$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: wYDPmoGr/eO5SozU/9DmjvCDCk55oTdp7x2HVPIyHko= Subject key identifier: 28:46:07:75:A4:C1:62:68:3B:A5:2E:A0:B3:B5:99:B5:04:A7:41:F4 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0C8D Signing time: Fri 31 May 2024 19:32:37 +0000 Manifest this update: Fri 31 May 2024 19:32:36 +0000 Manifest next update: Fri 07 Jun 2024 19:32:36 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: 8Z9sMmvelt95QpCTS3WkGidTBI2o0fGC373mbhelgsM=) 2: CCF39F96D08911EE9B454035C4F9AE02.roa (hash: dntGLVXM/jK2MkqYbz5Ntvjz9ap9m9g4EIDC7MhP6Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: May 31 19:32:36 2024 GMT Not After : Jun 7 19:32:36 2024 GMT Subject: CN=665a25d4-d4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:76:d5:92:ca:92:4d:51:74:85:8c:8d:14: 33:d9:54:31:51:53:4f:6e:a1:d5:cc:53:5f:1d:52: cf:19:b9:a5:a9:f3:b1:04:e6:e7:51:d1:e1:08:d6: 18:62:61:6d:67:67:3f:f6:6e:3e:3e:e9:d0:bc:6b: 2e:6d:a5:5f:20:d7:52:69:7b:d5:d4:92:c0:5b:20: e0:bc:85:2f:2e:96:c0:30:8b:bc:61:98:83:f2:85: b2:29:1e:49:1f:97:02:db:7a:27:e6:82:cd:30:ab: 7a:25:b2:5d:4e:95:42:cd:57:02:02:c1:93:9f:93: 4b:9c:1b:d3:65:35:2b:22:57:bf:f5:e3:a5:bf:2d: e3:6d:62:92:10:4f:d9:a4:04:c8:1c:06:d7:48:fc: 63:d4:7a:17:81:0c:02:d7:7d:a4:18:1a:7e:d3:7f: f6:57:aa:01:be:42:91:38:32:eb:51:fb:36:af:72: ca:f7:da:88:57:d0:02:b3:80:15:73:89:a3:71:b4: 50:e1:81:1c:90:ce:45:4c:96:c4:1f:41:ad:9c:1d: 7a:d3:a6:b4:0a:a7:fb:fa:d2:1a:8d:45:6f:06:54: ea:f0:89:90:96:73:4e:45:dc:4d:be:02:60:55:35: 96:7a:1c:70:43:92:35:8c:c1:45:fe:d7:7d:2d:ec: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:46:07:75:A4:C1:62:68:3B:A5:2E:A0:B3:B5:99:B5:04:A7:41:F4 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c0:be:28:9e:ca:9c:7e:2d:e9:83:20:b8:17:97:70:b5:9f: f2:eb:d4:64:ea:a1:07:8d:26:90:6d:4a:ac:0e:b6:db:2b:b1: d5:9a:9a:e2:43:90:94:a5:59:51:f1:1f:65:77:0f:d7:e3:b1: d2:fe:8a:50:58:87:df:5e:94:a4:63:15:7b:29:96:50:c3:2c: 1b:25:69:fd:50:43:19:84:c6:d9:e9:b5:a4:dc:98:87:d9:5c: b0:77:77:90:b0:72:a1:96:f5:db:41:a6:5d:ef:b5:7b:c7:fe: b8:d0:3f:fe:a1:20:d9:f9:68:ed:3e:95:73:5e:69:54:5d:1c: 9f:b9:12:c7:af:6e:39:2d:c2:75:fa:c0:7a:df:51:13:05:4d: 84:6c:a0:92:0a:f8:4f:b2:80:90:b0:42:fe:d9:ab:97:fe:38: f5:01:0e:72:ef:27:49:64:f4:69:62:99:ae:78:3a:ab:5b:09: a5:2d:d8:9b:ca:23:2b:69:52:68:98:61:c7:e4:b4:9b:a3:1f: f9:c7:bc:1c:cd:39:da:e0:b3:04:9c:d3:86:63:1a:32:49:51: 84:81:73:f0:18:98:93:4c:f1:c1:f6:6f:0f:1e:79:bb:79:75: f2:cc:35:de:4c:7f:4a:f1:62:2e:13:53:2c:d8:b8:32:14:59: 90:b4:2f:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjQwNTMxMTkzMjM2WhcNMjQwNjA3MTkzMjM2WjAYMRYwFAYD VQQDEw02NjVhMjVkNC1kNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttR21ZLKkk1RdIWMjRQz2VQxUVNPbqHVzFNfHVLPGbmlqfOxBObnUdHhCNYY YmFtZ2c/9m4+PunQvGsubaVfINdSaXvV1JLAWyDgvIUvLpbAMIu8YZiD8oWyKR5J H5cC23on5oLNMKt6JbJdTpVCzVcCAsGTn5NLnBvTZTUrIle/9eOlvy3jbWKSEE/Z pATIHAbXSPxj1HoXgQwC132kGBp+03/2V6oBvkKRODLrUfs2r3LK99qIV9ACs4AV c4mjcbRQ4YEckM5FTJbEH0GtnB1606a0Cqf7+tIajUVvBlTq8ImQlnNORdxNvgJg VTWWehxwQ5I1jMFF/td9LezQGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChGB3Wk wWJoO6UuoLO1mbUEp0H0MB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2wL4onsqcfi3pgyC4F5dwtZ/y69Rk6qEHjSaQbUqsDrbbK7HVmpri Q5CUpVlR8R9ldw/X47HS/opQWIffXpSkYxV7KZZQwywbJWn9UEMZhMbZ6bWk3JiH 2Vywd3eQsHKhlvXbQaZd77V7x/640D/+oSDZ+WjtPpVzXmlUXRyfuRLHr245LcJ1 +sB631ETBU2EbKCSCvhPsoCQsEL+2auX/jj1AQ5y7ydJZPRpYpmueDqrWwmlLdib yiMraVJomGHH5LSbox/5x7wczTna4LMEnNOGYxoySVGEgXPwGJiTTPHB9m8PHnm7 eXXyzDXeTH9K8WIuE1Ms2LgyFFmQtC9p -----END CERTIFICATE-----Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org