$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: 2v8HJ96tUQa0pOFqKxqg+rCaEoPi1StFY3DXs0M3zEc= Subject key identifier: 28:2A:59:2D:5B:6C:8D:54:14:B7:13:D7:2B:65:7B:43:DD:12:66:C7 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0EF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0EDF Signing time: Sat 18 May 2024 18:18:16 +0000 Manifest this update: Sat 18 May 2024 18:18:16 +0000 Manifest next update: Sat 25 May 2024 18:18:16 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: W+owvq6iXpgHrxw8pmMRTSa1+H76y0AhfaRs1B1CHzU=) 2: 4DF4371066B111E98B2CD954C4F9AE02.roa (hash: wnwOcdr/H0vin2k8D2HczrFn5eNuey06OLgo+xwiEHw=) 3: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (hash: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3824 (0xef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: May 18 18:18:16 2024 GMT Not After : May 25 18:18:16 2024 GMT Subject: CN=6648f0e8-a8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:e4:91:9b:7e:46:0d:12:e7:c6:45:6e:59: f7:91:85:54:ca:2f:26:8c:63:47:52:57:4c:52:c3: 16:40:c6:14:5e:b9:ed:f8:14:cd:9e:2d:d2:73:45: 46:7e:97:98:1d:9d:21:7b:17:22:ad:e5:a4:53:ac: c8:4a:63:32:cb:4c:00:e2:0a:89:56:a3:fe:44:89: e9:03:7a:73:e4:b1:a3:c7:60:14:ad:a8:24:63:2f: 3a:95:54:16:58:e9:be:49:fc:51:9d:9c:fb:23:3a: ee:9f:ca:e4:17:58:a4:92:53:42:ad:d9:f2:44:55: e4:e3:f7:79:fe:b7:62:06:a5:f2:25:d7:0b:39:94: 64:d3:4e:2d:19:04:13:de:89:9e:fb:bf:c0:db:66: 9e:ec:7f:17:d6:b6:1b:e8:ef:59:eb:d8:ac:ac:a6: 15:b0:c7:90:db:a6:91:1e:a2:a0:2e:87:cc:80:fd: df:52:e2:88:36:ab:46:ba:2c:7b:f4:bc:eb:43:7a: e7:7f:a1:c2:6b:f0:a6:c1:eb:16:53:d3:8f:0f:6c: a3:3f:49:f1:63:13:ed:35:2d:1f:13:91:84:76:28: 7d:2a:c5:ee:02:6d:4b:85:3f:64:f3:0b:f4:e6:89: 67:37:65:34:e9:2f:a9:6c:43:61:e0:64:f6:88:52: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:59:2D:5B:6C:8D:54:14:B7:13:D7:2B:65:7B:43:DD:12:66:C7 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:aa:8d:cc:6a:02:ac:e1:32:2a:68:c9:2b:83:3e:f5:c3: 2a:6c:a1:c8:81:77:92:eb:19:69:c0:90:40:65:3f:d1:62:4e: bb:fd:1f:92:e2:73:98:5b:da:9b:90:79:7c:16:9d:f9:32:78: c7:c7:84:68:8f:a2:a2:63:8a:d1:a9:87:2b:55:a2:84:d6:05: 1e:8b:a2:15:89:28:22:da:61:ae:11:c8:d8:31:32:fb:7c:50: 2a:c5:01:bb:7c:5c:bc:f1:28:54:00:1b:36:b9:e2:81:6d:2f: 42:a9:91:4e:8b:e2:08:e6:18:6e:e2:04:5b:f8:44:71:19:70: c9:1f:63:3e:ae:4a:da:0c:d7:6c:14:7c:c8:ca:af:f7:53:a0: aa:3a:be:44:9c:bb:53:80:68:75:e5:20:b2:85:64:28:09:b5: 9b:73:34:6a:70:89:0d:49:82:a0:91:2c:6e:fe:13:48:f6:f1: 00:7c:52:f2:e4:da:9c:ae:f4:6f:e5:82:7f:bc:80:64:d2:86: 9c:79:9f:4c:80:4c:58:48:ab:97:f8:62:bc:c4:d7:e7:ad:24: 53:46:c5:09:b8:81:93:af:19:49:00:0a:23:61:3c:74:0d:13: 52:8f:96:63:a5:7c:52:b5:ca:e7:09:c8:56:09:17:3d:9f:ae: c3:d8:7e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjQwNTE4MTgxODE2WhcNMjQwNTI1MTgxODE2WjAYMRYwFAYD VQQDEw02NjQ4ZjBlOC1hOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xHkkZt+Rg0S58ZFbln3kYVUyi8mjGNHUldMUsMWQMYUXrnt+BTNni3Sc0VG fpeYHZ0hexcireWkU6zISmMyy0wA4gqJVqP+RInpA3pz5LGjx2AUragkYy86lVQW WOm+SfxRnZz7Izrun8rkF1ikklNCrdnyRFXk4/d5/rdiBqXyJdcLOZRk004tGQQT 3ome+7/A22ae7H8X1rYb6O9Z69isrKYVsMeQ26aRHqKgLofMgP3fUuKINqtGuix7 9LzrQ3rnf6HCa/CmwesWU9OPD2yjP0nxYxPtNS0fE5GEdih9KsXuAm1LhT9k8wv0 5olnN2U06S+pbENh4GT2iFIWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgqWS1b bI1UFLcT1ytle0PdEmbHMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69qqNzGoCrOEyKmjJK4M+9cMqbKHIgXeS6xlpwJBAZT/RYk67/R+S 4nOYW9qbkHl8Fp35MnjHx4Roj6KiY4rRqYcrVaKE1gUei6IViSgi2mGuEcjYMTL7 fFAqxQG7fFy88ShUABs2ueKBbS9CqZFOi+II5hhu4gRb+ERxGXDJH2M+rkraDNds FHzIyq/3U6CqOr5EnLtTgGh15SCyhWQoCbWbczRqcIkNSYKgkSxu/hNI9vEAfFLy 5NqcrvRv5YJ/vIBk0oaceZ9MgExYSKuX+GK8xNfnrSRTRsUJuIGTrxlJAAojYTx0 DRNSj5ZjpXxStcrnCchWCRc9n67D2H78 -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org