UDwEkGscpcdE7bQuXPuWHYi BiD7S+z1NBY0Qx9DpqdrUqjS4PvUJy6LipgtZ9sVNcnDwlSYg0CZo/o27/9igox6 HxhcI6VoDx46I2n/AyQTwsKbiRcWqTQDlsXCewSj1AdVQ39dYIdcLerQwQOg2B3A 4eVLDqT1PpUZgIzPnhLQ6hj26mQMTZPGM1qob8cqVk5J09TfKAtFANEf6wtmdDMb o6Eafi2ew8BvgeFEdYbjKOe4o70+RMAn -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org