$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: PUJLySZ9jssVQTVbFwbEylmlb91tWff8F8zViAYacY0= Subject key identifier: 1B:2A:E5:42:6A:9D:10:1A:1F:39:A5:7E:E9:A7:B5:0F:56:EF:81:7C Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 10C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 10BC Signing time: Sat 18 May 2024 17:54:39 +0000 Manifest this update: Sat 18 May 2024 17:54:39 +0000 Manifest next update: Sat 25 May 2024 17:54:39 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: DmkuLJ5ULcWJiwYm7qrEIvZUIeRw5OOi33Pt2J/sXEk=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: leXjljNrFgUPywu1Fh/An2qOclMc2UjOvRA+isA8p/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4292 (0x10c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: May 18 17:54:39 2024 GMT Not After : May 25 17:54:39 2024 GMT Subject: CN=6648eb5f-5d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:1e:7b:4a:28:10:a4:0c:3c:82:2d:36:09: 07:9b:4c:f1:60:99:cf:dc:89:39:ad:d8:11:fd:73: d8:22:94:86:16:e8:d4:f7:cf:73:3a:d1:ef:9c:38: 0a:97:7e:31:44:13:a0:12:e3:19:ac:31:70:16:ba: 5e:41:ac:5b:8f:9b:49:2f:6a:8a:14:50:3c:0b:ac: 71:dc:b3:d7:fb:55:ce:b8:d6:0d:8a:dd:d2:c4:56: c3:b9:20:49:7d:33:3b:03:7d:45:99:9d:79:c4:6a: b3:ab:f2:b5:50:24:1c:3c:7a:a0:80:72:85:74:58: 11:c9:90:1a:f0:35:29:c5:87:0b:34:bf:41:eb:24: 3f:e0:4b:9e:c1:62:a0:7f:22:ba:25:a1:10:a2:96: e0:09:34:10:f0:5a:de:a7:3b:fa:62:26:33:63:85: 55:a9:3d:f6:d3:c7:18:b9:4f:ce:11:f3:ec:f5:40: e7:3e:ed:50:d9:44:35:ad:72:16:76:36:10:e2:b1: a4:09:8d:44:12:b2:a8:bd:7a:40:d2:5f:5b:7a:ac: a3:93:02:35:6a:81:da:a0:c9:36:17:18:f7:1c:fb: 51:ae:a7:85:4e:eb:a8:51:72:19:e0:0c:5a:c5:ef: 96:5d:02:a9:eb:61:91:3d:cb:8f:e6:a5:31:85:06: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:E5:42:6A:9D:10:1A:1F:39:A5:7E:E9:A7:B5:0F:56:EF:81:7C X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:22:e1:39:a8:e8:fa:51:fb:ca:3d:5b:c5:88:e4:92:21:50: 10:d3:6b:72:3b:a5:cd:84:d2:f9:62:87:e7:53:55:75:67:1f: 38:a7:f0:84:19:38:f7:0b:ac:83:50:1b:07:58:22:9d:8b:23: 20:8d:61:17:14:4f:84:21:64:54:45:cf:51:b7:03:1d:89:f9: 4f:af:d5:64:69:a8:af:80:1a:88:05:be:3b:29:b3:b6:3b:4a: 74:56:f7:fa:36:b7:2e:c9:01:d5:d8:31:a7:8d:0d:ba:46:3b: 8c:7d:96:43:06:48:4f:41:8c:a7:45:52:70:c9:b1:cc:e0:e6: 2b:e8:ba:db:5d:31:71:da:b5:fc:1d:51:58:14:b8:2d:fe:3e: aa:2b:0f:f2:90:1b:f8:ff:fd:a9:5e:bb:95:5a:50:c8:1e:df: 70:a7:9d:82:3b:fd:af:82:ed:81:1b:ca:27:f0:e5:31:3b:50: 7c:5f:38:c2:e3:c9:20:d3:96:4b:45:a1:74:9f:bd:b0:63:7f: 66:68:43:f7:e9:cb:20:b0:23:f0:00:23:40:9b:b2:62:36:65: 27:51:f0:ed:45:45:02:eb:4a:b4:f9:17:62:46:09:99:9b:dc: 83:4c:5f:54:47:2c:4f:6d:00:c2:a6:9f:db:96:50:91:ff:8c: 74:61:9b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjQwNTE4MTc1NDM5WhcNMjQwNTI1MTc1NDM5WjAYMRYwFAYD VQQDEw02NjQ4ZWI1Zi01ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrUee0ooEKQMPIItNgkHm0zxYJnP3Ik5rdgR/XPYIpSGFujU989zOtHvnDgK l34xRBOgEuMZrDFwFrpeQaxbj5tJL2qKFFA8C6xx3LPX+1XOuNYNit3SxFbDuSBJ fTM7A31FmZ15xGqzq/K1UCQcPHqggHKFdFgRyZAa8DUpxYcLNL9B6yQ/4EuewWKg fyK6JaEQopbgCTQQ8Frepzv6YiYzY4VVqT3208cYuU/OEfPs9UDnPu1Q2UQ1rXIW djYQ4rGkCY1EErKovXpA0l9beqyjkwI1aoHaoMk2Fxj3HPtRrqeFTuuoUXIZ4Axa xe+WXQKp62GRPcuP5qUxhQZbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsq5UJq nRAaHzmlfumntQ9W74F8MB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+IuE5qOj6UfvKPVvFiOSSIVAQ02tyO6XNhNL5YofnU1V1Zx84p/CE GTj3C6yDUBsHWCKdiyMgjWEXFE+EIWRURc9RtwMdiflPr9VkaaivgBqIBb47KbO2 O0p0Vvf6NrcuyQHV2DGnjQ26RjuMfZZDBkhPQYynRVJwybHM4OYr6LrbXTFx2rX8 HVFYFLgt/j6qKw/ykBv4//2pXruVWlDIHt9wp52CO/2vgu2BG8on8OUxO1B8XzjC 48kg05ZLRaF0n72wY39maEP36csgsCPwACNAm7JiNmUnUfDtRUUC60q0+RdiRgmZ m9yDTF9URyxPbQDCpp/bllCR/4x0YZuI -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org