$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: 4vottOZI1fTOjnuom+5x9OZhthYdXQc2Jc39zUyz5iM= Subject key identifier: 62:CE:B4:9F:8D:C0:A9:EB:B4:E9:A6:EA:16:A9:78:8C:B6:AA:E4:B2 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0B09 Signing time: Sat 18 May 2024 19:58:00 +0000 Manifest this update: Sat 18 May 2024 19:57:59 +0000 Manifest next update: Sat 25 May 2024 19:57:59 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: y+xovkPF1ozW/vpPOvoZ49hLYH0uWKAf3rXeGny3CAE=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: 5w244W1bD1whgankX2pR9uug+6BH9EUGNcEqCnlbObE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: May 18 19:57:59 2024 GMT Not After : May 25 19:57:59 2024 GMT Subject: CN=66490848-688e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:09:84:d6:6d:32:5b:aa:29:52:7b:34:6f: 4e:d2:c3:8b:ae:ff:81:c8:ee:c0:ee:9a:d6:34:f6: 73:5c:28:41:0a:24:05:04:14:da:ce:15:f5:fb:f1: c1:73:c4:9d:50:ac:34:b8:d0:f6:cc:82:0f:98:76: 2f:25:e6:00:fb:57:d9:6e:45:22:c7:2a:d5:de:21: c2:14:e8:ec:88:bc:a7:93:69:e5:55:50:5d:26:5e: 71:f5:80:89:47:bf:d7:18:09:d0:0f:b8:74:7a:78: 30:ab:d7:f8:6e:12:fd:47:0b:75:7c:23:40:78:68: 39:5f:3e:f6:2a:66:87:cf:93:51:df:9e:cb:a8:8c: 7b:d2:57:be:e8:b9:88:7a:f8:17:73:9f:58:65:11: 2c:3c:34:94:19:2d:45:6d:42:a0:65:14:9c:d0:66: 8b:b9:24:24:ac:0c:ab:b2:85:fc:87:7e:d9:5e:ae: 57:98:9f:97:06:36:47:c7:e3:45:e8:0e:99:34:cd: 1d:72:d7:ed:ff:f0:dd:ff:5d:1c:0a:f3:36:69:6f: 57:a5:a4:70:25:20:67:02:94:67:5b:df:52:e4:37: 43:f8:5b:89:80:31:6f:f2:a2:07:0a:9f:9c:f7:c8: d4:a8:7f:c7:b9:32:7a:ab:57:76:33:11:13:b8:f9: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:B4:9F:8D:C0:A9:EB:B4:E9:A6:EA:16:A9:78:8C:B6:AA:E4:B2 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:97:28:63:56:45:23:7e:e3:52:b4:31:21:9d:b7:27:f1:18: af:8b:20:b2:72:10:48:38:01:93:38:94:77:84:a7:43:36:02: af:24:b2:e9:e6:a1:6c:3d:48:cb:c2:0c:32:a1:a4:58:ee:48: 83:6e:2b:9b:43:15:41:ce:59:a0:47:dd:47:b7:4b:ce:89:d0: 52:e3:32:d0:ff:dd:e5:e9:4f:ee:d0:91:87:60:b6:f3:1c:14: 9b:6f:f2:7b:39:0c:3a:2f:55:b7:6e:75:57:8a:1d:1f:8d:fe: f8:1e:a3:0e:f4:51:93:0e:2e:6a:91:af:cf:52:cc:37:3c:c8: 32:ee:50:4f:be:70:ea:b8:c2:ce:4f:ca:1d:b8:89:7a:44:d5: d7:0e:f7:c3:f2:d8:3c:7a:a9:f8:cc:c9:90:7a:b0:5a:d4:eb: 7d:ea:1b:63:e1:b5:90:50:7d:9b:94:d9:e9:90:94:53:f4:da: 9f:cd:b2:66:17:0b:9e:1f:7e:37:89:90:fc:91:72:52:bb:38: d9:c7:b7:4f:06:2c:38:a9:89:37:f0:73:b4:a9:1a:41:ea:74: ae:de:9f:a2:ae:e9:4d:f3:84:83:82:0b:6b:3b:5d:e4:23:44: f8:a2:75:ab:83:5b:96:fb:05:78:e6:26:0b:a7:04:77:f7:da: e6:6e:fd:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjQwNTE4MTk1NzU5WhcNMjQwNTI1MTk1NzU5WjAYMRYwFAYD VQQDEw02NjQ5MDg0OC02ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFMJhNZtMluqKVJ7NG9O0sOLrv+ByO7A7prWNPZzXChBCiQFBBTazhX1+/HB c8SdUKw0uND2zIIPmHYvJeYA+1fZbkUixyrV3iHCFOjsiLynk2nlVVBdJl5x9YCJ R7/XGAnQD7h0engwq9f4bhL9Rwt1fCNAeGg5Xz72KmaHz5NR357LqIx70le+6LmI evgXc59YZREsPDSUGS1FbUKgZRSc0GaLuSQkrAyrsoX8h37ZXq5XmJ+XBjZHx+NF 6A6ZNM0dctft//Dd/10cCvM2aW9XpaRwJSBnApRnW99S5DdD+FuJgDFv8qIHCp+c 98jUqH/HuTJ6q1d2MxETuPnPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLOtJ+N wKnrtOmm6hapeIy2quSyMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnlyhjVkUjfuNStDEhnbcn8RiviyCychBIOAGTOJR3hKdDNgKvJLLp 5qFsPUjLwgwyoaRY7kiDbiubQxVBzlmgR91Ht0vOidBS4zLQ/93l6U/u0JGHYLbz HBSbb/J7OQw6L1W3bnVXih0fjf74HqMO9FGTDi5qka/PUsw3PMgy7lBPvnDquMLO T8oduIl6RNXXDvfD8tg8eqn4zMmQerBa1Ot96htj4bWQUH2blNnpkJRT9NqfzbJm FwueH343iZD8kXJSuzjZx7dPBiw4qYk38HO0qRpB6nSu3p+irulN84SDggtrO13k I0T4onWrg1uW+wV45iYLpwR399rmbv1H -----END CERTIFICATE-----Generated at Sat May 18 20:48:21 2024 by rpki-client on console-fra.rpki-client.org