$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: d2aoC9mmoXnowg/+987rg+eri7SgNQEK1QvtH+OGSQQ= Subject key identifier: B0:DE:71:01:F5:B1:4A:1B:FA:75:12:2C:79:FD:57:B0:EB:97:EB:A6 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0EE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0EDA Signing time: Fri 10 May 2024 18:22:51 +0000 Manifest this update: Fri 10 May 2024 18:22:50 +0000 Manifest next update: Fri 17 May 2024 18:22:50 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: +89QLgh2kICWO6VsDNDdxHl/pzRU45PN26NH/qlGWEw=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: ZOGuixDCVeX/4v0j6cC8sQBiF3FmFSZajNCheI8FjlY=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: yQMLbe8txGaIYA0rhNwTQP5BMEA+Qyw1ZkWFvMy348Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: May 10 18:22:50 2024 GMT Not After : May 17 18:22:50 2024 GMT Subject: CN=663e65fa-8026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:e8:29:4a:05:23:a9:b5:b1:43:a9:f6:06: 2f:19:61:cd:8e:cd:4a:7f:c8:fc:5b:5e:b2:1c:c9: 2c:97:3c:de:cc:a7:27:67:42:6f:8f:ef:2e:a6:d2: 83:ba:6e:1e:39:a7:bf:ad:6c:a7:87:8a:94:b9:bb: 35:69:e8:b4:ed:64:3e:c2:54:91:9a:38:4e:4e:88: f2:8d:7b:22:b9:87:c9:86:29:1a:4b:5c:5d:86:42: e7:b8:e9:84:17:c0:1a:19:ac:e0:3d:3f:ec:5e:73: 7f:b2:4f:b2:9f:50:60:ba:1e:a4:1c:7d:4d:0e:a4: f9:c6:5f:86:29:90:3c:c1:d9:98:17:57:d9:44:61: 90:c0:80:56:5c:df:39:c7:6a:06:67:03:7c:85:c4: ca:c3:5c:2a:7a:10:fe:40:f8:d3:5d:69:b3:8a:37: f1:22:56:e2:3b:ab:c1:e3:98:94:03:4f:39:55:4b: 35:92:83:c7:9e:94:6d:a4:c7:ce:9c:28:ad:83:8a: c7:1b:12:7d:42:38:39:c1:4a:7d:14:43:74:4c:f1: e4:dd:2a:ef:cb:d9:b1:62:be:a7:3a:b8:0b:b5:22: d0:00:43:fc:52:9d:a7:52:84:8e:e0:ba:43:ba:d3: 8d:a9:7a:b5:b2:27:cb:df:7b:01:df:f6:28:94:c4: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DE:71:01:F5:B1:4A:1B:FA:75:12:2C:79:FD:57:B0:EB:97:EB:A6 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a6:54:10:17:10:3d:9a:f5:83:66:a7:b6:67:2c:9d:bf:3e: ca:39:ec:a3:61:ba:58:82:4c:8d:90:a5:15:16:f9:7a:3f:06: dd:c2:57:bd:fa:c8:1d:b9:5c:76:ed:3f:24:57:17:fe:1f:1f: 3d:7e:5a:12:e6:36:63:64:a0:d5:04:d3:c3:e3:55:7d:45:c1: 26:46:f6:1f:98:f9:e5:b7:8e:0d:99:fe:53:56:5c:47:76:50: 98:99:04:94:50:c0:f2:e7:46:a4:0a:75:25:c7:7d:fa:e4:24: 7a:f0:d0:6d:c1:be:ae:a6:2c:a6:af:e8:88:4b:1d:a3:ec:9a: 84:26:8c:3b:bf:c1:e1:1b:dc:5a:5f:20:26:22:36:e6:9d:7d: a9:1f:65:6e:e4:0c:b2:5f:08:5f:b4:18:ad:21:99:d4:3c:8d: 14:7b:88:af:14:50:17:33:f3:02:7a:77:30:0b:c2:c6:36:0b: c8:af:71:35:4a:66:3b:18:f2:55:5d:11:15:2b:06:55:94:82: ce:53:57:0a:4e:b0:4a:c4:c1:f6:35:b2:00:e7:54:3e:40:b8: ec:a3:2f:04:21:a4:bf:a3:1f:56:67:a7:b2:bf:b3:b9:5b:30: ca:29:89:c8:e2:46:eb:82:e9:45:9a:0e:bd:b4:cf:f9:25:e0: 54:1d:e0:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjQwNTEwMTgyMjUwWhcNMjQwNTE3MTgyMjUwWjAYMRYwFAYD VQQDEw02NjNlNjVmYS04MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRPoKUoFI6m1sUOp9gYvGWHNjs1Kf8j8W16yHMkslzzezKcnZ0Jvj+8uptKD um4eOae/rWynh4qUubs1aei07WQ+wlSRmjhOTojyjXsiuYfJhikaS1xdhkLnuOmE F8AaGazgPT/sXnN/sk+yn1Bguh6kHH1NDqT5xl+GKZA8wdmYF1fZRGGQwIBWXN85 x2oGZwN8hcTKw1wqehD+QPjTXWmzijfxIlbiO6vB45iUA085VUs1koPHnpRtpMfO nCitg4rHGxJ9Qjg5wUp9FEN0TPHk3Srvy9mxYr6nOrgLtSLQAEP8Up2nUoSO4LpD utONqXq1sifL33sB3/YolMSVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDecQH1 sUob+nUSLHn9V7Drl+umMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLplQQFxA9mvWDZqe2Zyydvz7KOeyjYbpYgkyNkKUVFvl6Pwbdwle9 +sgduVx27T8kVxf+Hx89floS5jZjZKDVBNPD41V9RcEmRvYfmPnlt44Nmf5TVlxH dlCYmQSUUMDy50akCnUlx3365CR68NBtwb6upiymr+iISx2j7JqEJow7v8HhG9xa XyAmIjbmnX2pH2Vu5AyyXwhftBitIZnUPI0Ue4ivFFAXM/MCencwC8LGNgvIr3E1 SmY7GPJVXREVKwZVlILOU1cKTrBKxMH2NbIA51Q+QLjsoy8EIaS/ox9WZ6eyv7O5 WzDKKYnI4kbrgulFmg69tM/5JeBUHeCJ -----END CERTIFICATE-----Generated at Fri May 10 20:05:31 2024 by rpki-client on console-fra.rpki-client.org