$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: A9A6QiWao9NUVlTi+A5EFQHqhmCG81VhxxjFY2zvREo= Subject key identifier: BF:68:06:42:87:37:DD:D2:CE:A4:5F:40:07:8B:A9:E8:23:16:11:0C Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0B76 Signing time: Sat 18 May 2024 19:34:53 +0000 Manifest this update: Sat 18 May 2024 19:34:53 +0000 Manifest next update: Sat 25 May 2024 19:34:53 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: uY6gH5YkmxvKgviTU7pDkfcdoed/M0JWmLjCSzdbMzg=) 2: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: Kvk/oJ94n0ORGa36/wcPjBDlrTy3Y40+Bf/HYxtdMng=) 3: 7136F65A37A811EE94E32169C4F9AE02.roa (hash: NBR52rvY8WiF26EIW9oNvJ+wbiAonJxITHdJqzHDCjs=) 4: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: nDIoYJePab9tT5JuallWiBqViWeX11ygF3eMAt1OIRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: May 18 19:34:53 2024 GMT Not After : May 25 19:34:53 2024 GMT Subject: CN=664902dd-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:76:89:c7:05:1a:80:75:81:5c:26:89:71:60: 58:34:38:93:cf:78:46:14:c4:ca:2a:07:a8:26:3b: 06:1c:76:1c:ea:97:fa:5f:ab:b9:f7:c3:93:d6:03: 9e:8d:a4:05:a7:9c:7e:47:40:ae:72:b0:7b:26:1e: db:63:72:ad:bd:34:9a:13:f9:45:c3:fa:31:92:db: bb:4a:70:20:ef:60:5f:13:af:d5:3a:5c:06:e6:6f: cf:cb:17:59:a0:58:4e:1c:35:ac:cc:3a:e0:74:0a: 4b:b3:39:e3:14:54:55:f9:25:b3:18:40:a6:1f:4a: ab:fa:e8:a7:73:b7:e5:b4:2b:47:28:59:b0:98:54: 12:40:76:1d:25:91:b4:38:c9:0f:1f:06:38:c0:e6: 97:bf:b1:90:b0:26:6d:7f:52:40:25:a9:f1:a4:8d: 5f:88:58:48:23:53:9b:d0:be:46:5e:8b:91:c5:43: c1:62:6f:e0:70:9b:4b:e1:97:f5:4a:e1:da:d0:dc: 32:91:4c:51:37:eb:e7:7d:2a:56:ca:ff:05:f2:64: 03:26:4e:df:c6:e2:cc:22:de:e3:19:a2:8e:00:47: 8a:0f:0b:04:85:4c:e7:b5:e2:8f:99:00:20:17:0d: a9:d7:0c:ca:7c:6f:05:89:b0:c2:2c:2d:7c:43:49: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:68:06:42:87:37:DD:D2:CE:A4:5F:40:07:8B:A9:E8:23:16:11:0C X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:d3:c1:68:bd:9e:64:8b:ef:19:4e:f0:2e:b7:cc:d5:a7: aa:36:70:1d:34:ec:59:a4:e2:d0:18:6f:af:7c:39:3b:51:26: 48:99:d5:60:e9:ee:12:6a:f5:3d:52:57:23:1f:2b:8c:d6:fa: 6f:6c:4a:5d:cb:e5:6d:e2:2e:f5:1c:14:33:dd:d2:87:2f:32: 52:31:cc:54:80:17:fc:c1:18:82:8b:95:76:7e:54:2e:4f:5e: fe:c0:b3:f2:6b:ba:af:9c:c4:bd:d1:d8:ef:12:b7:a6:87:39: ac:89:aa:64:db:f5:2f:f5:8a:c0:f8:7a:80:62:42:82:14:83: f5:cf:a4:76:6d:c3:3f:70:72:06:a6:03:5c:0b:42:53:23:9b: 43:39:74:bf:aa:de:b8:67:40:0e:a8:bb:fd:3b:a6:17:be:a4: 29:17:fd:fe:f2:6d:13:8c:73:8a:9d:ef:f8:b6:7e:9d:1f:50: 60:e9:03:1f:c9:45:55:50:03:2f:73:21:65:b7:c7:05:e1:0f: 9f:32:35:b0:1e:b5:de:52:a3:5c:0d:51:4c:38:00:e7:15:58: 65:40:1f:6a:cc:4d:77:36:a5:97:a7:d5:1f:ac:e4:79:9e:ea: 19:61:bc:4d:3f:42:6a:e5:55:83:6c:46:79:d7:15:1b:da:ea: 46:12:c3:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjQwNTE4MTkzNDUzWhcNMjQwNTI1MTkzNDUzWjAYMRYwFAYD VQQDEw02NjQ5MDJkZC1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XaJxwUagHWBXCaJcWBYNDiTz3hGFMTKKgeoJjsGHHYc6pf6X6u598OT1gOe jaQFp5x+R0CucrB7Jh7bY3KtvTSaE/lFw/oxktu7SnAg72BfE6/VOlwG5m/PyxdZ oFhOHDWszDrgdApLsznjFFRV+SWzGECmH0qr+uinc7fltCtHKFmwmFQSQHYdJZG0 OMkPHwY4wOaXv7GQsCZtf1JAJanxpI1fiFhII1Ob0L5GXouRxUPBYm/gcJtL4Zf1 SuHa0NwykUxRN+vnfSpWyv8F8mQDJk7fxuLMIt7jGaKOAEeKDwsEhUznteKPmQAg Fw2p1wzKfG8FibDCLC18Q0nR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9oBkKH N93SzqRfQAeLqegjFhEMMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDZdPBaL2eZIvvGU7wLrfM1aeqNnAdNOxZpOLQGG+vfDk7USZImdVg 6e4SavU9UlcjHyuM1vpvbEpdy+Vt4i71HBQz3dKHLzJSMcxUgBf8wRiCi5V2flQu T17+wLPya7qvnMS90djvEremhzmsiapk2/Uv9YrA+HqAYkKCFIP1z6R2bcM/cHIG pgNcC0JTI5tDOXS/qt64Z0AOqLv9O6YXvqQpF/3+8m0TjHOKne/4tn6dH1Bg6QMf yUVVUAMvcyFlt8cF4Q+fMjWwHrXeUqNcDVFMOADnFVhlQB9qzE13NqWXp9UfrOR5 nuoZYbxNP0Jq5VWDbEZ51xUb2upGEsPC -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org