$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: ebKgAFnxW8G2r3s21iOfb9Nsr0VHqTS1nq7dB/sU53g= Subject key identifier: 69:87:96:89:A7:3E:C6:63:D1:F8:3A:47:C2:73:23:57:90:B9:98:44 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 14DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 14DF Signing time: Sat 18 May 2024 17:21:10 +0000 Manifest this update: Sat 18 May 2024 17:21:09 +0000 Manifest next update: Sat 25 May 2024 17:21:09 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: 2/Mm8AqkODnBuOyxr0OtNpQOt4J1v0tI/dFIEyIo92E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5343 (0x14df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: May 18 17:21:09 2024 GMT Not After : May 25 17:21:09 2024 GMT Subject: CN=6648e386-9f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:dc:ff:75:71:64:99:b9:2b:9c:32:5a:2c: 51:60:bf:5a:83:e9:a2:24:21:f4:b0:81:ea:ae:02: 0b:32:bf:67:11:70:a8:70:5c:78:36:4f:e9:64:0b: 5e:da:c9:c2:8d:5b:54:cf:f1:ee:ff:57:09:b2:9e: 74:b3:f9:30:86:7e:29:e8:95:0d:61:ac:54:11:38: 4d:53:b5:4e:fc:9a:9e:ca:2c:80:8d:9f:57:e6:66: 12:f9:b5:46:de:c1:83:74:38:83:a1:b7:ee:2e:27: d4:f7:78:ce:2e:13:6f:4b:75:4f:c4:4d:14:4a:c6: e6:7a:16:14:9a:71:82:4a:fc:5a:1f:47:93:9c:c5: 7f:69:af:1a:dc:4d:5a:bf:9a:5e:a3:27:b9:c4:b8: 4e:1f:4f:32:20:28:47:07:20:dd:c3:fb:11:42:a5: fe:3a:29:cc:95:87:2e:13:02:6b:d6:bc:f6:bc:52: 81:c5:98:df:21:84:54:d5:2a:4a:9f:71:08:05:8e: 20:b9:2d:20:c4:a1:13:2f:8c:94:fc:3a:2b:c0:85: b7:c4:0a:45:15:a7:dc:35:f0:05:11:4e:e3:26:fa: e4:f1:28:1d:ed:56:5b:63:7b:41:2f:40:17:57:c6: 43:a5:d7:da:e4:78:44:8c:cc:e6:42:35:32:02:7c: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:96:89:A7:3E:C6:63:D1:F8:3A:47:C2:73:23:57:90:B9:98:44 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:78:dc:75:03:a7:5e:46:04:d1:4d:69:2a:64:4e:36:bc:7d: 70:1b:a6:b2:d4:47:76:fd:1d:c3:97:23:f3:71:af:dc:0d:73: 7a:84:97:70:4d:43:df:a0:ed:7a:bf:0f:5a:cf:28:95:ad:e6: 96:f9:27:ee:5e:13:59:7a:9f:de:46:ed:9e:c3:93:a8:60:f6: 99:7f:8f:82:6a:f8:a0:c6:23:ff:fc:a7:4d:13:ba:04:32:d0: ea:50:17:ec:d5:26:d1:9a:7c:8f:7b:9c:53:00:a3:40:8e:64: 38:f8:a0:1d:5f:3c:e4:10:06:2d:21:f6:0d:5c:fa:39:b8:48: 44:64:51:d8:0e:eb:3a:70:02:a9:a9:a9:4f:d0:ba:c0:9c:e2: 60:dd:59:36:d3:48:ae:52:b7:07:21:73:bb:99:b2:d6:df:60: 44:ce:a8:dd:16:b8:04:bb:3f:2e:7c:05:6f:63:d3:f4:f1:de: 22:a8:e5:25:e5:2b:43:62:d9:d4:2d:e5:d0:f0:a1:2f:b6:fb: 83:c9:5a:f3:5a:07:aa:e7:5f:4e:b4:eb:62:9f:73:d3:bd:ca: 62:ff:89:49:6f:d7:fe:f0:30:e3:3d:67:fb:85:ee:15:cb:af: 64:2f:c0:82:dd:18:f9:48:3a:70:56:df:74:cc:90:fc:eb:fe: 0b:0c:2c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjQwNTE4MTcyMTA5WhcNMjQwNTI1MTcyMTA5WjAYMRYwFAYD VQQDEw02NjQ4ZTM4Ni05ZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwevc/3VxZJm5K5wyWixRYL9ag+miJCH0sIHqrgILMr9nEXCocFx4Nk/pZAte 2snCjVtUz/Hu/1cJsp50s/kwhn4p6JUNYaxUEThNU7VO/JqeyiyAjZ9X5mYS+bVG 3sGDdDiDobfuLifU93jOLhNvS3VPxE0USsbmehYUmnGCSvxaH0eTnMV/aa8a3E1a v5peoye5xLhOH08yIChHByDdw/sRQqX+OinMlYcuEwJr1rz2vFKBxZjfIYRU1SpK n3EIBY4guS0gxKETL4yU/DorwIW3xApFFafcNfAFEU7jJvrk8Sgd7VZbY3tBL0AX V8ZDpdfa5HhEjMzmQjUyAnyYAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmHlomn PsZj0fg6R8JzI1eQuZhEMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAueNx1A6deRgTRTWkqZE42vH1wG6ay1Ed2/R3DlyPzca/cDXN6hJdw TUPfoO16vw9azyiVreaW+SfuXhNZep/eRu2ew5OoYPaZf4+CavigxiP//KdNE7oE MtDqUBfs1SbRmnyPe5xTAKNAjmQ4+KAdXzzkEAYtIfYNXPo5uEhEZFHYDus6cAKp qalP0LrAnOJg3Vk200iuUrcHIXO7mbLW32BEzqjdFrgEuz8ufAVvY9P08d4iqOUl 5StDYtnULeXQ8KEvtvuDyVrzWgeq519OtOtin3PTvcpi/4lJb9f+8DDjPWf7he4V y69kL8CC3Rj5SDpwVt90zJD86/4LDCyE -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org