$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft File: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft (raw, json) Hash identifier: iMzyNyjYNsraYnzzO39uMOOR5chpw+rYVsmQDa8SJBY= Subject key identifier: A0:6D:29:6B:8E:09:E3:48:36:F7:B3:39:43:BE:2A:D3:40:D0:4D:F4 Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft Manifest number: 057F Signing time: Fri 03 May 2024 00:45:18 +0000 Manifest this update: Fri 03 May 2024 00:45:18 +0000 Manifest next update: Fri 10 May 2024 00:45:18 +0000 Files and hashes: 1: zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl (hash: HSmw+6IRku8CDTZSO/TpUo3HmThOaoDneMV01/J3lnY=) 2: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (hash: 7IAANyxDEmXIqjlkqfFbwfy+0yhpr6NgG5FWwa4XecI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084 Validity Not Before: May 3 00:45:18 2024 GMT Not After : May 10 00:45:18 2024 GMT Subject: CN=6634339e-fdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:ec:a1:cc:87:42:02:b9:89:66:44:47:d4: e6:60:86:e4:26:29:e0:bf:fc:7c:c8:cf:2b:de:4f: d1:bd:b4:0f:63:fe:f9:bd:61:20:1a:eb:8e:25:41: b5:1d:5f:1c:8e:a3:42:a6:01:62:d0:5d:9a:2d:12: 00:9c:e8:ea:2d:b6:fc:d8:e4:11:ee:52:f5:0e:7c: 5e:2a:3e:d0:e7:2f:5f:27:ec:45:3f:bc:d0:2e:3c: bd:d1:f9:e2:28:9f:0b:c7:ea:d5:e2:86:dc:cd:82: 30:98:af:97:3a:c7:ba:ad:dc:7e:cf:7a:fc:6a:98: 91:7d:4a:4c:e6:0f:d5:df:53:00:f8:b1:c0:75:07: 24:57:ad:e5:a4:fe:fc:af:72:fc:9c:86:88:20:01: 19:66:16:39:71:6a:26:a9:22:e7:20:a2:1f:c6:d2: 36:9a:3e:b2:e6:a5:f9:e9:23:9f:ae:b7:0b:a1:9d: 0b:c4:26:27:d2:18:ed:98:82:90:8a:5c:d0:97:a4: 21:db:42:1c:e5:42:7e:fa:62:84:d6:00:d9:8f:eb: 35:9f:03:45:02:65:84:ce:bd:93:13:2a:88:63:a8: ac:c7:e7:57:04:ea:f4:ba:29:a5:ca:64:a5:84:51: 52:73:e6:f3:23:ba:a2:b4:0d:26:ba:24:62:0e:42: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:29:6B:8E:09:E3:48:36:F7:B3:39:43:BE:2A:D3:40:D0:4D:F4 X509v3 Authority Key Identifier: keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6f:ff:3f:27:4f:41:66:19:0c:3f:87:0d:e4:72:89:53:9e: 16:87:e5:7d:4e:3d:17:3e:d8:56:8f:f1:33:14:12:f7:07:fc: 31:5e:7b:13:99:0a:83:09:66:ac:1f:ba:2a:b1:16:7a:0a:07: 34:23:53:7a:73:b3:f9:95:32:c3:50:7c:ce:68:2c:f8:7e:f5: b9:60:af:ac:d9:b0:99:2b:dc:d4:1b:79:d8:88:7e:f7:2d:74: 93:75:00:f1:24:5e:dc:9b:a8:b4:30:0d:9c:6f:6a:26:4b:61: 1c:f8:b5:ce:40:4b:d0:86:b9:f8:89:73:15:98:af:14:6e:25: 6d:70:4f:68:ed:1f:d9:af:91:3e:9e:22:13:8e:56:0f:78:bf: 71:57:5a:f6:5b:51:ba:ab:d6:c0:7f:af:53:82:91:95:d8:ea: de:89:64:1e:44:ec:0a:ed:34:30:7d:53:7f:83:7e:96:46:49: 60:84:3e:e8:76:12:a5:07:6b:ca:5b:c0:a3:c9:f3:e7:df:32: f8:c6:11:14:61:04:c8:18:da:cb:22:fd:dc:ee:e4:0c:e2:a5: f7:21:0f:a2:cb:a6:5f:58:e4:d4:b1:21:69:b8:99:2e:43:4f: 10:fb:42:5b:f6:31:0c:48:4c:5b:0f:af:f3:5b:fc:b0:c6:c4: 36:d4:7f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0MDcxMTAvBgNVBAUTKENGMjE1MjZEOTI2Q0I4MzIzNzRDOEU5QkQ1Q0UxRDVC QkNENjYwODQwHhcNMjQwNTAzMDA0NTE4WhcNMjQwNTEwMDA0NTE4WjAYMRYwFAYD VQQDEw02NjM0MzM5ZS1mZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxrsocyHQgK5iWZER9TmYIbkJingv/x8yM8r3k/RvbQPY/75vWEgGuuOJUG1 HV8cjqNCpgFi0F2aLRIAnOjqLbb82OQR7lL1DnxeKj7Q5y9fJ+xFP7zQLjy90fni KJ8Lx+rV4obczYIwmK+XOse6rdx+z3r8apiRfUpM5g/V31MA+LHAdQckV63lpP78 r3L8nIaIIAEZZhY5cWomqSLnIKIfxtI2mj6y5qX56SOfrrcLoZ0LxCYn0hjtmIKQ ilzQl6Qh20Ic5UJ++mKE1gDZj+s1nwNFAmWEzr2TEyqIY6isx+dXBOr0uimlymSl hFFSc+bzI7qitA0muiRiDkK0ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBtKWuO CeNINvezOUO+KtNA0E30MB8GA1UdIwQYMBaAFM8hUm2SbLgyN0yOm9XOHVu81mCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjQwNy85MDBERkY1RTkw NTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VESTNUSTZiMWM0ZFc3eldZ SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p5RlNiWkpzdURJM1RJNmIxYzRkVzd6V1lJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjQwNy85MDBERkY1RTkwNTkxMUVCOEYxRUVFMTBDNEY5QUUwMi96eUZTYlpKc3VE STNUSTZiMWM0ZFc3eldZSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMb/8/J09BZhkMP4cN5HKJU54Wh+V9Tj0XPthWj/EzFBL3B/wxXnsT mQqDCWasH7oqsRZ6Cgc0I1N6c7P5lTLDUHzOaCz4fvW5YK+s2bCZK9zUG3nYiH73 LXSTdQDxJF7cm6i0MA2cb2omS2Ec+LXOQEvQhrn4iXMVmK8UbiVtcE9o7R/Zr5E+ niITjlYPeL9xV1r2W1G6q9bAf69TgpGV2OreiWQeROwK7TQwfVN/g36WRklghD7o dhKlB2vKW8CjyfPn3zL4xhEUYQTIGNrLIv3c7uQM4qX3IQ+iy6ZfWOTUsSFpuJku Q08Q+0Jb9jEMSExbD6/zW/ywxsQ21H+M -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org