$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: 2kB17F8EUCvJD5pAbWiJOZ8A1X6wLkcoFHyjs4vY7OE= Subject key identifier: CF:11:08:B1:D8:4D:E6:58:3A:F4:12:45:67:01:F4:AF:31:A4:C1:BC Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 29 Signing time: Sun 19 May 2024 08:29:27 +0000 Manifest this update: Sun 19 May 2024 08:29:26 +0000 Manifest next update: Sun 26 May 2024 08:29:26 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: U1K/J3vRnFRFQbcT50HAr21dA8m0alNs8lQ5LmMhVyY=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: 5FEi8T2VCpmTmhbsK7DMCrzbywrJ4Tze/iIy7NAv7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: May 19 08:29:26 2024 GMT Not After : May 26 08:29:26 2024 GMT Subject: CN=6649b867-cb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:82:4a:14:06:3b:40:60:ae:cc:08:9b:b1: 37:bf:c8:54:62:2e:e8:c0:2b:18:5e:cf:f6:31:dc: 2a:74:c8:8b:af:84:5a:a4:68:d8:51:be:fd:51:8e: 86:5f:29:9c:11:a5:5a:ea:2e:df:a2:b0:34:0e:d2: 90:fc:8e:c9:57:d6:6f:18:bd:fe:48:31:84:8e:01: a8:3f:e4:51:83:4b:95:18:fd:eb:49:a1:75:9f:3a: 53:89:6a:17:62:d2:49:db:8c:e2:35:01:84:f9:ec: c0:35:1b:a2:a6:2c:67:a0:6b:0f:77:d6:b1:c5:91: 74:08:56:49:ac:81:0d:9c:de:59:26:1a:5f:58:ba: c3:95:d2:42:04:5c:54:25:fa:3e:6d:e0:7d:ee:c9: 3e:65:89:3f:c1:38:8f:36:3b:54:ce:1e:c3:44:e0: a9:4e:f1:f4:f2:23:b9:0a:5e:d4:6d:9c:f0:af:a6: 10:7a:63:bc:b5:2a:07:1a:fe:0d:3a:8b:cd:36:a0: 2b:d5:7a:c6:cb:36:93:4c:cb:8a:77:86:da:cb:00: 36:6c:1d:b8:0a:8f:03:c1:27:ef:b6:e4:64:04:70: e3:03:37:ca:50:47:54:5a:fc:b6:5c:08:6d:d5:50: ce:92:50:2c:24:56:29:69:ac:97:02:bb:8f:61:41: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:11:08:B1:D8:4D:E6:58:3A:F4:12:45:67:01:F4:AF:31:A4:C1:BC X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8c:0f:40:57:dc:c6:af:bd:8c:e2:ae:d6:12:e0:59:26:0d: 17:0c:d1:d3:ac:b4:68:50:4c:f7:5e:1f:ef:8c:4c:02:9d:9c: 75:37:f0:fc:25:ee:3f:22:93:52:53:f1:bd:cf:ff:0c:64:e7: e4:06:fb:dd:cd:f2:c2:15:a9:f9:f6:0a:2a:4e:bb:da:84:94: 17:8f:b9:a4:22:8d:e7:6d:11:7c:48:f1:7c:7f:24:14:b1:9e: 3a:cc:e5:0c:ad:78:e4:66:92:eb:73:75:56:1f:25:66:04:4f: e4:6d:aa:e4:5e:fc:83:89:39:57:de:33:f8:cc:8c:ad:3a:23: e3:99:35:23:f8:b9:71:bd:4b:1f:54:40:3b:d6:4b:e6:0f:3d: 0f:47:ad:8e:96:0c:06:e3:45:7e:f7:1e:6f:46:e1:60:02:ce: 27:9a:e2:99:f9:da:87:9d:e5:37:4b:e6:3a:d5:6e:5f:b0:cb: fe:c9:bc:f0:d0:5c:6d:a1:9c:11:74:69:b1:ad:fc:1d:56:50: fb:03:84:91:45:bb:0b:4d:52:c6:f3:e9:d5:52:51:0d:21:00: 41:2a:1f:b0:f4:92:cf:07:b4:d1:a8:d1:a3:ef:76:45:58:16: 71:31:30:01:15:63:9e:a6:41:be:f3:59:08:04:79:93:df:3b: 91:89:49:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDAwRTExMC8GA1UEBRMoQ0U2QzQ2RjgwMkIxNUI4Q0Y0QURBMzQ1QTgyODhBRDZF N0ZBNTM1RTAeFw0yNDA1MTkwODI5MjZaFw0yNDA1MjYwODI5MjZaMBgxFjAUBgNV BAMTDTY2NDliODY3LWNiN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq9YJKFAY7QGCuzAibsTe/yFRiLujAKxhez/Yx3Cp0yIuvhFqkaNhRvv1RjoZf KZwRpVrqLt+isDQO0pD8jslX1m8Yvf5IMYSOAag/5FGDS5UY/etJoXWfOlOJahdi 0knbjOI1AYT57MA1G6KmLGegaw931rHFkXQIVkmsgQ2c3lkmGl9YusOV0kIEXFQl +j5t4H3uyT5liT/BOI82O1TOHsNE4KlO8fTyI7kKXtRtnPCvphB6Y7y1Kgca/g06 i802oCvVesbLNpNMy4p3htrLADZsHbgKjwPBJ++25GQEcOMDN8pQR1Ra/LZcCG3V UM6SUCwkVilprJcCu49hQcT9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzxEIsdhN 5lg69BJFZwH0rzGkwbwwHwYDVR0jBBgwFoAUzmxG+AKxW4z0raNFqCiK1uf6U14w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MDBFL0M1MkIwMjY0RDk0 ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvem14Ry1BS3hXNHowcmFORnFDaUsxdWY2VTE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MDBFL0M1MkIwMjY0RDk0ODExRUVCQTM0QjQ3QkM0RjlBRTAyL3pteEctQUt4VzR6 MHJhTkZxQ2lLMXVmNlUxNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJmMD0BX3MavvYzirtYS4FkmDRcM0dOstGhQTPdeH++MTAKdnHU38Pwl 7j8ik1JT8b3P/wxk5+QG+93N8sIVqfn2CipOu9qElBePuaQijedtEXxI8Xx/JBSx njrM5QyteORmkutzdVYfJWYET+RtquRe/IOJOVfeM/jMjK06I+OZNSP4uXG9Sx9U QDvWS+YPPQ9HrY6WDAbjRX73Hm9G4WACziea4pn52oed5TdL5jrVbl+wy/7JvPDQ XG2hnBF0abGt/B1WUPsDhJFFuwtNUsbz6dVSUQ0hAEEqH7D0ks8HtNGo0aPvdkVY FnExMAEVY56mQb7zWQgEeZPfO5GJSU4= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org