$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: L2dixPg523RoyjCKoN0PoDMVr4Pr0ON7RUGBjv44OMA= Subject key identifier: 1D:54:41:48:40:2C:D4:87:89:36:BD:0D:F4:09:6F:F0:E0:5A:ED:6E Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 2F77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 2F6C Signing time: Sat 18 May 2024 15:42:26 +0000 Manifest this update: Sat 18 May 2024 15:42:25 +0000 Manifest next update: Sat 25 May 2024 15:42:25 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: l/IY9y6EpG+ZMaGyiGPbX9MdwiFve4uQgKNgz7OPQWk=) 2: 332821EE4BF311EAB4860A6FC4F9AE02.roa (hash: hyeyp4oVKRW4lvC5yQ7rRx3/jF4h9o6qj/FRYX9l6Zs=) 3: 329BEBF24BF311EAB4860A6FC4F9AE02.roa (hash: mCWJYcc13zZ2uPoYBjSERJh3FcrlxDm1lS4//jTPyB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12151 (0x2f77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: May 18 15:42:25 2024 GMT Not After : May 25 15:42:25 2024 GMT Subject: CN=6648cc62-55e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:43:9e:df:fb:9b:a2:a6:12:ab:38:d4:3d: 70:47:ef:47:7c:64:cb:cf:f3:b1:2f:bb:43:66:c9: 49:2f:d0:37:45:a2:52:ac:fb:e7:e9:2d:b4:53:9a: 4f:3d:64:4e:0e:1a:25:51:64:4f:3f:fb:e4:a0:be: b3:14:12:13:74:c9:bc:4d:be:29:42:71:75:74:0a: c0:bb:4c:9a:7b:75:7f:24:f3:ff:91:57:15:65:f9: f9:2e:c5:84:60:d7:7a:fc:67:36:0b:95:dc:2d:da: 23:71:f7:ee:20:51:6c:de:f6:d2:f9:b4:25:bc:01: 09:70:8a:bb:c0:4c:27:56:c5:c9:8d:46:e1:11:9b: fd:d1:90:eb:61:3b:0c:ca:3c:f8:47:1e:61:18:75: d9:2b:7c:e8:d9:60:f4:49:b7:97:97:dc:f6:20:8b: 71:0c:a9:51:e0:32:63:23:e9:b9:34:cb:75:76:37: d9:fd:b6:cd:d8:b8:d2:26:ce:a6:2b:ce:34:bc:69: db:68:7f:3d:7d:39:1e:a3:c3:ce:ee:3b:bf:ce:47: bb:ce:1c:56:83:4a:b7:76:3d:00:41:4e:80:bc:1d: a0:de:e8:5a:b8:5e:b3:2e:49:07:1e:22:9c:2d:c7: ac:c4:3d:24:f0:6e:c9:58:d4:97:6f:75:46:a6:e4: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:54:41:48:40:2C:D4:87:89:36:BD:0D:F4:09:6F:F0:E0:5A:ED:6E X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:8a:07:4f:85:30:59:90:ac:22:ea:bf:0a:0a:c4:af:b9: a9:7a:2f:d9:38:f0:36:60:00:f5:2c:42:bc:54:5a:3a:da:42: f9:94:7d:cf:3b:33:6b:8d:fa:b4:9c:28:c5:41:40:79:7e:1e: e8:ca:d9:03:fb:f7:84:ee:ff:9c:27:ef:c9:34:af:c3:8d:71: ab:67:51:8c:9f:c9:72:fc:ec:94:fa:51:03:f2:ec:02:0b:a4: c0:de:47:d9:5f:07:62:6c:9b:b4:2a:ac:79:79:12:cf:d9:58: 19:45:16:ac:40:8e:4f:3d:5f:6b:e2:e9:6b:92:f2:f4:8c:c6: 6e:31:f5:9c:42:24:17:f2:fb:de:42:33:fb:e2:a1:05:f6:63: 9d:a5:91:4b:ca:56:b9:cf:a3:34:3c:23:0c:36:f5:66:4e:56: 2c:a1:38:15:18:ce:3f:f5:05:77:25:c6:ba:f0:2a:34:a4:3b: f4:c7:a9:0e:be:56:9f:80:fb:34:c0:90:65:e2:7d:11:95:f9: 51:c8:44:01:5e:16:f3:dc:ea:7b:d9:b0:56:ea:25:b0:5b:76: 3d:1b:89:b9:e9:4e:79:62:ba:45:07:2e:3e:d1:80:2f:89:3b: a0:b1:bd:30:db:45:78:84:ce:6e:1f:85:0e:02:bb:a7:84:56: dd:7c:de:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjQwNTE4MTU0MjI1WhcNMjQwNTI1MTU0MjI1WjAYMRYwFAYD VQQDEw02NjQ4Y2M2Mi01NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTFDnt/7m6KmEqs41D1wR+9HfGTLz/OxL7tDZslJL9A3RaJSrPvn6S20U5pP PWRODholUWRPP/vkoL6zFBITdMm8Tb4pQnF1dArAu0yae3V/JPP/kVcVZfn5LsWE YNd6/Gc2C5XcLdojcffuIFFs3vbS+bQlvAEJcIq7wEwnVsXJjUbhEZv90ZDrYTsM yjz4Rx5hGHXZK3zo2WD0SbeXl9z2IItxDKlR4DJjI+m5NMt1djfZ/bbN2LjSJs6m K840vGnbaH89fTkeo8PO7ju/zke7zhxWg0q3dj0AQU6AvB2g3uhauF6zLkkHHiKc LcesxD0k8G7JWNSXb3VGpuTdVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1UQUhA LNSHiTa9DfQJb/DgWu1uMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZcYoHT4UwWZCsIuq/CgrEr7mpei/ZOPA2YAD1LEK8VFo62kL5lH3P OzNrjfq0nCjFQUB5fh7oytkD+/eE7v+cJ+/JNK/DjXGrZ1GMn8ly/OyU+lED8uwC C6TA3kfZXwdibJu0Kqx5eRLP2VgZRRasQI5PPV9r4ulrkvL0jMZuMfWcQiQX8vve QjP74qEF9mOdpZFLyla5z6M0PCMMNvVmTlYsoTgVGM4/9QV3Jca68Co0pDv0x6kO vlafgPs0wJBl4n0RlflRyEQBXhbz3Op72bBW6iWwW3Y9G4m56U55YrpFBy4+0YAv iTugsb0w20V4hM5uH4UOArunhFbdfN6e -----END CERTIFICATE-----Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org