$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json) Hash identifier: 0p0rXUF9KV+8HpadLj7D9aLazXNLycKhfotdPyL1Dic= Subject key identifier: 6C:B8:B8:B9:8D:B9:F9:4E:E1:FF:37:91:E0:87:9C:DE:DF:5B:B3:FB Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Certificate issuer: /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft Manifest number: 0111 Signing time: Sat 27 Apr 2024 05:15:49 +0000 Manifest this update: Sat 27 Apr 2024 05:15:48 +0000 Manifest next update: Sat 04 May 2024 05:15:48 +0000 Files and hashes: 1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: MgENnFla+X145KDSvrvaUjgFghIii3nXypgSoJ6GBOE=) 2: FEFB8698666C11EE99E97C1CC4F9AE02.roa (hash: 176XxzfzBjk8/c0cHQLL3AuB2K5c8na4rKzTdeIsnp8=) 3: 671373E6666B11EEAB1E227CC4F9AE02.roa (hash: BosxTod83Vng94xa6eeQRzzAw/qSDphDhDUbbXlhl0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Validity Not Before: Apr 27 05:15:48 2024 GMT Not After : May 4 05:15:48 2024 GMT Subject: CN=662c8a04-cba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:f6:09:59:26:ff:84:12:b7:84:4d:bd:92: 54:c5:e5:79:bf:97:e4:a3:aa:2a:9a:82:8f:af:ef: 15:6d:a3:36:aa:08:f9:c5:8c:7e:ce:db:07:02:7b: e0:a6:f3:72:88:4e:f6:60:c8:9a:1b:b2:19:fe:8e: b9:b6:c5:84:5b:2e:ca:a1:b4:b7:05:32:fc:ef:40: f8:ea:c4:83:d5:76:1c:63:20:77:25:c3:77:de:43: bf:fe:21:4d:38:1a:5e:27:ca:9e:2b:ee:d0:7b:f1: 1d:b4:35:00:a2:c0:a3:30:29:c5:64:08:ac:d7:16: c4:2a:c3:8c:7b:98:e2:51:d8:14:b7:fb:a4:b5:68: 6a:8e:09:5a:99:d2:6b:37:12:ff:7e:dc:82:51:f2: 57:a0:ed:e1:5a:d3:d7:d8:95:88:77:ec:05:ee:c7: 82:19:2e:74:d8:19:c1:bd:c1:9f:aa:af:38:24:01: 33:78:98:eb:9c:94:db:63:ac:47:6b:be:92:17:a4: 8a:9b:32:48:66:a8:49:e1:db:5d:0a:5f:3b:41:f9: 98:2f:0b:db:7e:05:32:98:a8:13:77:4b:af:0e:32: ca:48:5c:0e:3e:81:55:ce:6e:de:c5:04:15:51:bf: f6:1d:bf:e1:8a:8b:bb:c1:2c:26:f6:a2:a1:c2:7d: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B8:B8:B9:8D:B9:F9:4E:E1:FF:37:91:E0:87:9C:DE:DF:5B:B3:FB X509v3 Authority Key Identifier: keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e1:61:3c:23:26:1d:ac:46:15:d1:79:b0:eb:b2:1c:20:54: e1:66:10:0d:d3:c1:37:48:9c:23:e2:dd:68:73:43:84:db:16: 2f:f4:14:c1:01:e6:88:41:fc:ce:44:aa:de:d3:14:e7:e9:97: a4:99:c0:25:67:ee:7b:af:e2:49:03:19:59:ab:9d:1e:d5:f3: 77:3d:a9:0c:34:f6:1e:a6:e9:7d:6b:f3:09:1a:a0:af:fb:e6: cd:ff:bf:0d:08:52:cc:28:9b:f7:3a:c2:a0:30:b6:84:ac:3d: 94:ec:6d:2e:e5:ef:9f:cf:00:97:b0:98:dc:a5:11:39:04:37: 86:49:e3:a1:e0:ab:3f:5a:ee:86:e2:c0:66:86:c5:d2:0b:ee: bd:3d:30:4b:a3:88:ee:08:5b:1d:c0:d5:0b:c7:e4:d2:0a:49: 6f:6d:e0:ca:50:40:fe:f8:8d:9c:4d:95:ca:a2:dd:6b:e1:16: 57:76:59:45:99:e5:2e:9b:74:0b:46:01:e4:65:5e:61:d1:dc: f7:ba:2b:db:12:61:84:79:e7:23:6b:79:3b:0a:d7:01:42:8a: fe:0d:92:24:7c:56:ca:19:2d:4a:ef:ec:f2:28:e8:84:45:47: de:02:a1:9f:68:2f:f5:70:e2:6d:ca:ea:69:c3:e3:4d:41:4d: f3:c8:b2:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQzNTJDRkM1NDNE NjVEMUI2MEUwHhcNMjQwNDI3MDUxNTQ4WhcNMjQwNTA0MDUxNTQ4WjAYMRYwFAYD VQQDEw02NjJjOGEwNC1jYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkD2CVkm/4QSt4RNvZJUxeV5v5fko6oqmoKPr+8VbaM2qgj5xYx+ztsHAnvg pvNyiE72YMiaG7IZ/o65tsWEWy7KobS3BTL870D46sSD1XYcYyB3JcN33kO//iFN OBpeJ8qeK+7Qe/EdtDUAosCjMCnFZAis1xbEKsOMe5jiUdgUt/uktWhqjglamdJr NxL/ftyCUfJXoO3hWtPX2JWId+wF7seCGS502BnBvcGfqq84JAEzeJjrnJTbY6xH a76SF6SKmzJIZqhJ4dtdCl87QfmYLwvbfgUymKgTd0uvDjLKSFwOPoFVzm7exQQV Ub/2Hb/hiou7wSwm9qKhwn06KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy4uLmN uflO4f83keCHnN7fW7P7MB8GA1UdIwQYMBaAFGRFI35W7olEK/MUNSz8VD1l0bYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUFDOC9CQTZEMjdENDZD NUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlVUXI4eFExTFB4VVBXWFJ0 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFVWpmbGJ1aVVRcjh4UTFMUHhVUFdYUnRnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxidWlV UXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC4WE8IyYdrEYV0Xmw67IcIFThZhAN08E3SJwj4t1oc0OE2xYv9BTB AeaIQfzORKre0xTn6ZekmcAlZ+57r+JJAxlZq50e1fN3PakMNPYepul9a/MJGqCv ++bN/78NCFLMKJv3OsKgMLaErD2U7G0u5e+fzwCXsJjcpRE5BDeGSeOh4Ks/Wu6G 4sBmhsXSC+69PTBLo4juCFsdwNULx+TSCklvbeDKUED++I2cTZXKot1r4RZXdllF meUum3QLRgHkZV5h0dz3uivbEmGEeecja3k7CtcBQor+DZIkfFbKGS1K7+zyKOiE RUfeAqGfaC/1cOJtyuppw+NNQU3zyLJr -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:24 2024 by rpki-client on console-ams.rpki-client.org