$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: z4E5P7dkCEqnB8xaMucwGVNMfalPKwW358Y8Pfahv4Y= Subject key identifier: AA:19:42:9F:78:78:6D:DA:A1:FD:46:BC:E0:1B:2D:CE:03:42:C5:A2 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: C4 Signing time: Sun 05 May 2024 06:32:30 +0000 Manifest this update: Sun 05 May 2024 06:32:30 +0000 Manifest next update: Sun 12 May 2024 06:32:30 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: 1Fn9902yzJHPGjJjKnWyDtzB9c5lD5kjqOApjjoLZtA=) 2: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: ssaH/8SpdKsqdDitk2qgJT2SCDl83tgdMRPI1+sqRAs=) 3: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: dISoXNe9nLBdGWh2sRce7YSRAKbxZcsrgrZkFUMnVC8=) 4: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: 5gugZWMlRWcGfURdlEL7v6YlsC8vwoJfNVXYniet7Tw=) 5: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: ekxizC7WQ9qSzs8VkX6MZRNz8zMiiZpIlp77LCKctNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: May 5 06:32:30 2024 GMT Not After : May 12 06:32:30 2024 GMT Subject: CN=663727fe-c13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:3a:d9:e8:bf:33:76:07:03:ac:c2:f4:9d: c6:1e:c7:b5:ab:b8:b5:16:84:b2:97:74:33:2e:1c: ad:a3:42:37:2b:32:33:0f:0c:e0:d7:ee:4c:64:d6: 26:fc:d2:85:63:d8:3e:0f:8a:79:29:9b:2d:eb:4e: 40:4e:57:e7:f0:b6:6f:30:7e:94:e9:86:a8:f8:03: ad:89:49:79:29:b7:d9:55:6a:e8:c6:57:42:5d:ec: d8:0f:5a:f5:c3:ef:0a:86:b8:84:e9:7e:63:21:f5: 51:24:ac:53:48:21:9c:7d:3b:12:d8:b9:c6:da:4e: 2b:3b:fa:30:5f:1f:fc:f0:e7:33:ce:32:2d:27:6f: 7f:1d:14:8d:3d:a4:6a:2c:e0:c8:84:71:dc:f4:8c: 7a:dd:3b:75:19:27:20:85:98:74:56:c1:cf:d5:b4: b6:e7:c8:9d:67:25:89:38:cc:9e:db:9d:00:a8:3d: 58:48:ca:aa:0d:68:bc:b0:36:3b:2d:a0:6b:db:49: 87:12:7d:d1:06:0e:ce:3a:9a:65:4b:e4:e0:14:2c: a5:c9:46:d1:67:40:e2:e7:eb:07:b1:89:7c:b1:dd: 30:27:d4:81:1e:01:2d:b9:c4:60:2a:3c:95:6a:bb: 48:6d:3f:34:7b:da:12:f4:89:f3:14:bb:f3:15:f4: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:19:42:9F:78:78:6D:DA:A1:FD:46:BC:E0:1B:2D:CE:03:42:C5:A2 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0e:ef:07:5d:5a:1d:c2:14:75:de:85:43:e4:37:ef:7f:f9: 70:89:8f:bc:fb:34:a0:74:fa:9b:23:02:0d:20:69:d0:fc:93: eb:b6:a6:30:66:86:2a:55:84:79:05:c4:7f:54:ec:6d:cb:b4: 4b:f8:2b:8b:00:53:4e:df:dd:a3:90:a2:c4:a7:80:94:c1:37: 30:44:5b:d4:e4:ff:9b:46:10:31:82:2a:3e:b8:fa:2b:89:39: b7:db:ab:cf:1f:4d:cd:43:0f:dd:1b:5e:e0:a8:be:cd:15:09: d6:55:74:c9:14:2f:67:aa:7f:88:63:a8:64:54:14:f0:bb:4a: 23:23:f4:f0:08:50:91:a5:63:9e:72:5a:eb:9a:69:b5:8d:c4: 49:7c:bd:b1:aa:ca:03:e8:be:50:49:5c:b9:c9:76:87:65:57: 0f:ee:84:43:03:e8:79:c2:2f:be:e3:82:11:de:88:2d:af:4c: 1a:b0:ec:87:82:76:b7:7c:41:8d:b9:81:df:85:f0:36:62:01: e7:d0:a1:9e:09:98:21:a9:c4:b9:f0:b1:26:46:f1:89:81:a6: 63:2a:b1:31:bc:98:de:69:82:1c:64:b0:0f:42:96:d3:d5:b4: 52:ce:02:14:cb:c2:c9:f0:bf:66:7d:b0:be:00:7d:64:29:a8: 0b:c4:22:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjQwNTA1MDYzMjMwWhcNMjQwNTEyMDYzMjMwWjAYMRYwFAYD VQQDEw02NjM3MjdmZS1jMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OU62ei/M3YHA6zC9J3GHse1q7i1FoSyl3QzLhyto0I3KzIzDwzg1+5MZNYm /NKFY9g+D4p5KZst605ATlfn8LZvMH6U6Yao+AOtiUl5KbfZVWroxldCXezYD1r1 w+8KhriE6X5jIfVRJKxTSCGcfTsS2LnG2k4rO/owXx/88OczzjItJ29/HRSNPaRq LODIhHHc9Ix63Tt1GScghZh0VsHP1bS258idZyWJOMye250AqD1YSMqqDWi8sDY7 LaBr20mHEn3RBg7OOpplS+TgFCylyUbRZ0Di5+sHsYl8sd0wJ9SBHgEtucRgKjyV artIbT80e9oS9InzFLvzFfSDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoZQp94 eG3aof1GvOAbLc4DQsWiMB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuDu8HXVodwhR13oVD5Dfvf/lwiY+8+zSgdPqbIwINIGnQ/JPrtqYw ZoYqVYR5BcR/VOxty7RL+CuLAFNO392jkKLEp4CUwTcwRFvU5P+bRhAxgio+uPor iTm326vPH03NQw/dG17gqL7NFQnWVXTJFC9nqn+IY6hkVBTwu0ojI/TwCFCRpWOe clrrmmm1jcRJfL2xqsoD6L5QSVy5yXaHZVcP7oRDA+h5wi++44IR3ogtr0wasOyH gna3fEGNuYHfhfA2YgHn0KGeCZghqcS58LEmRvGJgaZjKrExvJjeaYIcZLAPQpbT 1bRSzgIUy8LJ8L9mfbC+AH1kKagLxCLJ -----END CERTIFICATE-----Generated at Sun May 5 08:38:58 2024 by rpki-client on console-fra.rpki-client.org