$ rpki-client -vvf rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft File: zHLheXsiBNjsaeyYxBc5zIxmTJw.mft (raw, json) Hash identifier: dzJOiZlxrsGQ/x/tvXXuCCVE/Fxmno0a0sMI97LBXFI= Subject key identifier: B5:B9:10:B8:AC:A3:44:1F:36:55:2C:6B:DD:06:B1:17:4C:4D:9F:F7 Authority key identifier: CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C Certificate issuer: /CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft Manifest number: 09C0 Signing time: Sat 18 May 2024 20:48:37 +0000 Manifest this update: Sat 18 May 2024 20:48:36 +0000 Manifest next update: Sat 25 May 2024 20:48:36 +0000 Files and hashes: 1: zHLheXsiBNjsaeyYxBc5zIxmTJw.crl (hash: ppc1SXGT1oPxOjh7aVVLj4RIFbqKMe+j/ddJ2nk+JHg=) 2: 7086C108890711EEA367A12CC4F9AE02.roa (hash: SMYVmN3H85ArX88Q9SnZho91DrBw7afY44CRQJ2Yhk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C Validity Not Before: May 18 20:48:36 2024 GMT Not After : May 25 20:48:36 2024 GMT Subject: CN=66491424-0ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:79:be:84:ac:74:c5:3c:49:69:ca:da:ae: 03:62:22:9e:77:c3:3d:38:f6:52:7d:c9:3a:bd:15: 03:b2:1b:5a:56:fb:2d:b0:ec:66:da:ba:31:f2:ef: e5:8b:42:18:a4:1f:b3:df:43:50:a3:06:bf:21:0f: ff:e0:a8:27:c4:32:05:be:6d:d0:10:6b:6e:51:0f: dd:ed:a9:16:77:26:fd:c7:d1:93:44:5c:20:9f:27: 09:42:59:38:d7:77:76:34:27:45:29:c8:1a:64:c6: 8d:77:19:ca:8b:d3:ae:27:a8:09:7b:d7:70:ee:d0: b0:5c:9f:84:04:07:3f:5d:f9:11:0c:b7:b6:68:23: 96:83:97:a0:f6:88:2d:3a:a4:92:08:a3:96:59:44: fe:58:20:34:45:20:02:5a:b2:0b:74:6c:9d:f6:bf: 05:2f:c0:85:54:4d:ea:1a:5e:cd:d7:1d:7b:f5:9b: ac:9c:05:f4:db:e1:27:70:8b:9f:58:1a:6b:ad:fd: 48:3b:d4:d4:3f:0e:46:9c:2a:94:69:d2:4c:f1:e0: c5:82:99:23:23:87:9f:1c:11:f1:1f:32:bf:2c:f9: 6c:d8:65:50:a6:7f:63:71:68:87:82:a9:87:0c:9b: 53:34:e2:4a:80:d9:65:29:00:a2:c4:c3:70:8f:98: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:10:B8:AC:A3:44:1F:36:55:2C:6B:DD:06:B1:17:4C:4D:9F:F7 X509v3 Authority Key Identifier: keyid:CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8c:0d:ba:c1:ec:03:03:f6:d0:d3:88:ec:83:0a:64:c5:ac: 1a:0c:b1:6c:6c:87:3a:88:83:3e:eb:95:7e:c6:d1:f0:2a:8f: 77:c1:0d:e0:68:b3:97:75:38:6d:e9:e1:0d:07:a9:4e:78:9b: 52:fe:3b:f2:36:50:8c:97:83:2c:80:9a:a0:c7:0c:64:69:47: b5:1b:a2:cd:2c:f0:6c:c0:fd:9a:f8:b7:e6:36:dd:1a:f8:e0: 61:0b:1d:80:98:9b:fd:37:44:f7:41:f1:0d:4c:6d:73:a0:04: 61:9c:98:ef:0d:bd:88:1a:c5:ae:70:eb:b0:26:0d:89:79:9c: 22:9d:ff:21:15:bf:bd:e0:97:1c:34:2d:3e:71:b4:0c:23:a6: 31:5e:ac:6b:f5:96:49:40:13:3e:58:7c:72:89:d1:10:48:51: 98:05:c9:1a:8c:b2:69:0a:66:fc:c9:51:b1:d8:f5:5a:25:02: f9:57:bd:98:b0:ed:10:43:70:e9:b0:36:8e:8b:85:ae:05:9f: e4:38:e0:ba:66:28:35:86:e8:05:6c:92:fc:3d:50:2b:5a:b4: f9:f0:bc:a4:e7:7b:15:3d:f3:96:70:ad:22:8f:2a:d1:b4:ae: 91:8d:79:d3:64:7c:5c:f7:b1:d3:0a:6e:92:b1:cb:ed:e5:ff: 90:a9:7f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyNUYxMTAvBgNVBAUTKENDNzJFMTc5N0IyMjA0RDhFQzY5RUM5OEM0MTczOUND OEM2NjRDOUMwHhcNMjQwNTE4MjA0ODM2WhcNMjQwNTI1MjA0ODM2WjAYMRYwFAYD VQQDEw02NjQ5MTQyNC0wZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NR5voSsdMU8SWnK2q4DYiKed8M9OPZSfck6vRUDshtaVvstsOxm2rox8u/l i0IYpB+z30NQowa/IQ//4KgnxDIFvm3QEGtuUQ/d7akWdyb9x9GTRFwgnycJQlk4 13d2NCdFKcgaZMaNdxnKi9OuJ6gJe9dw7tCwXJ+EBAc/XfkRDLe2aCOWg5eg9ogt OqSSCKOWWUT+WCA0RSACWrILdGyd9r8FL8CFVE3qGl7N1x179ZusnAX02+EncIuf WBprrf1IO9TUPw5GnCqUadJM8eDFgpkjI4efHBHxHzK/LPls2GVQpn9jcWiHgqmH DJtTNOJKgNllKQCixMNwj5giGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW5ELis o0QfNlUsa90GsRdMTZ/3MB8GA1UdIwQYMBaAFMxy4Xl7IgTY7GnsmMQXOcyMZkyc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI1Ri80RThEMkI1QzVE NDQxMUVBOTRDOTdEMTFDNEY5QUUwMi96SExoZVhzaUJOanNhZXlZeEJjNXpJeG1U SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pITGhlWHNpQk5qc2FleVl4QmM1ekl4bVRKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI1Ri80RThEMkI1QzVENDQxMUVBOTRDOTdEMTFDNEY5QUUwMi96SExoZVhzaUJO anNhZXlZeEJjNXpJeG1USncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXjA26wewDA/bQ04jsgwpkxawaDLFsbIc6iIM+65V+xtHwKo93wQ3g aLOXdTht6eENB6lOeJtS/jvyNlCMl4MsgJqgxwxkaUe1G6LNLPBswP2a+LfmNt0a +OBhCx2AmJv9N0T3QfENTG1zoARhnJjvDb2IGsWucOuwJg2JeZwinf8hFb+94Jcc NC0+cbQMI6YxXqxr9ZZJQBM+WHxyidEQSFGYBckajLJpCmb8yVGx2PVaJQL5V72Y sO0QQ3DpsDaOi4WuBZ/kOOC6Zig1hugFbJL8PVArWrT58Lyk53sVPfOWcK0ijyrR tK6RjXnTZHxc97HTCm6Sscvt5f+QqX/4 -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org