$ rpki-client -vvf rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft File: zOSbmUXwSWKmmgra2q5KQumgMSc.mft (raw, json) Hash identifier: Px42QjXfajGNlexUZvGyNC/G/9AitiDwD86/eyN6Htw= Subject key identifier: C2:B9:22:C5:CF:50:B4:06:CC:EF:2A:D4:A4:FC:A2:1D:2D:13:44:FB Authority key identifier: CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 Certificate issuer: /CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft Manifest number: 012A Signing time: Sat 01 Jun 2024 06:22:40 +0000 Manifest this update: Sat 01 Jun 2024 06:22:39 +0000 Manifest next update: Sat 08 Jun 2024 06:22:39 +0000 Files and hashes: 1: zOSbmUXwSWKmmgra2q5KQumgMSc.crl (hash: cO+I5IRxJ74/L5g2jhXE3ne+hfy13lPgZVJqKVnoeRc=) 2: 7126DC005AC911ED8E764545C4F9AE02.roa (hash: 142xVbcZ3GeGLp8Rd6SuyuN/pBZCXBBhtE27OphHCOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F893/serialNumber=CCE49B9945F04962A69A0ADADAAE4A42E9A03127 Validity Not Before: Jun 1 06:22:39 2024 GMT Not After : Jun 8 06:22:39 2024 GMT Subject: CN=665abe2f-d030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:62:55:17:c9:4e:58:a3:92:fa:59:44:aa: 08:d7:7a:08:83:68:0f:78:5b:10:f0:73:9f:f9:be: 23:16:cc:1e:bc:e5:2b:7a:4c:16:53:e3:6c:66:8f: d7:6e:6b:32:c1:ba:52:90:6f:1f:ed:9b:50:e1:74: 4c:66:eb:54:35:34:1e:0b:58:8d:40:0c:df:04:d8: 1b:af:87:e5:e7:54:22:75:d1:cb:3c:9e:a6:c9:01: 3d:58:2a:32:9a:07:1f:26:3a:35:57:8c:53:99:00: fb:f2:3e:f0:6a:f2:da:74:f3:be:21:98:4c:f6:c2: 4b:13:6d:46:45:2e:9e:0e:d4:47:be:af:a1:13:f4: e6:1a:29:7c:01:b0:b9:76:9b:27:c1:c1:64:ca:47: 9b:72:80:a1:78:0d:35:1c:90:4f:92:74:f4:53:d6: 69:b9:52:f5:96:b5:c0:4e:be:5a:33:e6:cb:64:9f: b8:a4:36:6c:41:dc:79:05:d1:18:3b:db:a4:3b:41: 60:07:57:6f:bd:19:31:92:89:67:e0:a3:09:71:bd: a7:84:4b:f9:24:60:31:ed:a3:cb:cc:e2:53:73:8e: f0:5e:49:e6:82:79:5e:42:94:6e:20:f2:38:df:ab: 68:34:80:52:16:70:8c:ec:20:89:05:97:7e:f1:fd: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:22:C5:CF:50:B4:06:CC:EF:2A:D4:A4:FC:A2:1D:2D:13:44:FB X509v3 Authority Key Identifier: keyid:CC:E4:9B:99:45:F0:49:62:A6:9A:0A:DA:DA:AE:4A:42:E9:A0:31:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOSbmUXwSWKmmgra2q5KQumgMSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F893/37C9BC545AC711ED831BBA44C4F9AE02/zOSbmUXwSWKmmgra2q5KQumgMSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:cd:32:fb:fb:a4:db:c1:f2:d1:ea:e0:22:fc:66:58:df:e8: 05:d8:90:53:65:a0:f5:3e:2a:0f:a6:f6:85:47:39:63:6f:c0: 2b:51:c1:21:9b:ac:1b:d2:96:e6:67:43:e0:3c:e7:95:c4:7b: 7f:f6:c5:bf:43:8d:48:f3:cd:96:ba:b9:bc:25:6d:0e:22:17: f3:8f:c1:95:6a:2b:d1:13:86:cd:6a:25:8e:bb:f3:ac:2c:75: de:84:69:75:d7:67:52:aa:99:cd:cb:c9:53:6d:4f:8e:c4:06: 47:8d:2b:62:28:91:4a:56:d7:ad:a1:4b:86:d7:35:f2:41:90: 9b:3d:9c:55:03:fb:cc:1d:96:7f:79:42:41:f9:0a:ab:0e:a7: 88:c7:c7:fc:89:4a:eb:93:b1:5a:47:f9:aa:b4:51:45:d6:d1: e8:73:56:17:df:b0:4d:0f:bf:3d:cb:d4:72:7d:eb:fd:3f:64: 2d:10:aa:8d:b8:9f:60:5d:48:76:ff:88:a8:27:a7:9c:af:7b: 17:25:80:19:a1:4a:1c:46:43:14:86:4c:88:6d:8f:15:b5:43: 63:af:5a:c5:c4:8e:23:d0:4b:cc:a4:df:44:16:af:3a:ef:db: c5:5a:50:cd:40:be:d1:b3:d3:ae:30:93:24:95:e9:40:0f:a5: bd:4e:4c:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY4OTMxMTAvBgNVBAUTKENDRTQ5Qjk5NDVGMDQ5NjJBNjlBMEFEQURBQUU0QTQy RTlBMDMxMjcwHhcNMjQwNjAxMDYyMjM5WhcNMjQwNjA4MDYyMjM5WjAYMRYwFAYD VQQDEw02NjVhYmUyZi1kMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrRiVRfJTlijkvpZRKoI13oIg2gPeFsQ8HOf+b4jFswevOUrekwWU+NsZo/X bmsywbpSkG8f7ZtQ4XRMZutUNTQeC1iNQAzfBNgbr4fl51QiddHLPJ6myQE9WCoy mgcfJjo1V4xTmQD78j7wavLadPO+IZhM9sJLE21GRS6eDtRHvq+hE/TmGil8AbC5 dpsnwcFkykebcoCheA01HJBPknT0U9ZpuVL1lrXATr5aM+bLZJ+4pDZsQdx5BdEY O9ukO0FgB1dvvRkxkoln4KMJcb2nhEv5JGAx7aPLzOJTc47wXknmgnleQpRuIPI4 36toNIBSFnCM7CCJBZd+8f0xIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK5IsXP ULQGzO8q1KT8oh0tE0T7MB8GA1UdIwQYMBaAFMzkm5lF8ElippoK2tquSkLpoDEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Rjg5My8zN0M5QkM1NDVB QzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NXS21tZ3JhMnE1S1F1bWdN U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPU2JtVVh3U1dLbW1ncmEycTVLUXVtZ01TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Rjg5My8zN0M5QkM1NDVBQzcxMUVEODMxQkJBNDRDNEY5QUUwMi96T1NibVVYd1NX S21tZ3JhMnE1S1F1bWdNU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEzTL7+6TbwfLR6uAi/GZY3+gF2JBTZaD1PioPpvaFRzljb8ArUcEh m6wb0pbmZ0PgPOeVxHt/9sW/Q41I882Wurm8JW0OIhfzj8GVaivRE4bNaiWOu/Os LHXehGl112dSqpnNy8lTbU+OxAZHjStiKJFKVtetoUuG1zXyQZCbPZxVA/vMHZZ/ eUJB+QqrDqeIx8f8iUrrk7FaR/mqtFFF1tHoc1YX37BND789y9Ryfev9P2QtEKqN uJ9gXUh2/4ioJ6ecr3sXJYAZoUocRkMUhkyIbY8VtUNjr1rFxI4j0EvMpN9EFq86 79vFWlDNQL7Rs9OuMJMklelAD6W9Tkxe -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:20 2024 by rpki-client on console-fra.rpki-client.org