$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: EKhKJrannPXJ7lRDoxXho/naiYI7cQwZZXWXwzdAEww= Subject key identifier: 33:CE:89:7B:7B:DC:98:EE:96:FE:62:87:A6:DA:34:41:00:17:85:74 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0BEE Signing time: Fri 31 May 2024 19:33:30 +0000 Manifest this update: Fri 31 May 2024 19:33:30 +0000 Manifest next update: Fri 07 Jun 2024 19:33:30 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: SwHNr3lCoTFkblO/ZonncRFS9wKeZrNJrbWiET1zlMk=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: GxZvBCPaKOQNju2/VPLiSdVyqkBxyg1tR+kGd5L/9/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: May 31 19:33:30 2024 GMT Not After : Jun 7 19:33:30 2024 GMT Subject: CN=665a260a-a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:72:47:c5:e8:d3:48:08:85:bc:32:b5:f3: c3:91:0a:d4:36:63:5a:a8:b2:5f:2e:ad:ad:b1:e9: d1:9c:3f:47:31:4d:73:78:63:74:2a:42:d6:8b:42: 76:30:3c:60:e5:6d:6c:43:61:6b:2d:94:e2:43:a5: fa:8d:be:ed:42:23:80:f6:dc:1c:d7:d4:36:70:a6: 39:5d:74:be:bd:29:7a:05:d8:75:2a:75:2f:91:1d: 49:3f:96:33:ba:e4:8f:0d:70:0f:61:b8:9f:3b:43: ba:f3:fe:d6:05:68:e0:89:fc:22:fd:0e:6b:5d:bf: 3a:60:12:96:a7:44:4d:12:4a:38:29:55:73:78:b4: aa:59:e0:85:ff:c6:28:c0:fe:eb:7f:95:3b:c1:5e: 49:78:fd:e7:01:93:1c:5d:7e:f0:46:73:0a:72:28: 9f:8c:2a:10:f9:50:28:22:90:94:81:ca:6b:e1:52: cd:61:f5:18:75:6d:06:95:53:46:e5:9a:ed:00:2d: 29:f6:51:10:05:9d:ba:63:b1:22:e2:c7:2e:55:a9: fa:7b:d7:99:33:30:8c:e6:82:9e:a7:bd:04:ec:da: 34:4f:68:28:b7:e7:35:1c:0b:a6:b2:37:fd:24:f0: a1:ec:4c:00:04:1b:bd:76:e5:18:6e:4b:1b:62:ff: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CE:89:7B:7B:DC:98:EE:96:FE:62:87:A6:DA:34:41:00:17:85:74 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3c:6e:b3:eb:7f:27:bf:12:d2:13:9a:02:eb:59:6c:03:d5: 0f:cc:20:97:43:62:a3:e3:b8:1a:da:4a:70:b6:5d:7e:16:44: b1:d6:bd:3d:16:7a:07:5c:16:a6:df:c0:ef:44:14:70:29:a5: 4e:0e:33:8d:67:1f:ae:b1:10:37:97:8d:2c:45:2c:11:a1:00: af:93:cc:3f:3d:82:a2:8b:02:a2:aa:9b:35:31:1b:b8:35:c9: 68:9e:bd:76:07:80:2c:42:6a:79:8f:7a:e8:f2:eb:69:d3:61: 5f:eb:39:79:0f:c9:33:0f:e8:17:18:fa:62:d0:05:2f:be:54: c7:8c:2a:ee:7d:0d:3a:78:37:cc:d4:cc:72:79:d3:1c:a1:61: ab:a2:d2:ca:35:19:99:59:f3:94:c0:c0:cd:c4:c5:a2:5f:2c: cc:2f:48:8c:61:23:21:ec:9b:bb:42:ea:48:f3:e4:17:23:9f: ac:59:94:c0:d0:0b:82:ae:bb:d5:e7:10:37:5e:9d:93:d9:33: e4:4f:10:c5:f1:1e:98:d4:07:93:93:04:3c:0b:07:f1:8f:be: 87:e5:4f:cc:9f:dd:4a:51:dc:9e:57:86:ed:a2:cd:bb:31:2e: b4:65:95:07:31:dc:51:d4:4d:70:12:66:38:03:71:35:65:f9: 45:cd:fc:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjQwNTMxMTkzMzMwWhcNMjQwNjA3MTkzMzMwWjAYMRYwFAYD VQQDEw02NjVhMjYwYS1hMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12ZyR8Xo00gIhbwytfPDkQrUNmNaqLJfLq2tsenRnD9HMU1zeGN0KkLWi0J2 MDxg5W1sQ2FrLZTiQ6X6jb7tQiOA9twc19Q2cKY5XXS+vSl6Bdh1KnUvkR1JP5Yz uuSPDXAPYbifO0O68/7WBWjgifwi/Q5rXb86YBKWp0RNEko4KVVzeLSqWeCF/8Yo wP7rf5U7wV5JeP3nAZMcXX7wRnMKciifjCoQ+VAoIpCUgcpr4VLNYfUYdW0GlVNG 5ZrtAC0p9lEQBZ26Y7Ei4scuVan6e9eZMzCM5oKep70E7No0T2got+c1HAumsjf9 JPCh7EwABBu9duUYbksbYv/qXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPOiXt7 3Jjulv5ih6baNEEAF4V0MB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuPG6z638nvxLSE5oC61lsA9UPzCCXQ2Kj47ga2kpwtl1+FkSx1r09 FnoHXBam38DvRBRwKaVODjONZx+usRA3l40sRSwRoQCvk8w/PYKiiwKiqps1MRu4 Nclonr12B4AsQmp5j3ro8utp02Ff6zl5D8kzD+gXGPpi0AUvvlTHjCrufQ06eDfM 1MxyedMcoWGrotLKNRmZWfOUwMDNxMWiXyzML0iMYSMh7Ju7QupI8+QXI5+sWZTA 0AuCrrvV5xA3Xp2T2TPkTxDF8R6Y1AeTkwQ8Cwfxj76H5U/Mn91KUdyeV4btos27 MS60ZZUHMdxR1E1wEmY4A3E1ZflFzfzf -----END CERTIFICATE-----Generated at Fri May 31 22:13:03 2024 by rpki-client on console-fra.rpki-client.org