$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: /2DA/xCDOyeeCw8MVF0KQ3aIjRTpVnZ4pLqlUqsHmss= Subject key identifier: EB:EA:33:BE:E8:88:1E:29:E9:1B:9B:7C:8E:30:19:E7:D0:9C:46:17 Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 057C Signing time: Fri 31 May 2024 01:11:17 +0000 Manifest this update: Fri 31 May 2024 01:11:16 +0000 Manifest next update: Fri 07 Jun 2024 01:11:16 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: BKVVk8ZF1fWUcJTEtVDfawn9cP86kqe+G1F2cc+IZ8k=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: xxTbwjHg1QikAjf8vr4+JJb23plKRbhPg2PJNBw2Jn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: May 31 01:11:16 2024 GMT Not After : Jun 7 01:11:16 2024 GMT Subject: CN=665923b5-8b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:50:39:7b:b2:78:dc:17:73:9d:90:b2:3e: 20:e6:ed:8c:e7:29:bd:9f:0a:9b:d2:c8:48:b2:3c: fb:0f:90:6f:49:5d:fb:fd:c5:58:27:dd:18:2c:e2: 19:de:0e:b2:e6:ba:14:55:6b:9d:c2:85:4a:8d:82: fe:28:34:5c:9e:b8:0b:be:2d:0c:1b:c7:d6:ce:b7: fb:49:0b:d2:ec:26:c1:73:7d:2c:89:a9:5d:ce:3d: 2f:02:42:ff:11:4a:eb:3d:eb:b0:48:15:2f:a9:c5: 03:ce:a7:2b:50:d7:cd:37:e1:05:a0:cb:bc:2e:36: 62:a2:c1:bb:de:9e:45:3a:e5:84:33:f4:7b:3c:f2: 19:25:bc:70:c1:51:59:1e:59:16:99:96:07:84:60: d0:bb:98:14:f0:eb:15:86:f2:f4:16:56:c9:34:02: 69:77:33:6a:03:1d:3a:55:64:96:0d:a7:34:a9:6c: 01:70:28:35:26:0f:fb:1f:f8:61:3a:6f:1c:d9:9c: 20:88:69:0c:42:a5:9c:18:4e:9e:75:97:16:cf:2b: 04:11:ae:7e:1e:03:1e:3d:a8:6c:d2:31:5b:c4:4e: 34:64:bb:4a:77:fd:16:d3:16:5e:74:eb:07:8f:21: ca:81:a1:66:30:27:df:a6:23:ca:7b:1d:5d:27:68: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EA:33:BE:E8:88:1E:29:E9:1B:9B:7C:8E:30:19:E7:D0:9C:46:17 X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3b:c4:66:20:3b:ed:03:8a:aa:06:5a:c7:11:d3:44:df:9d: 05:5b:31:46:8e:da:91:ab:a3:56:63:7c:8c:e7:e3:28:96:ff: ad:2d:c9:de:8a:71:78:80:ca:aa:e8:43:48:66:d0:57:10:99: e7:37:22:c7:ce:2a:b0:c2:6e:6c:40:54:bc:96:2f:4d:7b:5c: de:fe:c7:f5:31:3d:5e:8b:e5:e0:9a:37:19:07:2c:22:a0:07: 65:8a:62:ff:bd:eb:f6:86:58:ea:ea:da:80:78:a8:63:40:03: 10:d2:50:cf:d5:c0:76:1e:43:c3:10:be:2e:33:53:ca:4f:9f: 37:61:b1:60:4c:c5:b2:60:47:77:d4:65:13:7f:c8:6d:f2:26: 63:df:d1:38:f4:c9:16:f6:1b:f7:8d:44:94:dc:76:a4:5a:69: 4b:b8:e8:71:11:d3:7d:ca:0a:6a:ba:2f:ec:03:c5:20:fc:00: 7c:f1:41:78:de:f4:f4:aa:71:8a:95:2e:79:44:6f:af:7d:46: be:b5:30:88:9c:eb:a3:07:d3:28:18:6a:36:30:23:cf:ae:9f: 38:b0:28:de:3c:21:ad:11:a2:66:5f:e9:7c:69:d3:4b:fd:cd: a2:f9:ac:db:9e:ec:1f:46:a3:90:b6:be:7b:24:eb:b3:a0:90: 04:db:87:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjQwNTMxMDExMTE2WhcNMjQwNjA3MDExMTE2WjAYMRYwFAYD VQQDEw02NjU5MjNiNS04YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmn5QOXuyeNwXc52Qsj4g5u2M5ym9nwqb0shIsjz7D5BvSV37/cVYJ90YLOIZ 3g6y5roUVWudwoVKjYL+KDRcnrgLvi0MG8fWzrf7SQvS7CbBc30sialdzj0vAkL/ EUrrPeuwSBUvqcUDzqcrUNfNN+EFoMu8LjZiosG73p5FOuWEM/R7PPIZJbxwwVFZ HlkWmZYHhGDQu5gU8OsVhvL0FlbJNAJpdzNqAx06VWSWDac0qWwBcCg1Jg/7H/hh Om8c2ZwgiGkMQqWcGE6edZcWzysEEa5+HgMePahs0jFbxE40ZLtKd/0W0xZedOsH jyHKgaFmMCffpiPKex1dJ2iR7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvqM77o iB4p6RubfI4wGefQnEYXMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpO8RmIDvtA4qqBlrHEdNE350FWzFGjtqRq6NWY3yM5+Molv+tLcne inF4gMqq6ENIZtBXEJnnNyLHziqwwm5sQFS8li9Ne1ze/sf1MT1ei+XgmjcZBywi oAdlimL/vev2hljq6tqAeKhjQAMQ0lDP1cB2HkPDEL4uM1PKT583YbFgTMWyYEd3 1GUTf8ht8iZj39E49MkW9hv3jUSU3HakWmlLuOhxEdN9ygpqui/sA8Ug/AB88UF4 3vT0qnGKlS55RG+vfUa+tTCInOujB9MoGGo2MCPPrp84sCjePCGtEaJmX+l8adNL /c2i+azbnuwfRqOQtr57JOuzoJAE24fc -----END CERTIFICATE-----Generated at Fri May 31 02:50:46 2024 by rpki-client on console-fra.rpki-client.org