$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: XjpQnp96p1n7O9U1HMipRK/BAlBc1xM5kSFqG8AXeDo= Subject key identifier: 42:83:B7:5C:83:86:07:DC:DC:60:98:53:D8:66:38:9D:5A:42:81:2E Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: BF Signing time: Sat 01 Jun 2024 07:46:41 +0000 Manifest this update: Sat 01 Jun 2024 07:46:40 +0000 Manifest next update: Sat 08 Jun 2024 07:46:40 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: D1uF0UwFqvLANAQ7TnJJkk3XYc3SjhmI26WaAaz8EZY=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: MhnlI9exW+RMMsOOeA0js7t38sgb1HY334sjZbPPcIs=) 3: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: /NkHsi+HD36xg3F3z+E/an+GAt3cjkWAYoYG1NwlCDQ=) 4: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: bHJCi6Fx94Tr82fyaUmP4Kxgcl4MBtO25etlERplKes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Jun 1 07:46:40 2024 GMT Not After : Jun 8 07:46:40 2024 GMT Subject: CN=665ad1e1-686b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:8d:d2:ec:82:1f:f1:5e:70:be:71:04:5b: 05:15:79:95:e5:52:b1:95:8c:49:76:ae:d6:9b:08: e7:b2:ac:1d:6a:61:ae:12:5c:16:d6:9b:82:5b:cf: 0f:e2:b0:53:76:52:17:a1:6e:ce:ff:4b:bc:90:bc: 4d:39:3c:8d:6a:45:a2:c2:1f:ee:f0:a3:77:b9:11: 59:84:0d:fc:fc:41:3c:d9:5a:3d:ae:47:f5:26:fb: 7a:76:d6:d3:da:70:e8:0c:10:62:4f:a1:de:07:1f: 4e:25:d3:f0:4f:fd:f6:9f:9e:5b:6a:3b:d8:f6:b2: f3:1b:6b:65:2f:fd:66:56:5e:3a:ab:70:61:c2:b8: d1:57:4d:38:22:65:c4:d9:88:fc:80:79:35:6c:68: 2a:f3:1a:4f:e0:77:6c:d7:c7:42:b4:1a:6c:f6:12: 62:43:e7:e9:9c:b4:6e:8a:0f:8b:58:84:e3:e7:a1: 55:ee:5f:3f:6f:77:d3:11:b4:99:2d:73:dc:03:9d: 76:17:1d:fd:4e:0c:02:4a:15:e1:4c:27:47:61:9c: c1:67:30:68:11:e0:48:5a:7a:c1:f8:29:97:66:81: 2f:10:84:08:4a:66:64:65:d5:19:25:bd:67:9c:ac: 09:66:8c:67:75:e3:0d:8d:37:75:92:44:04:0e:0b: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:B7:5C:83:86:07:DC:DC:60:98:53:D8:66:38:9D:5A:42:81:2E X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:cc:df:c1:70:cf:5c:09:e7:69:aa:cf:62:34:87:6d:c8:dd: 35:09:04:92:2f:88:5d:d3:9e:dd:04:38:01:e9:94:e9:1d:07: 4c:17:88:ed:a9:4b:70:95:71:d4:e0:26:85:ee:d6:76:df:14: ac:05:3f:03:9e:9f:d6:62:4b:50:d3:da:89:63:77:2e:d8:bb: c0:8c:01:5a:50:30:5c:d3:c8:14:5f:32:01:ce:6a:ba:d2:22: a6:f6:1d:fe:c0:37:08:b0:65:9c:14:1c:99:7b:a0:8a:0d:0b: 7e:07:44:10:36:6e:b2:6e:69:7f:38:91:e4:3b:35:bf:24:62: 92:43:29:f4:95:a3:16:84:04:d1:63:fc:01:8c:2a:f8:1a:79: 7d:c0:a5:c6:ab:2c:22:ee:cc:2f:7b:7d:7a:3d:bf:fc:65:23: 20:af:7e:bb:dc:df:a8:4e:12:e1:29:6e:04:df:b9:d4:cc:d9: 88:c6:2a:fd:b7:f9:70:ba:ef:ef:dc:8b:3d:c2:10:6f:fe:82: 1a:a6:64:08:f4:6e:60:56:f4:f0:2c:fe:5b:20:63:12:e9:f8: b5:56:de:72:00:9c:49:21:de:4f:05:b4:f3:f6:66:3b:cc:1d: d5:2e:49:78:43:9c:4f:01:5e:41:da:d1:95:a7:17:09:09:8e: 2b:d4:1d:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjQwNjAxMDc0NjQwWhcNMjQwNjA4MDc0NjQwWjAYMRYwFAYD VQQDEw02NjVhZDFlMS02ODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlGN0uyCH/FecL5xBFsFFXmV5VKxlYxJdq7WmwjnsqwdamGuElwW1puCW88P 4rBTdlIXoW7O/0u8kLxNOTyNakWiwh/u8KN3uRFZhA38/EE82Vo9rkf1Jvt6dtbT 2nDoDBBiT6HeBx9OJdPwT/32n55bajvY9rLzG2tlL/1mVl46q3BhwrjRV004ImXE 2Yj8gHk1bGgq8xpP4Hds18dCtBps9hJiQ+fpnLRuig+LWITj56FV7l8/b3fTEbSZ LXPcA512Fx39TgwCShXhTCdHYZzBZzBoEeBIWnrB+CmXZoEvEIQISmZkZdUZJb1n nKwJZoxndeMNjTd1kkQEDguXpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKDt1yD hgfc3GCYU9hmOJ1aQoEuMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtzN/BcM9cCedpqs9iNIdtyN01CQSSL4hd057dBDgB6ZTpHQdMF4jt qUtwlXHU4CaF7tZ23xSsBT8Dnp/WYktQ09qJY3cu2LvAjAFaUDBc08gUXzIBzmq6 0iKm9h3+wDcIsGWcFByZe6CKDQt+B0QQNm6ybml/OJHkOzW/JGKSQyn0laMWhATR Y/wBjCr4Gnl9wKXGqywi7swve316Pb/8ZSMgr3673N+oThLhKW4E37nUzNmIxir9 t/lwuu/v3Is9whBv/oIapmQI9G5gVvTwLP5bIGMS6fi1Vt5yAJxJId5PBbTz9mY7 zB3VLkl4Q5xPAV5B2tGVpxcJCY4r1B13 -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:38 2024 by rpki-client on console-fra.rpki-client.org