$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: CVbjbG+ajumYig0zH4sJGNeRQkY4eK8I882MnCzvex8= Subject key identifier: E7:AD:6A:FB:A4:F5:65:0F:DC:76:75:14:56:8E:A2:5F:BC:12:57:42 Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 19FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: 9C18 Signing time: Sat 04 May 2024 14:33:22 +0000 Manifest this update: Sat 04 May 2024 14:33:21 +0000 Manifest next update: Sat 11 May 2024 14:33:21 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: InkmP620Zf6PgLcMBxYT2mlbhqOBVAbcClFKBwSMC6A=) 2: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: J+i+xHglF30YrTu7x6Pre7wquyLrlypNp53kEuUro+A=) 3: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: 2Wfkdn7MfVQXrZ9H0XtMLTt93Bf8/BHzsOt+OvV3+jE=) 4: 191363A69DD911EC99D91668C4F9AE02.roa (hash: qZR0aFszDY/l5eui6uQTd6Rpwe1MnohTwQCzV7r+27A=) 5: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: QGAwZUuCqo2rdVld9FJT3Ob19+cZKtlgVcmXc6DM0f4=) 6: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: kzECbfpnJK1DMJfZUK8eDMDVYRqxWsJZ8xpJMfAbRdI=) 7: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: /NtTWdjr9LcEfZeZzwzUDEyqZqjWCjb59tYobseoHp4=) 8: 4B6349ECD79011ED98D6CE6AC4F9AE02.roa (hash: tYaYyaQsrpnXSYsOGrwwzLRKJ2VgPEGWc1iN6aMv68A=) 9: 5C818B14EEF911ED891BBB4EC4F9AE02.roa (hash: L2w0Fzx0VxoM82eKyoPgr1hCZprmQxiXYiAMQCUIaXY=) 10: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: F72hMyPFufNAn6x52lJUWTMTr8HB/3kn400XNImKBbM=) 11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: suClGwc5MHcSEsoUjuBqNLkT149rEK2HHOalRigGnJI=) 12: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: kSBhw14t2y5sCzRw5nLpnIcdv7ebTARlD7OJV5Y29aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6651 (0x19fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: May 4 14:33:21 2024 GMT Not After : May 11 14:33:21 2024 GMT Subject: CN=66364731-bee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:b2:a6:1b:93:de:57:6b:97:b9:55:32:89: db:5f:8f:f3:9f:4a:58:52:6c:b8:1e:16:69:49:15: e4:70:ef:5c:36:7b:e7:6c:82:ff:f6:75:8a:b3:fc: 37:0f:84:b5:65:32:31:56:03:f8:d0:a3:64:80:dd: a2:86:ea:84:fd:28:6d:a1:3a:9a:43:97:b1:29:f2: 21:0b:cb:eb:d4:0c:f7:d3:51:2c:e0:8e:f5:b3:59: d0:46:be:0e:18:4d:f6:bb:ce:cf:35:0a:29:4f:ca: b9:be:b9:a6:1a:12:7b:59:33:27:5d:0e:1c:f7:f7: 66:ba:43:b5:6a:b2:79:26:02:7e:53:5a:0a:23:e5: af:29:4a:c5:e1:02:f3:4d:fb:2b:1f:b6:14:04:34: 26:21:5d:2a:a4:c6:f9:c9:51:ad:6c:51:d8:95:ce: 11:34:6b:8e:a7:e4:67:98:db:33:81:2e:9a:06:7b: bc:35:98:10:8e:68:60:1c:6a:84:6f:d7:60:e5:78: 80:94:90:1c:02:bb:6d:0a:9a:fb:28:ad:a8:ca:a6: c8:1c:e9:d2:fe:aa:9e:29:61:e2:79:74:43:e6:ec: 22:b9:85:cd:b7:af:fe:2c:93:b7:51:e7:92:98:33: 20:ed:3f:25:26:7e:25:6c:15:dc:ff:ed:d2:82:7e: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:6A:FB:A4:F5:65:0F:DC:76:75:14:56:8E:A2:5F:BC:12:57:42 X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f4:cd:a5:25:15:c1:c6:1d:53:c5:52:b1:69:c6:e7:05:3f: 12:01:b6:8a:48:fb:b5:1e:3b:f2:6e:12:b5:00:29:f1:45:9c: ef:61:70:07:89:5f:2e:5c:80:65:52:fb:88:de:6c:c3:be:4b: f1:1e:e5:2d:2d:d4:aa:ce:1e:3a:aa:05:cc:a3:fb:bd:68:43: 7f:44:4c:76:e3:8f:53:d5:c9:e4:cb:09:40:ce:61:92:ed:7c: 90:8a:bf:4a:30:bf:d4:83:4b:c7:64:f7:46:3b:55:05:80:02: 8b:8c:84:7b:f4:0f:15:52:bc:c3:07:1a:45:59:e2:11:8d:d4: f8:b0:8a:16:d4:24:01:d3:bc:d7:96:1e:e3:20:06:9e:ff:a1: 49:b3:c2:17:59:4d:db:b0:46:aa:1c:f7:a7:ea:85:75:27:fc: ed:ff:18:ad:1f:0c:91:77:55:be:b7:a6:76:18:f1:3d:75:03: 9a:59:1c:21:e1:ff:c4:26:f0:b6:c6:0f:1f:f6:53:fe:43:95: 89:ee:96:60:2c:57:d1:20:2c:4f:cd:93:ee:e8:f8:7d:a2:d0: 7f:73:26:cc:b7:2d:18:12:32:c0:1c:c9:c0:82:0a:f6:51:c7: 3c:35:ef:42:e3:78:1c:f1:31:15:21:b9:05:3f:ce:0e:7b:9b: fc:16:08:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjQwNTA0MTQzMzIxWhcNMjQwNTExMTQzMzIxWjAYMRYwFAYD VQQDEw02NjM2NDczMS1iZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/KyphuT3ldrl7lVMonbX4/zn0pYUmy4HhZpSRXkcO9cNnvnbIL/9nWKs/w3 D4S1ZTIxVgP40KNkgN2ihuqE/ShtoTqaQ5exKfIhC8vr1Az301Es4I71s1nQRr4O GE32u87PNQopT8q5vrmmGhJ7WTMnXQ4c9/dmukO1arJ5JgJ+U1oKI+WvKUrF4QLz TfsrH7YUBDQmIV0qpMb5yVGtbFHYlc4RNGuOp+RnmNszgS6aBnu8NZgQjmhgHGqE b9dg5XiAlJAcArttCpr7KK2oyqbIHOnS/qqeKWHieXRD5uwiuYXNt6/+LJO3UeeS mDMg7T8lJn4lbBXc/+3Sgn401QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOetavuk 9WUP3HZ1FFaOol+8EldCMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA09M2lJRXBxh1TxVKxacbnBT8SAbaKSPu1HjvybhK1ACnxRZzvYXAH iV8uXIBlUvuI3mzDvkvxHuUtLdSqzh46qgXMo/u9aEN/REx2449T1cnkywlAzmGS 7XyQir9KML/Ug0vHZPdGO1UFgAKLjIR79A8VUrzDBxpFWeIRjdT4sIoW1CQB07zX lh7jIAae/6FJs8IXWU3bsEaqHPen6oV1J/zt/xitHwyRd1W+t6Z2GPE9dQOaWRwh 4f/EJvC2xg8f9lP+Q5WJ7pZgLFfRICxPzZPu6Ph9otB/cybMty0YEjLAHMnAggr2 Ucc8Ne9C43gc8TEVIbkFP84Oe5v8Fgg8 -----END CERTIFICATE-----Generated at Sat May 4 15:55:04 2024 by rpki-client on console-ams.rpki-client.org