$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: ybdpGZosMYWvSHZeDKljJV5L5UhOGr/UBYBMbiCMdhA= Subject key identifier: 42:EE:55:7F:CC:51:AC:7A:85:13:3E:ED:71:E3:1C:67:77:FB:5E:63 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0BB5 Signing time: Thu 30 May 2024 19:35:22 +0000 Manifest this update: Thu 30 May 2024 19:35:21 +0000 Manifest next update: Thu 06 Jun 2024 19:35:21 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: 6WIayCdbGHQCKHE/m2+/Zu0edf6MJ3mt4aJM4ECKVtM=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: SQXs/tY3XOSQNHiYfHzxydfLP1PY6AbFebk6F2wwSZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: May 30 19:35:21 2024 GMT Not After : Jun 6 19:35:21 2024 GMT Subject: CN=6658d4fa-fdb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:c9:25:f1:b3:7e:cf:c3:f9:61:83:83:15: 77:ac:8b:92:1a:e9:b9:6b:bd:ae:d3:e7:22:37:c9: 4c:f3:57:5d:99:ed:00:34:8c:5c:a0:22:be:57:35: e4:d4:2e:41:66:75:75:a8:11:50:4d:30:d1:f9:2a: d5:ce:cc:46:16:38:5f:6e:00:bc:72:10:08:2c:9f: ef:64:79:9b:60:75:47:1c:65:e4:8e:e9:c6:3d:8e: 87:99:7e:c5:64:df:f1:d7:c2:c6:60:86:d9:6f:fa: 0d:2c:94:8d:73:f2:ec:15:c7:cc:24:77:30:41:5d: 6f:0f:b6:27:df:49:8b:a4:48:d4:3b:6e:e1:79:34: a5:08:2b:b6:8d:14:80:7d:9f:50:e0:c2:8f:f9:a1: a4:89:88:62:b2:2d:97:97:a2:7c:69:ef:f9:13:8d: 72:8f:cb:4a:be:3c:62:28:3c:ec:7d:4e:ae:a6:74: d0:06:51:ba:66:ef:31:18:1c:5a:cc:66:40:5e:15: 81:af:8f:e0:57:64:4f:7b:f5:05:0f:94:4a:92:18: db:a9:b3:99:f5:df:a3:5c:7e:d2:1a:9c:f8:e2:65: 0e:1a:8d:15:7f:75:7e:32:b1:e9:89:c8:03:5f:b7: e6:66:bc:1b:ec:60:9c:c6:3f:7d:16:d7:30:13:ba: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:55:7F:CC:51:AC:7A:85:13:3E:ED:71:E3:1C:67:77:FB:5E:63 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d4:d1:a2:c9:bd:7b:58:52:77:ae:f3:ff:45:74:b0:c5:a3: c8:97:26:01:5f:99:48:d2:59:4e:4b:c8:c4:6d:54:79:07:df: c3:0a:6b:30:7c:9a:ac:40:64:8d:9c:5f:52:b1:06:88:cc:25: 9f:b3:c9:d3:98:df:f1:36:b2:11:91:a4:ec:b3:6e:4a:bd:d0: ec:69:0c:9f:24:a9:dc:9b:c6:9a:5e:86:93:f9:65:9d:c6:a9: 67:99:12:e7:09:01:ea:06:fd:6f:d5:c0:ac:31:d8:53:19:d9: 63:35:9a:28:0c:eb:e3:8f:c9:4e:5b:f8:12:58:ba:60:10:0d: fd:fc:1a:eb:e1:35:4c:b2:5d:b3:74:ec:59:8e:ec:6b:e9:65: 17:5c:56:c8:f0:31:4e:5a:54:4e:93:3f:63:d9:4d:e2:f3:4c: 99:f7:4e:5b:d2:ab:9e:9d:86:75:e5:1b:b3:01:7d:3f:2e:01: f1:46:49:c1:17:6f:ac:85:79:5f:68:8f:e5:a3:fc:40:de:63: 41:b8:ad:9e:b4:d5:ac:09:23:fc:20:2b:ea:86:d2:e8:93:e9: 0a:ff:14:27:ab:04:1c:36:fa:74:c4:f9:00:c8:0d:8d:69:7d: 04:0b:28:18:e7:c7:48:99:ca:b8:1a:5e:b9:b3:d1:f5:25:55: 7d:25:51:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjQwNTMwMTkzNTIxWhcNMjQwNjA2MTkzNTIxWjAYMRYwFAYD VQQDEw02NjU4ZDRmYS1mZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS/JJfGzfs/D+WGDgxV3rIuSGum5a72u0+ciN8lM81ddme0ANIxcoCK+VzXk 1C5BZnV1qBFQTTDR+SrVzsxGFjhfbgC8chAILJ/vZHmbYHVHHGXkjunGPY6HmX7F ZN/x18LGYIbZb/oNLJSNc/LsFcfMJHcwQV1vD7Yn30mLpEjUO27heTSlCCu2jRSA fZ9Q4MKP+aGkiYhisi2Xl6J8ae/5E41yj8tKvjxiKDzsfU6upnTQBlG6Zu8xGBxa zGZAXhWBr4/gV2RPe/UFD5RKkhjbqbOZ9d+jXH7SGpz44mUOGo0Vf3V+MrHpicgD X7fmZrwb7GCcxj99FtcwE7rvoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELuVX/M Uax6hRM+7XHjHGd3+15jMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR1NGiyb17WFJ3rvP/RXSwxaPIlyYBX5lI0llOS8jEbVR5B9/DCmsw fJqsQGSNnF9SsQaIzCWfs8nTmN/xNrIRkaTss25KvdDsaQyfJKncm8aaXoaT+WWd xqlnmRLnCQHqBv1v1cCsMdhTGdljNZooDOvjj8lOW/gSWLpgEA39/Brr4TVMsl2z dOxZjuxr6WUXXFbI8DFOWlROkz9j2U3i80yZ905b0quenYZ15RuzAX0/LgHxRknB F2+shXlfaI/lo/xA3mNBuK2etNWsCSP8ICvqhtLok+kK/xQnqwQcNvp0xPkAyA2N aX0ECygY58dImcq4Gl65s9H1JVV9JVE+ -----END CERTIFICATE-----Generated at Thu May 30 21:49:33 2024 by rpki-client on console-ams.rpki-client.org