$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: knrqvzVFT1DGTUh9z+SWL1qpBO9etaMHnEdokKRscfE= Subject key identifier: 5C:0E:A3:A9:33:68:D3:E1:EE:F3:C4:88:62:29:DC:D3:C5:75:0A:BF Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 12BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 129C Signing time: Sat 04 May 2024 17:46:22 +0000 Manifest this update: Sat 04 May 2024 17:46:21 +0000 Manifest next update: Sat 11 May 2024 17:46:21 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: SgRLQbc3vLGEWa7BWPYmE7kFZ9XSBe8gYVSLye5P+2g=) 2: 93FB97A64ABD11EC92951C1DC4F9AE02.roa (hash: NJqN8mNJT6pdgbBPNEHgwgtzCUZUCh7UJoaeWzVLJsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4797 (0x12bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: May 4 17:46:21 2024 GMT Not After : May 11 17:46:21 2024 GMT Subject: CN=6636746e-4669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:db:30:65:33:be:c1:10:80:4e:d7:07:a4: 65:65:06:7e:7f:80:05:05:4b:21:61:46:e8:e6:be: 5b:6e:18:3e:1f:05:3f:72:f4:f3:5f:e4:9b:cb:a7: 2b:2c:03:7d:07:2a:6b:c3:71:41:b5:aa:7d:d8:a7: 4b:66:8d:9f:d2:05:a9:b0:4b:8e:c4:2d:c8:af:fc: e4:89:26:b5:69:57:0d:2f:a2:ea:da:76:96:12:d8: 75:1b:b8:29:55:78:28:53:f0:71:de:17:8e:68:ab: 01:9f:8c:a4:aa:96:1a:2c:11:13:91:26:3b:06:5e: b2:2e:e0:c4:c9:75:77:80:70:b6:b4:4b:b9:33:f1: b5:12:7f:44:97:5c:93:cf:fe:6b:4f:46:8e:fe:b6: cc:80:4b:78:cd:66:08:78:0c:e8:61:40:57:ba:0f: ef:b1:46:44:40:64:c1:19:5a:98:c9:02:1c:29:9e: 23:0a:67:8b:a4:2a:2c:ca:7f:eb:43:9f:63:df:ad: 5c:1b:a9:28:df:0a:28:7b:3d:fb:93:c4:20:5d:b7: 1f:cd:e8:f5:1b:ca:32:f3:82:f6:be:4d:0a:d8:f9: 5c:a6:60:2e:fb:42:e2:e7:75:01:95:a3:43:c0:f7: 62:23:99:3e:35:80:32:9d:d7:7d:2d:d0:1a:0b:74: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:A3:A9:33:68:D3:E1:EE:F3:C4:88:62:29:DC:D3:C5:75:0A:BF X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:0c:05:46:b5:87:86:d4:ae:2f:03:c8:36:85:b5:d2:86: 6e:ba:4d:53:9c:cc:d8:fb:1f:bc:81:f7:6d:99:65:67:bb:e6: 4e:1f:68:f8:a0:2d:96:0a:d1:0c:47:80:99:a6:bb:26:11:c7: 94:8b:56:d1:da:02:c0:c0:a8:82:05:16:70:d3:b8:b7:c4:0c: 3b:e6:47:b6:a3:79:3e:16:5f:b7:36:d7:18:64:a2:a6:8d:66: ad:3a:c0:0c:69:33:11:9b:53:af:24:88:bf:55:ea:2e:3b:0e: 80:83:91:d6:47:bc:a5:48:6e:f6:cd:3a:df:d7:b1:1c:97:19: 99:b5:db:1d:17:32:07:0f:8f:cc:7c:92:d2:df:02:1b:61:67: e2:88:cd:7d:09:33:38:9b:10:be:3f:48:bf:ca:c8:85:2d:14: 1d:39:24:1d:a4:0c:19:ac:11:a3:3b:a2:87:be:a0:18:2f:a6: 55:b2:5e:e0:a2:2d:c9:86:3a:e7:b2:62:44:f1:0a:9d:51:51: 04:14:a2:86:66:d8:8b:8a:7d:16:f5:95:a6:3d:0c:8f:d0:4d: e4:53:f6:76:05:7c:b0:31:c7:06:cb:d1:fc:7e:5a:fe:33:bf: 62:cd:22:3d:00:02:38:98:f8:c4:5b:d2:f1:e8:48:8c:1b:15: 9e:07:b9:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjQwNTA0MTc0NjIxWhcNMjQwNTExMTc0NjIxWjAYMRYwFAYD VQQDEw02NjM2NzQ2ZS00NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ozbMGUzvsEQgE7XB6RlZQZ+f4AFBUshYUbo5r5bbhg+HwU/cvTzX+Sby6cr LAN9Byprw3FBtap92KdLZo2f0gWpsEuOxC3Ir/zkiSa1aVcNL6Lq2naWEth1G7gp VXgoU/Bx3heOaKsBn4ykqpYaLBETkSY7Bl6yLuDEyXV3gHC2tEu5M/G1En9El1yT z/5rT0aO/rbMgEt4zWYIeAzoYUBXug/vsUZEQGTBGVqYyQIcKZ4jCmeLpCosyn/r Q59j361cG6ko3wooez37k8QgXbcfzej1G8oy84L2vk0K2PlcpmAu+0Li53UBlaND wPdiI5k+NYAyndd9LdAaC3Si/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwOo6kz aNPh7vPEiGIp3NPFdQq/MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLJwwFRrWHhtSuLwPINoW10oZuuk1TnMzY+x+8gfdtmWVnu+ZOH2j4 oC2WCtEMR4CZprsmEceUi1bR2gLAwKiCBRZw07i3xAw75ke2o3k+Fl+3NtcYZKKm jWatOsAMaTMRm1OvJIi/VeouOw6Ag5HWR7ylSG72zTrf17EclxmZtdsdFzIHD4/M fJLS3wIbYWfiiM19CTM4mxC+P0i/ysiFLRQdOSQdpAwZrBGjO6KHvqAYL6ZVsl7g oi3JhjrnsmJE8QqdUVEEFKKGZtiLin0W9ZWmPQyP0E3kU/Z2BXywMccGy9H8flr+ M79izSI9AAI4mPjEW9Lx6EiMGxWeB7kJ -----END CERTIFICATE-----Generated at Sat May 4 19:58:36 2024 by rpki-client on console-ams.rpki-client.org