$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: Xv9fuYTJ/T4VxqYHM1TjRbU715hvu92FnQjljDkkw5k= Subject key identifier: F1:5A:6A:07:99:42:FE:B9:0C:99:6A:D5:69:30:7D:E2:4C:11:48:FA Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 1709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 16BF Signing time: Sat 18 May 2024 17:07:45 +0000 Manifest this update: Sat 18 May 2024 17:07:45 +0000 Manifest next update: Sat 25 May 2024 17:07:45 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: 6ZetxnJNasN92YgxeKI0/yZPxboT41XPMQzi7hDaFLU=) 2: 7166B29E9AD811EE999AC186C4F9AE02.roa (hash: 9L0FYBm6vBSRwVAFtNppTiFQXy8CRKKZY6ZKorYpHxA=) 3: EE2B9106D95E11E7A5E2E166C4F9AE02.roa (hash: 464b1biL/7a6FIAKPAceLOp0kJT6PQlnl7HNFihj0TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5897 (0x1709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: May 18 17:07:45 2024 GMT Not After : May 25 17:07:45 2024 GMT Subject: CN=6648e061-f87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:c6:ca:cc:69:a4:1d:22:a4:d6:27:39:14: 6c:6d:47:b2:2d:9e:01:59:c5:ae:5f:f5:a7:83:66: f2:67:d3:0d:58:a4:68:a0:2b:11:37:d1:57:a5:55: 86:52:ec:60:90:2c:c6:9d:b0:b6:72:09:d6:97:6d: 74:cc:61:39:ed:07:f1:46:aa:17:b2:72:5c:c7:b0: 53:ba:2a:6e:86:0a:a4:83:ae:42:f8:97:59:78:09: 3a:91:8d:f1:8e:81:7e:fa:32:79:1e:85:77:c9:88: a0:38:96:c1:c6:25:21:03:81:6b:15:28:6a:1d:86: a9:e0:08:dc:5d:ba:fa:7d:a0:09:d5:0c:fc:8d:ae: db:0c:7b:6d:17:e4:3e:83:a8:66:c8:63:35:3f:cc: a6:39:e0:b3:02:2f:43:44:a0:7c:8b:e5:77:a3:68: 7b:55:fe:c4:db:41:1f:be:04:1b:3b:77:47:53:7e: 2e:a7:42:f9:12:81:ad:95:dc:1c:33:eb:f8:65:e2: bd:a2:3d:3b:e9:56:ca:55:62:58:9d:be:f3:90:54: 17:bb:eb:9d:f7:11:59:5c:2f:6e:d1:30:d6:fb:d1: 9d:da:90:97:0f:31:77:09:4e:b6:10:33:96:ad:c2: 79:a6:f5:5e:db:83:53:8e:23:b8:0c:dc:4f:42:f6: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5A:6A:07:99:42:FE:B9:0C:99:6A:D5:69:30:7D:E2:4C:11:48:FA X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e4:14:37:5a:c4:04:4c:68:22:3f:1f:03:dd:0a:d0:0f:68: c2:74:06:b0:3c:c7:c0:70:ef:16:86:c1:37:29:27:ce:57:7b: af:45:58:ee:89:f0:f3:e6:e7:eb:d3:3d:df:de:d9:2a:fe:1a: 33:81:eb:89:d7:f1:90:4f:d4:3d:aa:39:22:45:77:03:54:6d: 35:6a:18:aa:3b:34:28:fb:b5:68:3b:c7:a6:14:04:f6:df:81: 25:b4:39:6b:e8:c4:7e:07:35:01:87:8f:46:01:22:f4:0f:ab: c1:2e:d7:a3:c6:75:92:90:14:9a:75:d6:72:ae:69:47:c2:ba: 3b:91:66:0e:92:25:e8:4d:2c:21:32:84:2b:d1:91:1e:80:6c: eb:52:3e:72:cf:95:77:18:11:44:e5:ce:b4:2f:71:43:7a:ce: b7:00:89:20:76:1a:16:a8:41:6e:44:ce:51:04:2a:ea:95:60: 0e:a2:2a:8e:61:d4:22:e9:41:5e:ac:d8:0b:d4:00:64:64:57: 71:98:f2:9b:66:cc:e0:d1:21:11:5f:05:38:ed:48:22:78:71: c6:a7:06:fc:8d:7c:0f:90:97:87:8e:56:45:1b:f7:4f:24:69: 40:10:6a:4e:92:91:17:b9:0f:9a:db:6b:fc:ca:5e:11:9a:10: 83:d4:67:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjQwNTE4MTcwNzQ1WhcNMjQwNTI1MTcwNzQ1WjAYMRYwFAYD VQQDEw02NjQ4ZTA2MS1mODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTbGysxppB0ipNYnORRsbUeyLZ4BWcWuX/Wng2byZ9MNWKRooCsRN9FXpVWG UuxgkCzGnbC2cgnWl210zGE57QfxRqoXsnJcx7BTuipuhgqkg65C+JdZeAk6kY3x joF++jJ5HoV3yYigOJbBxiUhA4FrFShqHYap4AjcXbr6faAJ1Qz8ja7bDHttF+Q+ g6hmyGM1P8ymOeCzAi9DRKB8i+V3o2h7Vf7E20EfvgQbO3dHU34up0L5EoGtldwc M+v4ZeK9oj076VbKVWJYnb7zkFQXu+ud9xFZXC9u0TDW+9Gd2pCXDzF3CU62EDOW rcJ5pvVe24NTjiO4DNxPQvYfZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFaageZ Qv65DJlq1WkwfeJMEUj6MB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR5BQ3WsQETGgiPx8D3QrQD2jCdAawPMfAcO8WhsE3KSfOV3uvRVju ifDz5ufr0z3f3tkq/hozgeuJ1/GQT9Q9qjkiRXcDVG01ahiqOzQo+7VoO8emFAT2 34EltDlr6MR+BzUBh49GASL0D6vBLtejxnWSkBSaddZyrmlHwro7kWYOkiXoTSwh MoQr0ZEegGzrUj5yz5V3GBFE5c60L3FDes63AIkgdhoWqEFuRM5RBCrqlWAOoiqO YdQi6UFerNgL1ABkZFdxmPKbZszg0SERXwU47UgieHHGpwb8jXwPkJeHjlZFG/dP JGlAEGpOkpEXuQ+a22v8yl4RmhCD1GdK -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org