$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft File: 2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json) Hash identifier: 435DFzogBmgZtJWEW349nFWbO6pFcLZpY7/8gTclofA= Subject key identifier: 6A:4F:D8:67:11:47:1F:E1:C0:6F:33:47:89:7C:8F:62:4A:E0:22:F7 Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Certificate serial: 090B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft Manifest number: 08FC Signing time: Sat 18 May 2024 21:17:44 +0000 Manifest this update: Sat 18 May 2024 21:17:44 +0000 Manifest next update: Sat 25 May 2024 21:17:44 +0000 Files and hashes: 1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: YZ0nK68icHr/5n93pjQfAOEpoNMzNuLtu+2NfW5wM0E=) 2: 6322249E033E11EDA7401850C4F9AE02.roa (hash: cX5jruIutxzq0VvAFSmdLDYS4hJPXEWjAR7XYKB1s2o=) 3: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: HboE+xy7piKC3zUkYtpAMfNbbtMEPRumlNey38Milh0=) 4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: rn9WF0fvz3rSau/NSjCzGQFLyqGPaM5bqudbfPMMbLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2315 (0x90b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859 Validity Not Before: May 18 21:17:44 2024 GMT Not After : May 25 21:17:44 2024 GMT Subject: CN=66491af8-4fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:26:a0:04:79:51:1c:09:cd:d9:33:8b:f8: e5:a3:70:b8:96:05:fe:aa:16:8e:88:14:54:89:b3: a5:f8:8e:21:5f:04:f1:e2:cc:e9:65:57:eb:79:76: a9:a8:ad:71:72:2e:71:3c:e7:85:fe:6e:2c:f5:22: 52:96:23:b2:0a:48:26:62:8c:e7:75:1a:c6:88:9f: d2:65:49:78:ee:cc:6c:e7:8c:3d:71:86:da:f1:81: 3f:97:fb:7a:c8:85:99:1d:16:8a:c3:7e:f7:8a:90: b9:1b:fa:ae:b3:db:58:6e:2b:72:ca:11:95:68:00: 4c:10:f8:a8:4a:db:48:28:85:b2:1d:ae:71:36:5b: 29:22:ee:04:0f:2e:af:ed:5b:5d:80:bf:b3:8a:51: 4d:3f:c0:39:ed:71:15:fb:a4:41:99:30:a1:91:28: 0b:9d:df:87:0a:fe:14:7e:da:d7:51:08:1d:cb:00: f7:19:00:5d:af:c7:22:ba:9c:d6:c3:2e:63:9a:98: 08:26:2f:b9:64:50:f0:2a:81:7d:92:0e:26:cf:99: dd:22:c4:57:84:a9:3e:87:04:0e:0c:2f:0e:ae:4c: 71:1a:89:5e:36:17:41:46:10:5f:b1:ae:ea:48:83: 32:42:35:24:64:57:18:07:a3:2c:aa:c4:fb:7e:83: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4F:D8:67:11:47:1F:E1:C0:6F:33:47:89:7C:8F:62:4A:E0:22:F7 X509v3 Authority Key Identifier: keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:dc:d8:9d:7d:3f:53:1e:e5:2a:0c:90:a6:1c:aa:a8:44:ae: 09:5e:fd:28:47:34:57:ca:1c:cc:d5:14:fb:d4:a0:af:a7:c5: 4f:b6:e5:9b:f1:31:63:05:b9:4f:25:a7:a6:76:d5:6f:77:ac: 5d:a6:18:eb:a1:ca:70:fc:ee:ad:66:5d:88:c6:e0:dc:6c:7f: 1d:96:44:86:3d:de:1e:de:ed:f6:b8:be:80:28:46:83:fc:71: 24:3c:20:0f:95:17:4b:ee:e0:98:53:27:be:bb:5a:91:40:e0: f7:10:d8:9c:42:59:d5:36:00:4c:93:b7:4f:d3:42:34:0a:2c: a1:6c:67:a5:c1:e0:bf:30:1e:03:88:b7:26:92:05:2f:9b:00: d8:ae:52:53:19:58:00:2f:26:a5:04:fa:dc:db:59:e4:4f:64: df:f0:0f:2e:1e:58:b0:57:2e:c9:52:07:db:ae:7f:29:44:38: b1:f6:92:c9:35:72:e2:e9:e8:86:ec:ec:e5:c3:1b:a3:85:aa: 5c:09:c6:61:7a:10:65:a8:f4:b4:df:b8:9c:73:b2:a5:08:06: 1a:56:7e:b2:ad:03:8b:9f:ac:f6:74:75:3d:0d:54:34:42:82: 7a:c1:d9:44:52:61:d8:f0:b2:6d:1c:ba:55:2c:a3:70:9a:7d: 44:75:28:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4 MzgwQzA4NTkwHhcNMjQwNTE4MjExNzQ0WhcNMjQwNTI1MjExNzQ0WjAYMRYwFAYD VQQDEw02NjQ5MWFmOC00ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupgmoAR5URwJzdkzi/jlo3C4lgX+qhaOiBRUibOl+I4hXwTx4szpZVfreXap qK1xci5xPOeF/m4s9SJSliOyCkgmYozndRrGiJ/SZUl47sxs54w9cYba8YE/l/t6 yIWZHRaKw373ipC5G/qus9tYbityyhGVaABMEPioSttIKIWyHa5xNlspIu4EDy6v 7VtdgL+zilFNP8A57XEV+6RBmTChkSgLnd+HCv4UftrXUQgdywD3GQBdr8ciupzW wy5jmpgIJi+5ZFDwKoF9kg4mz5ndIsRXhKk+hwQODC8OrkxxGoleNhdBRhBfsa7q SIMyQjUkZFcYB6MsqsT7foPhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpP2GcR Rx/hwG8zR4l8j2JK4CL3MB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh3NidfT9THuUqDJCmHKqoRK4JXv0oRzRXyhzM1RT71KCvp8VPtuWb 8TFjBblPJaemdtVvd6xdphjrocpw/O6tZl2IxuDcbH8dlkSGPd4e3u32uL6AKEaD /HEkPCAPlRdL7uCYUye+u1qRQOD3ENicQlnVNgBMk7dP00I0CiyhbGelweC/MB4D iLcmkgUvmwDYrlJTGVgALyalBPrc21nkT2Tf8A8uHliwVy7JUgfbrn8pRDix9pLJ NXLi6eiG7OzlwxujhapcCcZhehBlqPS037icc7KlCAYaVn6yrQOLn6z2dHU9DVQ0 QoJ6wdlEUmHY8LJtHLpVLKNwmn1EdSie -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org