$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: OywVktis5mgq4PfF0L8YAxu5NcrR/8aSMLrk54BHbxA= Subject key identifier: D2:C4:6E:5A:C0:A3:6C:69:38:53:BA:53:41:0D:40:47:C2:7F:39:B8 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 03C7 Signing time: Sun 19 May 2024 02:26:33 +0000 Manifest this update: Sun 19 May 2024 02:26:32 +0000 Manifest next update: Sun 26 May 2024 02:26:32 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: dEWe7JVnqa1ewbvBXc6G/BC8vDQ9smDOU6xLNsmCj+I=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: 6fC5uJsYuT7amsDta892a0EU/d7pcupqa3A43Hhp7pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: May 19 02:26:32 2024 GMT Not After : May 26 02:26:32 2024 GMT Subject: CN=66496359-06a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:36:f2:13:56:eb:dc:3b:16:c4:2d:b3:31:ee: 46:dc:ff:b5:1d:43:d5:7c:83:5d:0a:51:8c:29:b2: 89:35:35:52:a5:6a:c4:b4:60:55:bd:c1:80:47:77: 95:86:d8:c2:44:b4:4b:89:e1:16:32:1c:b6:52:ac: 8c:f2:59:c4:cc:fc:54:f0:db:c1:99:79:db:b2:cd: 2a:1c:75:e3:94:82:2f:d0:57:14:5d:28:44:18:1a: 7b:3f:1c:08:83:60:e8:4e:df:7a:4a:46:91:15:b9: 2d:eb:63:a0:c8:54:53:7f:74:01:c6:e5:53:9a:a2: 8b:17:e2:5d:64:16:6d:5b:11:85:2e:83:8c:a6:d0: b6:b0:9f:41:58:60:ca:72:c6:f5:fc:dd:12:28:52: 6e:3a:41:ce:e0:e7:03:9c:52:b9:e3:8c:bd:ab:80: 19:7a:7b:13:7a:4a:5c:a4:2c:1b:35:59:66:a0:29: 12:56:44:7f:ce:cf:8d:ad:04:2c:f3:0c:f4:48:bf: 62:1f:7f:e1:b7:b1:09:f4:3d:9a:4e:a0:43:9d:7a: cf:5e:c0:59:a1:e8:dd:0c:d8:46:88:da:8e:da:43: 21:9a:0a:13:fc:65:26:d8:67:16:99:16:e1:99:eb: 71:75:75:0e:33:2c:b0:c8:d2:ce:70:ef:62:4e:be: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:6E:5A:C0:A3:6C:69:38:53:BA:53:41:0D:40:47:C2:7F:39:B8 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ff:ff:e0:f3:f4:8b:df:4a:72:74:7d:43:b8:00:a2:92:e1: 88:db:b2:35:81:83:75:17:7a:56:38:72:b0:1a:00:67:39:4a: 4b:5b:70:97:bb:7a:07:c4:ff:50:0d:2a:ee:28:4b:cb:82:ec: 54:a8:99:9d:03:b4:af:58:02:20:21:7a:fd:88:49:d5:61:00: 91:90:e8:14:2c:08:d8:80:34:12:e4:a4:a2:18:c3:46:95:4e: 95:5b:27:ed:c1:65:cd:b2:46:53:c3:ba:54:e8:b1:bf:05:11: 44:1b:3c:33:4d:ec:39:8d:de:40:60:fd:bd:cf:6e:77:72:a7: 9b:fa:db:c1:72:09:ed:ad:95:32:c3:94:4b:4d:97:b0:f9:3a: 78:15:20:54:a8:89:c7:a9:ed:78:a5:05:af:e8:85:b4:55:56: e7:3a:e4:48:a0:cf:a0:33:1e:a3:9b:fc:98:38:f9:a8:f7:af: 13:26:ea:09:21:7e:b3:4c:fe:7a:3b:b7:57:89:ef:4a:00:04: 1e:b3:57:2f:7d:c5:0c:92:8a:87:ff:ea:97:6d:15:aa:04:6f: 26:c2:19:59:55:59:66:fd:3c:c1:32:6e:c2:c8:ad:8d:92:6a: 5a:a7:15:8b:9b:e0:9f:88:87:8e:8e:e0:9a:74:f4:24:ac:4c: 7c:df:e7:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjQwNTE5MDIyNjMyWhcNMjQwNTI2MDIyNjMyWjAYMRYwFAYD VQQDEw02NjQ5NjM1OS0wNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+TbyE1br3DsWxC2zMe5G3P+1HUPVfINdClGMKbKJNTVSpWrEtGBVvcGAR3eV htjCRLRLieEWMhy2UqyM8lnEzPxU8NvBmXnbss0qHHXjlIIv0FcUXShEGBp7PxwI g2DoTt96SkaRFbkt62OgyFRTf3QBxuVTmqKLF+JdZBZtWxGFLoOMptC2sJ9BWGDK csb1/N0SKFJuOkHO4OcDnFK544y9q4AZensTekpcpCwbNVlmoCkSVkR/zs+NrQQs 8wz0SL9iH3/ht7EJ9D2aTqBDnXrPXsBZoejdDNhGiNqO2kMhmgoT/GUm2GcWmRbh metxdXUOMyywyNLOcO9iTr7wlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLEblrA o2xpOFO6U0ENQEfCfzm4MB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy///g8/SL30pydH1DuACikuGI27I1gYN1F3pWOHKwGgBnOUpLW3CX u3oHxP9QDSruKEvLguxUqJmdA7SvWAIgIXr9iEnVYQCRkOgULAjYgDQS5KSiGMNG lU6VWyftwWXNskZTw7pU6LG/BRFEGzwzTew5jd5AYP29z253cqeb+tvBcgntrZUy w5RLTZew+Tp4FSBUqInHqe14pQWv6IW0VVbnOuRIoM+gMx6jm/yYOPmo968TJuoJ IX6zTP56O7dXie9KAAQes1cvfcUMkoqH/+qXbRWqBG8mwhlZVVlm/TzBMm7CyK2N kmpapxWLm+CfiIeOjuCadPQkrEx83+eq -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org