$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: PPKn9TS3ArBOO8OtWlZTvKYu7YeLg12EySInjrj9AnM= Subject key identifier: 27:C9:D5:92:F8:7E:18:CD:1B:52:DD:03:E9:40:A2:05:36:A7:0E:4A Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1D45 Signing time: Sat 18 May 2024 16:29:45 +0000 Manifest this update: Sat 18 May 2024 16:29:44 +0000 Manifest next update: Sat 25 May 2024 16:29:44 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: yVmkoWezDJs/40ekFW59lZdOofVAWkB4V26f8haM1yg=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ephK7A4JNPWeKDKMs+nHQPIJnX05hx7QwVHerCqN4Jg=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: YcuxRz8K9RLj5bAsbMtgJ7Ztwmm6/Dt53hn8CfH7/1o=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: qO7QJpamN0YCO67eAk0dIWWMjbYS5UTc/e5iCxrMsTI=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: HQq8TqfKAhLWQ+QIZgUuXW1pTNsorhgqbcOP+SCp6Vw=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: 1ZwfcibXXD78qIDpt5glI/3vJDHrAKkJdTFVoYFKI0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7505 (0x1d51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: May 18 16:29:44 2024 GMT Not After : May 25 16:29:44 2024 GMT Subject: CN=6648d778-479a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:f4:2c:65:bf:bb:41:0f:10:e4:50:39:6f: ff:9a:d9:b3:98:1c:65:1f:8e:81:1f:0a:ae:f3:66: da:50:57:a7:5b:73:b5:83:15:5d:1e:b6:bd:d7:b1: 4f:38:69:4b:67:6a:fe:cb:2b:45:1a:8d:6e:96:1c: cf:3d:62:01:77:0f:56:fa:fc:ec:32:01:43:c8:88: c3:1f:4d:4d:f9:99:2e:06:98:1e:0c:6a:79:a2:81: 90:0d:7b:12:20:27:54:1e:fd:3c:5b:80:64:75:64: d2:fe:99:d6:75:ce:77:6c:2b:bb:63:55:3a:ee:58: 0d:3f:b2:e0:b8:fb:dc:49:48:1c:fa:dc:df:c8:a7: 4b:8b:a5:a4:56:84:13:cb:83:6d:d4:15:66:4d:03: a7:18:92:1c:ac:a0:d8:40:5d:6f:26:65:0e:f5:c1: 23:c2:d9:25:51:51:74:b7:ba:68:c4:fe:23:9e:fe: 2a:40:f6:1b:6e:fa:4b:d4:dd:06:8b:a5:8b:5c:46: ad:77:c4:fb:46:09:37:32:32:e3:4c:6d:c5:7b:33: 24:df:8d:2e:ac:cd:6e:82:30:ae:46:c4:04:df:ba: 2d:7f:1e:29:f5:b3:7f:86:31:3b:a4:83:ad:ec:20: 36:a3:81:a2:e6:1c:59:27:76:96:d9:e7:33:05:a6: f5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C9:D5:92:F8:7E:18:CD:1B:52:DD:03:E9:40:A2:05:36:A7:0E:4A X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fb:c7:d7:b7:b0:0d:9e:b7:00:37:7e:bc:55:47:e1:93:2f: c7:8d:aa:3d:9b:9f:11:8b:ed:b6:33:77:52:f5:54:c1:55:71: 9b:7a:22:e7:3c:c3:e5:1e:f8:e2:23:1e:3b:2a:ee:d0:c5:55: 9d:e1:41:d0:6f:5d:fa:31:ed:80:d9:49:61:ce:a1:a4:c8:09: 2e:65:06:40:86:50:f7:74:1d:15:36:28:d8:89:c6:8c:f3:dd: ac:cf:ef:bd:d0:e9:d2:3a:77:ff:39:1a:38:3d:f0:4f:a9:22: 58:85:3f:05:a6:0a:9b:2e:db:aa:28:3e:7b:d1:38:f3:82:c3: f5:41:c1:3c:80:1d:e7:4e:a2:dd:91:25:39:2c:e0:64:80:5a: 83:85:08:61:d3:06:99:99:bf:ad:83:5b:6d:be:8b:c3:7d:80: 90:09:1b:05:45:98:df:7b:0b:81:84:c8:8e:f5:fe:d7:6f:7e: b6:cd:57:f3:98:18:07:94:91:95:c9:09:1f:86:43:99:77:b2: 05:2d:18:e4:e3:77:cc:0d:67:9d:28:f6:72:6a:b1:cc:53:11: b0:2c:40:ff:82:60:99:eb:9b:37:30:a3:c5:1d:78:e3:f9:71: 72:8e:ad:23:9c:6a:12:2f:de:ff:5c:be:69:1d:20:0e:8d:ab: e2:52:97:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjQwNTE4MTYyOTQ0WhcNMjQwNTI1MTYyOTQ0WjAYMRYwFAYD VQQDEw02NjQ4ZDc3OC00NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6f0LGW/u0EPEORQOW//mtmzmBxlH46BHwqu82baUFenW3O1gxVdHra917FP OGlLZ2r+yytFGo1ulhzPPWIBdw9W+vzsMgFDyIjDH01N+ZkuBpgeDGp5ooGQDXsS ICdUHv08W4BkdWTS/pnWdc53bCu7Y1U67lgNP7LguPvcSUgc+tzfyKdLi6WkVoQT y4Nt1BVmTQOnGJIcrKDYQF1vJmUO9cEjwtklUVF0t7poxP4jnv4qQPYbbvpL1N0G i6WLXEatd8T7Rgk3MjLjTG3FezMk340urM1ugjCuRsQE37otfx4p9bN/hjE7pIOt 7CA2o4Gi5hxZJ3aW2eczBab19QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfJ1ZL4 fhjNG1LdA+lAogU2pw5KMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc+8fXt7ANnrcAN368VUfhky/Hjao9m58Ri+22M3dS9VTBVXGbeiLn PMPlHvjiIx47Ku7QxVWd4UHQb136Me2A2UlhzqGkyAkuZQZAhlD3dB0VNijYicaM 892sz++90OnSOnf/ORo4PfBPqSJYhT8FpgqbLtuqKD570TjzgsP1QcE8gB3nTqLd kSU5LOBkgFqDhQhh0waZmb+tg1ttvovDfYCQCRsFRZjfewuBhMiO9f7Xb362zVfz mBgHlJGVyQkfhkOZd7IFLRjk43fMDWedKPZyarHMUxGwLED/gmCZ65s3MKPFHXjj +XFyjq0jnGoSL97/XL5pHSAOjaviUpeS -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org