$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: btv2hc9Z2WC7ljW2RroE+hzL8TZVXsMv3H6s4B/NAKE= Subject key identifier: 49:9D:4A:01:A2:03:48:5E:22:5F:AC:E8:05:AA:EE:76:92:89:32:5E Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 99 Signing time: Sun 19 May 2024 06:54:26 +0000 Manifest this update: Sun 19 May 2024 06:54:26 +0000 Manifest next update: Sun 26 May 2024 06:54:26 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: BENmSoYMxWffEqIZOA1tKnaazp5NBYeYSrqxZBfqMHc=) 2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: N7VzH0midsTlxjV19OTYCmxTCrS2K3GJgRsMKbOU77U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: May 19 06:54:26 2024 GMT Not After : May 26 06:54:26 2024 GMT Subject: CN=6649a222-9c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:53:3f:84:38:b5:75:e7:3a:be:71:d4:9f: c0:e8:00:c3:9f:12:51:a4:2b:23:2b:87:60:77:f2: 3f:e9:99:c7:ac:d9:8d:f6:eb:88:ff:ed:ca:dd:1f: fe:85:8d:77:ea:72:07:98:8a:2b:2b:ed:a7:67:00: ab:cc:16:f0:9f:18:b0:8e:5d:af:65:80:3a:3d:e1: 3b:7d:34:c7:5c:e6:56:52:0a:87:3a:a2:40:77:cf: fc:df:c2:66:37:6d:97:60:7a:ee:9a:ba:fb:a7:db: 30:70:ec:87:35:25:56:05:69:9a:6f:f2:c0:b6:5c: e9:13:91:4d:30:1d:87:18:28:c9:83:97:fb:ea:cd: 04:b9:de:e2:d9:36:2c:d5:8e:1e:2f:bf:ac:12:36: 29:f5:39:fc:77:42:50:93:09:26:af:2e:39:e5:d1: 51:19:1c:6f:32:a8:5e:72:97:cb:3d:b8:7b:12:68: 55:3e:36:8c:90:4a:9b:b3:0d:61:ad:b2:72:03:41: 7e:79:e1:68:86:b0:20:86:18:ea:f3:b0:7b:ca:01: fe:46:fd:ea:c0:45:48:7f:9d:02:ed:8a:c1:f5:09: ef:5b:de:e0:0e:a5:e6:be:11:68:32:b0:f1:ea:5d: 14:27:0e:3d:af:b7:a7:2c:6e:25:d3:2c:d2:3f:8b: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:4A:01:A2:03:48:5E:22:5F:AC:E8:05:AA:EE:76:92:89:32:5E X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a4:7c:ec:b5:ab:2f:bd:45:f2:7a:66:d3:c7:46:54:aa:c5: 95:f9:3b:d3:5b:40:7d:87:05:e1:1a:51:d1:48:8d:86:5b:08: c1:bb:e1:9f:76:39:70:8a:85:03:ce:25:9b:cb:06:ae:b6:a7: 2d:d0:99:9e:d8:e1:67:c3:32:f8:68:2a:c8:e0:d7:f2:ea:b0: d3:f1:69:73:09:aa:f4:b6:ff:10:6d:b3:ea:37:d8:c6:56:c6: fc:e2:38:97:b3:17:3c:91:47:88:ca:15:4a:18:a1:fc:a5:08: 3e:64:b9:52:e6:b8:af:a6:ae:9b:0f:8b:ac:b4:c0:a0:3f:c2: b5:98:9f:a0:e8:30:e7:2c:49:6d:b6:36:2f:4f:4d:d9:06:f7: 5e:c1:41:75:18:f6:3b:1b:16:ef:0c:f6:2d:aa:6b:c3:14:20: 8d:f4:70:cb:6c:be:fd:ad:c8:96:6b:81:e8:67:dc:ae:ce:0f: 90:e5:3b:52:06:93:96:71:46:40:35:e0:a5:20:8e:01:ce:58: a0:eb:11:4a:b7:b9:dd:16:7c:27:81:71:32:3c:42:ae:02:50: 7e:09:84:ce:40:06:92:35:d7:9f:71:37:d9:1a:43:11:10:db: 09:3a:f8:21:99:dd:59:9b:55:94:70:9f:4a:45:85:53:a3:b9: bc:fb:e9:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjQwNTE5MDY1NDI2WhcNMjQwNTI2MDY1NDI2WjAYMRYwFAYD VQQDEw02NjQ5YTIyMi05YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhNTP4Q4tXXnOr5x1J/A6ADDnxJRpCsjK4dgd/I/6ZnHrNmN9uuI/+3K3R/+ hY136nIHmIorK+2nZwCrzBbwnxiwjl2vZYA6PeE7fTTHXOZWUgqHOqJAd8/838Jm N22XYHrumrr7p9swcOyHNSVWBWmab/LAtlzpE5FNMB2HGCjJg5f76s0Eud7i2TYs 1Y4eL7+sEjYp9Tn8d0JQkwkmry455dFRGRxvMqhecpfLPbh7EmhVPjaMkEqbsw1h rbJyA0F+eeFohrAghhjq87B7ygH+Rv3qwEVIf50C7YrB9QnvW97gDqXmvhFoMrDx 6l0UJw49r7enLG4l0yzSP4tEnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmdSgGi A0heIl+s6AWq7naSiTJeMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhpHzstasvvUXyembTx0ZUqsWV+TvTW0B9hwXhGlHRSI2GWwjBu+Gf djlwioUDziWbywautqct0Jme2OFnwzL4aCrI4Nfy6rDT8WlzCar0tv8QbbPqN9jG Vsb84jiXsxc8kUeIyhVKGKH8pQg+ZLlS5rivpq6bD4ustMCgP8K1mJ+g6DDnLElt tjYvT03ZBvdewUF1GPY7GxbvDPYtqmvDFCCN9HDLbL79rciWa4HoZ9yuzg+Q5TtS BpOWcUZANeClII4Bzlig6xFKt7ndFnwngXEyPEKuAlB+CYTOQAaSNdefcTfZGkMR ENsJOvghmd1Zm1WUcJ9KRYVTo7m8++lN -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org