$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: vB5UsCC5pxNeYNVzK2zgDR6sZ3SkbtHp6ToZ8sUSdvE= Subject key identifier: F0:03:01:13:F2:B5:6C:DA:1F:A4:2D:0C:B9:25:E8:4B:08:0E:7D:90 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2C97 Signing time: Sat 18 May 2024 15:47:08 +0000 Manifest this update: Sat 18 May 2024 15:47:07 +0000 Manifest next update: Sat 25 May 2024 15:47:07 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: tVO1OtSz+7ldAfQnkJ7sGjIrixK+WQGateFyAVq/Kts=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: /kSK+t6Uui5gY+E46gDVyS5fJCRJ3UL5yOuwfJ+DnWw=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: peX1Vn1tpvxKT5ffW5rW/7Y8G0QyNA6fOUj8BiUa72c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11447 (0x2cb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: May 18 15:47:07 2024 GMT Not After : May 25 15:47:07 2024 GMT Subject: CN=6648cd7b-4795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:92:d8:b8:18:7c:7a:75:4b:05:07:02:65: ad:1c:81:4e:5c:b2:dd:86:c6:11:95:d6:93:79:dc: f3:42:48:ef:00:28:81:c6:a5:a5:a4:4f:30:13:76: e5:50:16:3c:c3:e7:49:19:d2:91:01:dc:55:ef:97: 1e:78:4a:ce:49:7a:ab:3f:01:f5:77:5b:9c:37:8e: 52:07:00:4a:f4:fa:45:16:99:e0:bd:1e:41:39:69: d3:7f:7c:0e:60:5e:33:0d:e8:0f:b0:64:7b:f1:01: d7:a6:ec:01:3a:82:cd:92:51:f8:f5:fd:fb:c7:87: b6:c1:eb:16:2e:e4:f6:64:29:e2:7a:f0:ab:56:5d: 72:23:28:ff:a4:f3:5d:e6:a6:47:c9:64:5f:0f:78: 4f:22:05:90:63:e5:34:ce:4e:05:94:28:dc:8d:0f: bc:29:f0:37:e2:de:e6:b8:06:44:26:19:09:16:aa: 3e:11:9a:fb:f7:49:66:13:af:13:ad:70:e2:27:e1: 4a:3d:95:6c:6f:90:f9:40:a7:02:77:05:08:d5:7e: 95:75:3a:56:6e:97:98:81:47:b0:c9:b1:9c:55:1a: d6:74:2f:16:dc:5d:d2:9d:c7:62:3b:cd:4b:6d:f2: 73:69:60:b0:ae:6f:07:d3:a0:45:4b:09:f5:c1:4e: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:03:01:13:F2:B5:6C:DA:1F:A4:2D:0C:B9:25:E8:4B:08:0E:7D:90 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:e8:08:86:f0:94:d4:13:e8:64:ee:d7:98:cc:81:e4:38: 1d:ee:56:09:cc:e7:b0:d1:cc:47:54:b5:2b:78:64:57:29:ea: c4:41:cf:48:a9:9d:8e:e5:83:61:bf:95:9b:2e:54:51:dd:13: c0:e0:d1:12:0e:60:4b:8c:02:3c:fb:06:f0:83:1e:10:27:be: 10:c5:a7:89:68:1e:e1:47:b8:79:54:b7:b4:00:1e:a2:71:55: 29:9a:f8:13:02:c1:04:37:09:e9:ed:60:43:96:dc:33:d8:67: 1a:ff:08:a3:f3:2f:f4:36:af:6e:0f:f5:48:a4:13:91:09:1c: 36:8d:1d:c5:7c:6b:85:cf:f5:9e:02:b1:5e:69:b2:04:81:9e: f9:de:16:2e:a4:46:55:10:1f:c2:19:0c:ad:e4:2d:73:d5:e5: cd:7f:ff:46:79:7c:76:18:eb:6c:5d:b5:63:86:73:3f:e5:9f: 3f:7e:0b:65:e2:d0:73:b3:c8:b3:d7:86:7b:c0:29:d0:b0:f2: ef:b4:76:de:28:06:c2:e0:ee:73:bc:7c:4c:f5:00:a4:d6:e1: ee:66:97:40:c2:1d:1f:0e:29:bc:ea:a6:d9:fb:2a:0b:4f:1e: 03:2d:9f:1a:ba:40:44:25:c1:4b:ed:7b:bc:a9:b7:43:b9:79: 6a:1e:f0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjQwNTE4MTU0NzA3WhcNMjQwNTI1MTU0NzA3WjAYMRYwFAYD VQQDEw02NjQ4Y2Q3Yi00Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslWS2LgYfHp1SwUHAmWtHIFOXLLdhsYRldaTedzzQkjvACiBxqWlpE8wE3bl UBY8w+dJGdKRAdxV75ceeErOSXqrPwH1d1ucN45SBwBK9PpFFpngvR5BOWnTf3wO YF4zDegPsGR78QHXpuwBOoLNklH49f37x4e2wesWLuT2ZCnievCrVl1yIyj/pPNd 5qZHyWRfD3hPIgWQY+U0zk4FlCjcjQ+8KfA34t7muAZEJhkJFqo+EZr790lmE68T rXDiJ+FKPZVsb5D5QKcCdwUI1X6VdTpWbpeYgUewybGcVRrWdC8W3F3SncdiO81L bfJzaWCwrm8H06BFSwn1wU6/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPADARPy tWzaH6QtDLkl6EsIDn2QMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdy+gIhvCU1BPoZO7XmMyB5Dgd7lYJzOew0cxHVLUreGRXKerEQc9I qZ2O5YNhv5WbLlRR3RPA4NESDmBLjAI8+wbwgx4QJ74QxaeJaB7hR7h5VLe0AB6i cVUpmvgTAsEENwnp7WBDltwz2Gca/wij8y/0Nq9uD/VIpBORCRw2jR3FfGuFz/We ArFeabIEgZ753hYupEZVEB/CGQyt5C1z1eXNf/9GeXx2GOtsXbVjhnM/5Z8/fgtl 4tBzs8iz14Z7wCnQsPLvtHbeKAbC4O5zvHxM9QCk1uHuZpdAwh0fDim86qbZ+yoL Tx4DLZ8aukBEJcFL7Xu8qbdDuXlqHvBL -----END CERTIFICATE-----Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org