$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft File: ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json) Hash identifier: F3unPAlc/TCXuX7FzatkahAq2br+QbyPwemfstYMGWw= Subject key identifier: E2:0C:54:B3:16:04:A2:9E:47:AE:21:4F:DC:A9:1C:76:D5:9B:B6:12 Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D Certificate issuer: /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D Certificate serial: 1271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft Manifest number: 18C0 Signing time: Sat 18 May 2024 17:38:56 +0000 Manifest this update: Sat 18 May 2024 17:38:56 +0000 Manifest next update: Sat 25 May 2024 17:38:56 +0000 Files and hashes: 1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: odj+W48c82a9MDZNhqMlR6dxqve6EnDT3jn/AqmUtfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4721 (0x1271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D Validity Not Before: May 18 17:38:56 2024 GMT Not After : May 25 17:38:56 2024 GMT Subject: CN=6648e7b0-a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:bb:ce:f2:da:03:a9:b6:9a:bd:68:a6:9e: dd:d3:78:52:df:58:a2:9e:8f:8e:53:ca:11:08:46: 57:b5:37:39:39:d1:f2:c3:79:21:6d:e7:f4:c4:6b: a3:14:f4:db:07:cb:85:0d:51:69:f3:a1:77:9e:db: 5f:b8:2e:4e:16:ab:99:fb:49:a4:7a:d0:ad:0a:69: 6f:70:53:35:60:4f:ee:18:87:6e:03:81:15:ee:0b: 3c:16:af:19:8a:6d:b0:64:e3:fa:48:38:1d:a8:85: 76:58:d0:8c:39:ee:7e:6d:46:97:3a:be:97:98:ed: 15:db:a4:2e:97:40:f1:f6:1c:8b:93:49:9d:20:bf: 07:78:a0:12:82:f5:4a:01:2d:1e:94:27:42:1c:73: 64:74:32:e6:1b:84:9e:da:bc:88:04:59:4d:f8:3d: 30:12:6d:e9:00:5e:1b:13:67:63:7a:fb:0a:ed:73: a6:39:3d:bb:f5:58:c6:ae:4e:8c:12:e8:8f:5d:dd: 85:d1:ac:7c:c8:85:ec:f9:9f:28:4c:d9:ec:50:f7: b2:f5:16:87:c2:ec:f2:eb:8a:7f:00:f9:df:6f:2a: 97:65:9d:0b:fb:d5:f7:9c:f3:8e:73:9c:2c:4c:13: cb:1a:fb:dc:cb:47:ac:8f:ef:6b:f0:3e:48:56:7d: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:54:B3:16:04:A2:9E:47:AE:21:4F:DC:A9:1C:76:D5:9B:B6:12 X509v3 Authority Key Identifier: keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0e:19:53:a2:04:51:82:76:01:85:67:57:7b:9c:72:ae:26: eb:8b:fd:e3:d3:e4:74:14:cf:48:cb:8b:b3:96:24:e0:ad:f4: 30:dc:c2:fd:e2:f3:85:83:37:7f:11:85:54:b2:9e:08:28:c6: f3:38:c5:54:57:4d:9e:82:c5:ad:8d:70:b3:f2:5a:c9:45:d5: 58:4f:b4:d1:d2:43:21:68:76:26:32:e9:d6:42:d7:a3:18:0d: 90:fc:d6:ab:fa:25:91:28:74:06:33:9b:73:84:9f:53:bd:8f: bf:0b:4d:72:6b:99:f5:bb:f8:f0:5a:eb:25:f1:1c:ba:f0:60: 8d:75:47:c7:02:01:10:a4:8f:5a:63:57:ae:db:70:08:2a:86: c0:be:31:ef:9a:e4:6b:ab:76:b2:52:ae:fe:fd:bb:f6:72:eb: 7d:19:da:a5:42:c8:2c:5e:0e:bd:64:e2:32:a2:19:a6:5b:4e: 27:59:a8:16:6f:3d:ec:ce:0c:89:a3:0b:97:7f:c5:4d:9d:e6: 7d:f4:4a:fd:28:7c:2d:6d:f6:a8:97:83:65:95:1d:0a:4f:d6: 05:d8:dd:76:2c:36:f6:d8:7b:87:d6:d3:84:72:a3:fd:ab:5f: c3:9e:9b:16:c5:b7:15:bf:f1:ab:06:59:f8:2f:5e:62:84:11: 67:30:82:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDY3MjEyNEY2MzNDODkxOUNBNUQ3NjZEODlFOUNDRkYw QjIxRjBDOEQwHhcNMjQwNTE4MTczODU2WhcNMjQwNTI1MTczODU2WjAYMRYwFAYD VQQDEw02NjQ4ZTdiMC1hNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXS7zvLaA6m2mr1opp7d03hS31iino+OU8oRCEZXtTc5OdHyw3khbef0xGuj FPTbB8uFDVFp86F3nttfuC5OFquZ+0mketCtCmlvcFM1YE/uGIduA4EV7gs8Fq8Z im2wZOP6SDgdqIV2WNCMOe5+bUaXOr6XmO0V26Qul0Dx9hyLk0mdIL8HeKASgvVK AS0elCdCHHNkdDLmG4Se2ryIBFlN+D0wEm3pAF4bE2djevsK7XOmOT279VjGrk6M EuiPXd2F0ax8yIXs+Z8oTNnsUPey9RaHwuzy64p/APnfbyqXZZ0L+9X3nPOOc5ws TBPLGvvcy0esj+9r8D5IVn2RWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIMVLMW BKKeR64hT9ypHHbVm7YSMB8GA1UdIwQYMBaAFGchJPYzyJGcpddm2J6cz/CyHwyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWtaeWwxMmJZbnB6UDhMSWZE STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5RWs5alBJa1p5bDEyYllucHpQOExJZkRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9aeUVrOWpQSWta eWwxMmJZbnB6UDhMSWZESTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDhlTogRRgnYBhWdXe5xyribri/3j0+R0FM9Iy4uzliTgrfQw3ML9 4vOFgzd/EYVUsp4IKMbzOMVUV02egsWtjXCz8lrJRdVYT7TR0kMhaHYmMunWQtej GA2Q/Nar+iWRKHQGM5tzhJ9TvY+/C01ya5n1u/jwWusl8Ry68GCNdUfHAgEQpI9a Y1eu23AIKobAvjHvmuRrq3ayUq7+/bv2cut9GdqlQsgsXg69ZOIyohmmW04nWagW bz3szgyJowuXf8VNneZ99Er9KHwtbfaol4NllR0KT9YF2N12LDb22HuH1tOEcqP9 q1/DnpsWxbcVv/GrBln4L15ihBFnMIKc -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org