$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: zywJVUyUDVL53MDIADQdKMXeweiOKtJBjG9lHd4FdI4= Subject key identifier: 5C:93:A1:0B:C3:72:D6:F9:75:77:BF:42:C9:22:91:F7:DF:71:75:8D Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0BBC Signing time: Sat 18 May 2024 19:12:44 +0000 Manifest this update: Sat 18 May 2024 19:12:44 +0000 Manifest next update: Sat 25 May 2024 19:12:44 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: 2nfC5DgPDCLJIXdODEsKsh/RdhBOHfQ/W/Nls7nrQeI=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: K1rAuJOED+6Q4BLx8v57fInKqUu+2+FMuirq4Ojpcg4=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: Oj/HpRoXwbskrx6g4DxKc4eANqMpbexlTcX718AemjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: May 18 19:12:44 2024 GMT Not After : May 25 19:12:44 2024 GMT Subject: CN=6648fdac-bba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:4f:03:e4:89:b3:aa:3e:2f:c8:c8:f1:f5: d7:61:d6:78:df:d5:dd:6f:8e:38:f1:6e:7d:47:42: a8:e8:4a:c6:75:9b:52:b2:55:8d:85:28:f1:59:f7: b7:c6:8e:19:33:22:14:c1:9b:3b:83:20:3f:40:c8: 57:51:4f:f7:de:4b:92:12:d9:04:c6:5c:0e:95:99: 38:d7:68:de:f8:45:f1:ec:d6:60:6e:8b:d7:0d:b4: bd:a6:6d:54:56:3d:c9:c1:ca:34:eb:cb:71:45:e9: 89:1a:fb:e9:12:0c:f0:27:a0:14:c0:d1:92:61:0d: e2:e4:c1:6b:91:16:f5:22:e8:a6:22:8e:8e:66:94: ff:49:b9:41:c6:ed:f4:58:20:44:54:e1:e4:96:88: 38:34:62:39:fd:f3:2d:10:17:fc:fb:7b:6f:82:39: 07:aa:b5:02:14:5b:68:79:0c:3d:ae:55:7b:a0:2c: 1e:83:2d:92:ea:e7:84:d8:4a:36:5d:8b:73:eb:2d: a2:72:31:9e:a4:be:74:5d:d8:0c:74:8e:cc:0c:1f: a0:da:55:c3:ea:2f:e7:d8:1f:08:00:5d:80:0b:a3: a2:3a:3a:6c:7a:56:33:dc:fa:3f:4a:e8:0b:c5:7c: 78:62:13:df:09:d3:b5:05:00:25:fb:0e:be:88:70: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:93:A1:0B:C3:72:D6:F9:75:77:BF:42:C9:22:91:F7:DF:71:75:8D X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:48:2e:be:41:4c:c3:4e:5f:d0:c5:4d:40:f8:47:c3:39:33: fa:c0:e5:49:0f:d4:47:81:cf:57:b5:6f:3a:79:49:46:71:da: 3d:72:db:f1:75:ab:85:42:70:97:da:b8:9e:86:98:c4:9b:04: 1d:09:2a:fa:5c:92:ad:7c:4b:93:35:d7:92:b0:9b:d5:8d:89: 71:93:3c:31:39:b2:64:08:1c:be:cb:84:4e:ec:74:04:29:ee: f7:95:1d:c0:0b:e4:8b:af:95:9c:39:c1:b6:f9:21:20:03:1d: 72:3d:cd:52:78:e7:aa:51:c7:77:91:d3:34:58:f7:45:59:9c: 4b:6b:68:4d:98:61:e7:d1:d5:1e:73:20:70:30:6d:70:3d:62: 2d:82:8f:9d:1d:c5:be:91:d7:1b:47:20:4f:8b:49:91:e2:05: 0d:bd:e3:a5:55:84:d7:66:03:89:ca:dc:3e:49:f9:a4:69:4f: 3d:78:d4:fe:4b:da:36:c3:f9:98:1b:c6:20:db:80:73:6e:91: 5e:8c:88:fe:44:af:37:6e:d4:bd:47:b7:c5:db:c8:34:29:74: 6a:59:dc:59:6f:46:d9:b9:6a:b1:75:ee:fb:86:ab:c7:2d:2d: be:45:67:50:af:6a:8a:df:47:4f:79:70:bc:9d:ea:39:b7:86: 9a:a3:86:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjQwNTE4MTkxMjQ0WhcNMjQwNTI1MTkxMjQ0WjAYMRYwFAYD VQQDEw02NjQ4ZmRhYy1iYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLtPA+SJs6o+L8jI8fXXYdZ439Xdb4448W59R0Ko6ErGdZtSslWNhSjxWfe3 xo4ZMyIUwZs7gyA/QMhXUU/33kuSEtkExlwOlZk412je+EXx7NZgbovXDbS9pm1U Vj3Jwco068txRemJGvvpEgzwJ6AUwNGSYQ3i5MFrkRb1IuimIo6OZpT/SblBxu30 WCBEVOHklog4NGI5/fMtEBf8+3tvgjkHqrUCFFtoeQw9rlV7oCwegy2S6ueE2Eo2 XYtz6y2icjGepL50XdgMdI7MDB+g2lXD6i/n2B8IAF2AC6OiOjpselYz3Po/SugL xXx4YhPfCdO1BQAl+w6+iHAIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyToQvD ctb5dXe/QskikfffcXWNMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6SC6+QUzDTl/QxU1A+EfDOTP6wOVJD9RHgc9XtW86eUlGcdo9ctvx dauFQnCX2riehpjEmwQdCSr6XJKtfEuTNdeSsJvVjYlxkzwxObJkCBy+y4RO7HQE Ke73lR3AC+SLr5WcOcG2+SEgAx1yPc1SeOeqUcd3kdM0WPdFWZxLa2hNmGHn0dUe cyBwMG1wPWItgo+dHcW+kdcbRyBPi0mR4gUNveOlVYTXZgOJytw+SfmkaU89eNT+ S9o2w/mYG8Yg24BzbpFejIj+RK83btS9R7fF28g0KXRqWdxZb0bZuWqxde77hqvH LS2+RWdQr2qK30dPeXC8neo5t4aao4Zz -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org