$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft File: ZuovNzZ54cNDDifZXhX6MvqNSu8.mft (raw, json) Hash identifier: /yYww3fJJ62eQjRLScHT9tl6hqhiPR/Lz/ZFbuw71kk= Subject key identifier: 52:8A:72:2C:D5:26:69:4C:4E:0E:42:9A:FB:CA:BB:64:52:0D:A7:40 Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft Manifest number: 0CF9 Signing time: Sat 04 May 2024 18:54:38 +0000 Manifest this update: Sat 04 May 2024 18:54:38 +0000 Manifest next update: Sat 11 May 2024 18:54:38 +0000 Files and hashes: 1: ZuovNzZ54cNDDifZXhX6MvqNSu8.crl (hash: n/1rlK4LKzHkKVE+Qq+HvvDPoLcvUY1d0qilJE+06FI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: May 4 18:54:38 2024 GMT Not After : May 11 18:54:38 2024 GMT Subject: CN=6636846e-4361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:61:ed:86:3b:8e:02:9a:1c:7c:6b:8a:27: 1d:a6:10:5d:9d:62:7b:7b:e8:2b:31:3c:53:90:05: d5:81:1f:a6:c8:07:9e:79:dc:cd:4b:07:18:7c:78: b0:65:39:ac:62:bf:32:e9:da:3b:cd:10:37:da:47: 80:8c:9d:29:1b:f6:d8:d1:96:40:ff:33:8b:e8:14: 05:8a:7e:ea:35:36:52:79:9c:11:80:f1:01:07:85: b3:a0:3a:26:7f:51:40:eb:a2:da:1a:e5:07:0c:1e: c8:db:fc:d1:2c:9c:c9:a3:69:a9:98:26:6a:b2:23: b5:8f:a2:32:af:2e:0c:6b:86:40:36:25:29:41:92: b4:fb:db:f6:98:68:cd:d1:fe:f2:ac:3c:3c:ef:5b: ff:53:36:ae:1f:5a:a1:31:e4:e5:5e:2a:12:9a:69: d1:87:b1:cf:01:76:83:b1:c0:5d:4f:b6:72:3e:92: 4c:be:21:73:a8:05:b2:c3:d6:7a:8b:f8:de:90:b2: 51:86:c4:e5:1d:78:0a:56:51:0b:33:1e:74:15:96: 4d:3b:3d:74:95:ba:57:7b:0a:e8:f6:61:e4:45:ab: 1f:45:a1:b5:80:74:65:34:85:bb:33:57:ff:24:d7: 9f:9a:47:e9:ff:54:bf:13:02:a7:e5:18:dd:59:45: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8A:72:2C:D5:26:69:4C:4E:0E:42:9A:FB:CA:BB:64:52:0D:A7:40 X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:4f:9e:49:b7:6e:49:0f:60:91:63:bc:9b:0f:fb:08:ae:e4: 34:23:04:ab:cf:a9:6b:e4:2a:81:61:9b:1d:7c:24:46:3e:ca: 29:76:ba:1b:28:c3:cf:de:35:63:d4:4a:16:d2:10:e4:2b:51: d4:f2:0d:a6:4a:65:75:6d:ec:87:03:eb:5c:76:58:61:4d:82: d7:94:ca:cd:c7:a8:35:ae:64:bb:52:9f:53:d3:6d:07:85:62: af:21:fe:9d:6d:17:23:09:10:a3:69:65:71:8d:7c:65:52:fb: 99:1a:b4:1b:39:0a:fe:8f:4d:ac:37:9c:44:6e:e4:c4:1d:fc: 70:81:0c:de:c6:dc:a6:60:e8:90:68:f6:ac:96:64:ac:95:e7: d8:40:69:d8:2f:3f:e7:4e:60:3b:5d:2d:d5:99:9c:72:24:45: 65:27:ed:ed:2f:71:cb:23:ca:df:0f:e0:c2:84:bb:8d:cb:68: be:d4:f2:4a:61:53:2b:ef:b4:a3:1f:96:f7:60:52:e0:c2:93: ef:2e:6d:57:77:a7:c7:3b:92:e1:08:cf:51:23:0c:a6:2a:c4: 6c:c5:74:7e:32:f6:76:24:e3:2c:67:9d:0f:dd:0b:cf:18:dd: f7:e2:de:a1:4d:ba:c1:d7:54:8c:ab:f5:3d:38:99:50:dd:be: 9a:8d:75:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjQwNTA0MTg1NDM4WhcNMjQwNTExMTg1NDM4WjAYMRYwFAYD VQQDEw02NjM2ODQ2ZS00MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9Zh7YY7jgKaHHxriicdphBdnWJ7e+grMTxTkAXVgR+myAeeedzNSwcYfHiw ZTmsYr8y6do7zRA32keAjJ0pG/bY0ZZA/zOL6BQFin7qNTZSeZwRgPEBB4WzoDom f1FA66LaGuUHDB7I2/zRLJzJo2mpmCZqsiO1j6Iyry4Ma4ZANiUpQZK0+9v2mGjN 0f7yrDw871v/UzauH1qhMeTlXioSmmnRh7HPAXaDscBdT7ZyPpJMviFzqAWyw9Z6 i/jekLJRhsTlHXgKVlELMx50FZZNOz10lbpXewro9mHkRasfRaG1gHRlNIW7M1f/ JNefmkfp/1S/EwKn5RjdWUUJFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKKcizV JmlMTg5CmvvKu2RSDadAMB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUQ2QS83ODExNUY1RUI4QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRj TkREaWZaWGhYNk12cU5TdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeT55Jt25JD2CRY7ybD/sIruQ0IwSrz6lr5CqBYZsdfCRGPsopdrob KMPP3jVj1EoW0hDkK1HU8g2mSmV1beyHA+tcdlhhTYLXlMrNx6g1rmS7Up9T020H hWKvIf6dbRcjCRCjaWVxjXxlUvuZGrQbOQr+j02sN5xEbuTEHfxwgQzextymYOiQ aPaslmSslefYQGnYLz/nTmA7XS3VmZxyJEVlJ+3tL3HLI8rfD+DChLuNy2i+1PJK YVMr77SjH5b3YFLgwpPvLm1Xd6fHO5LhCM9RIwymKsRsxXR+MvZ2JOMsZ50P3QvP GN334t6hTbrB11SMq/U9OJlQ3b6ajXVE -----END CERTIFICATE-----Generated at Sat May 4 19:58:36 2024 by rpki-client on console-ams.rpki-client.org