$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: uxJY7LEMFQMihzQ7cF1BH53BvxJNZnf0N9AOkkh+hT0= Subject key identifier: 8F:0B:7C:4F:5A:1C:65:01:72:87:BF:6E:B5:60:5C:D9:00:00:AC:19 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0A3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0A38 Signing time: Sat 18 May 2024 20:30:19 +0000 Manifest this update: Sat 18 May 2024 20:30:19 +0000 Manifest next update: Sat 25 May 2024 20:30:19 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: C6JSUGT+7+qrAeEwoaa+KCkJvuR9WAPfoAaAAyvRr18=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: 5C7m7GFnWhicE7+xRmZn+jKvVPR91IhQJPbubfTdmAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: May 18 20:30:19 2024 GMT Not After : May 25 20:30:19 2024 GMT Subject: CN=66490fdb-ef5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:c4:34:a6:37:24:f2:e4:78:5c:79:ee:2d: 0a:04:12:6a:18:51:c0:91:35:ba:35:c4:a5:91:7b: c4:47:17:30:60:9e:a1:72:f6:6a:1c:bb:19:4b:92: f9:23:31:9d:fd:52:46:4b:26:ef:86:c4:04:fe:74: 4f:26:7f:97:f9:b0:8e:3a:f0:0c:8e:c1:8e:64:1d: 15:60:47:d8:99:91:00:9a:5b:9a:7b:db:f2:7f:dd: 89:b8:80:4e:7c:44:22:f1:23:85:64:52:36:07:dc: 21:4f:23:3d:61:eb:11:f4:24:8e:51:18:8c:89:2f: 87:64:76:9f:79:c1:b8:76:d9:09:d2:6e:c5:c3:c8: ef:7b:97:d2:fd:e1:98:08:1e:bf:b2:9d:97:38:5e: c7:85:76:82:03:7c:2e:89:04:e9:2f:3a:a0:e7:69: b7:54:ef:95:8a:6c:3f:cc:1d:37:2a:dc:56:9a:5b: 46:38:22:fe:f2:73:b4:c7:6b:81:42:82:14:8c:44: 8d:b9:aa:6e:f6:ae:bc:1e:98:e6:d1:79:86:f7:f8: 2d:ff:49:3b:c1:0c:3e:54:a6:05:23:6c:93:f3:d7: da:2b:36:c9:4c:31:fd:09:5b:ef:11:c5:36:7c:d9: 2b:03:b9:bc:3a:e4:6c:3e:8b:dc:14:94:ff:5f:87: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:7C:4F:5A:1C:65:01:72:87:BF:6E:B5:60:5C:D9:00:00:AC:19 X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:8f:80:25:1c:76:54:a6:b9:a7:a9:f3:a4:2c:b0:ba:82: a2:8a:ff:1f:f6:46:08:e6:ee:c0:6b:e2:7d:e7:03:81:b8:bd: 26:7a:5e:49:84:f5:29:11:42:31:25:0f:b7:a4:8a:90:ab:af: 99:08:ba:b3:4a:c6:ed:75:d8:31:09:ba:ba:69:96:08:cd:51: cd:33:94:e8:1d:32:41:ff:86:41:36:14:c2:41:e3:1a:00:15: 76:e8:6b:4f:ec:39:f1:be:0f:68:88:51:e6:aa:7a:68:71:a5: e4:48:0d:fb:39:b1:6f:e6:90:65:c0:9b:74:8c:21:cc:7d:54: d6:e1:23:4e:df:5b:1d:ae:f3:18:d2:e7:19:8e:74:3a:f9:37: 48:e6:0c:51:8c:80:df:08:cc:07:7a:08:33:2f:92:9d:d7:00: 60:5f:52:1c:1d:77:c7:fb:c1:15:14:8b:8b:64:cb:71:ce:df: 95:ef:20:26:ef:55:74:08:82:5a:12:b7:2d:f1:6c:54:f1:46: de:a2:2e:11:cd:fc:de:e8:8c:c7:21:b2:ef:cb:89:be:8a:2a: dd:d9:65:a8:f6:f9:ec:c5:28:7b:b4:62:bb:33:26:d2:b3:5e: 5b:a6:60:33:4d:c3:d3:b6:1c:1a:6e:58:59:b3:c2:19:b1:83: f3:fc:db:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjQwNTE4MjAzMDE5WhcNMjQwNTI1MjAzMDE5WjAYMRYwFAYD VQQDEw02NjQ5MGZkYi1lZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXXENKY3JPLkeFx57i0KBBJqGFHAkTW6NcSlkXvERxcwYJ6hcvZqHLsZS5L5 IzGd/VJGSybvhsQE/nRPJn+X+bCOOvAMjsGOZB0VYEfYmZEAmluae9vyf92JuIBO fEQi8SOFZFI2B9whTyM9YesR9CSOURiMiS+HZHafecG4dtkJ0m7Fw8jve5fS/eGY CB6/sp2XOF7HhXaCA3wuiQTpLzqg52m3VO+Vimw/zB03KtxWmltGOCL+8nO0x2uB QoIUjESNuapu9q68Hpjm0XmG9/gt/0k7wQw+VKYFI2yT89faKzbJTDH9CVvvEcU2 fNkrA7m8OuRsPovcFJT/X4e1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8LfE9a HGUBcoe/brVgXNkAAKwZMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl7I+AJRx2VKa5p6nzpCywuoKiiv8f9kYI5u7Aa+J95wOBuL0mel5J hPUpEUIxJQ+3pIqQq6+ZCLqzSsbtddgxCbq6aZYIzVHNM5ToHTJB/4ZBNhTCQeMa ABV26GtP7Dnxvg9oiFHmqnpocaXkSA37ObFv5pBlwJt0jCHMfVTW4SNO31sdrvMY 0ucZjnQ6+TdI5gxRjIDfCMwHeggzL5Kd1wBgX1IcHXfH+8EVFIuLZMtxzt+V7yAm 71V0CIJaErct8WxU8Ubeoi4Rzfze6IzHIbLvy4m+iird2WWo9vnsxSh7tGK7MybS s15bpmAzTcPTthwablhZs8IZsYPz/NvX -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org