$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft File: ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json) Hash identifier: jP1aM+er4nmX95zRD7Rseb0c7hnwQOhznqFQTiyPWZA= Subject key identifier: B8:56:8D:00:65:9B:61:0C:B6:B8:B6:8A:70:87:21:27:49:3C:45:E2 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 130D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft Manifest number: 1307 Signing time: Sun 02 Jun 2024 17:46:27 +0000 Manifest this update: Sun 02 Jun 2024 17:46:27 +0000 Manifest next update: Sun 09 Jun 2024 17:46:27 +0000 Files and hashes: 1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: Dh65eg2Chj+mK9/3cztS4OWt1nmN3DUOzpPBL/CQht0=) 2: A59866188BC311E88445685EC4F9AE02.roa (hash: J9ajkTaYqezIeaNs7eYGRpmvAQOOOlArusJ32UqKipw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4877 (0x130d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Jun 2 17:46:27 2024 GMT Not After : Jun 9 17:46:27 2024 GMT Subject: CN=665caff3-730d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:da:06:c0:09:69:7d:05:3c:3c:04:64:f7: 63:b9:9b:ba:7c:48:60:07:4f:8f:03:6e:6d:41:50: dc:7e:ca:24:32:12:c9:4c:05:15:de:12:02:18:c1: 85:89:a7:cd:ab:6d:dd:2d:c0:65:87:20:4e:34:70: eb:3b:8b:a8:06:fc:91:28:43:f9:8a:ec:7e:42:2f: c4:1a:37:50:3e:e4:9a:fb:51:31:fa:58:a6:b8:38: b7:f3:25:3a:04:58:0f:72:9f:3b:33:f0:aa:c8:75: 3f:7d:46:16:16:ae:48:e3:fb:04:c3:d9:10:e1:31: 2c:a8:48:a0:17:87:e4:f2:51:01:d6:05:cf:db:0b: 75:ff:e0:e8:56:53:a7:52:8a:1f:19:3a:21:5f:30: 17:ad:56:41:5d:fd:63:e9:0d:21:1f:38:69:fe:ff: a5:4f:bb:2a:9e:6c:53:4f:4f:4e:2c:dc:87:a9:14: 0e:a6:58:d7:1e:b8:01:6b:b8:9b:8a:8d:37:65:73: d6:89:10:b0:c4:c4:ad:15:57:f6:62:91:8a:09:44: 87:ec:c8:42:6a:66:9f:da:4f:26:7d:e2:d7:5b:cb: cc:6a:e3:04:58:a1:c6:7b:49:5e:ab:22:ad:4c:dc: 53:f2:08:ed:87:7e:77:22:04:58:7c:70:37:20:64: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:56:8D:00:65:9B:61:0C:B6:B8:B6:8A:70:87:21:27:49:3C:45:E2 X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7b:0a:3e:5d:81:f4:7f:98:18:01:13:bc:2a:af:ca:0c:27: bc:f5:c2:31:3a:5f:b0:bb:33:4d:f5:79:da:7d:9a:64:7d:6e: e6:42:d6:08:3d:46:d4:91:4f:8e:67:5f:2f:0f:46:f9:20:25: 84:af:33:d4:d1:40:31:1a:b8:a2:06:72:26:e9:70:78:63:e0: 7d:8c:2f:bd:45:98:10:be:df:12:45:61:4f:3a:81:3d:4c:6a: 89:6b:ff:e3:f5:bb:71:b0:d5:94:9c:79:ab:87:5c:1a:77:e3: f8:30:04:88:18:0d:00:d3:94:2b:d9:09:c4:6f:2a:d3:80:cc: 66:74:c5:48:2f:2b:02:8f:4f:5e:9f:4c:c8:c1:f6:bb:7b:d2: 63:46:6b:ef:2e:dd:3c:11:18:59:83:0c:d8:ee:f3:2a:1d:fb: 2d:30:bb:1d:99:00:ce:17:4d:72:05:96:a5:d1:53:60:c5:f0: e6:14:03:96:8d:3f:7f:d1:9d:04:b4:6a:b5:32:f0:02:d7:6f: c7:d0:39:62:40:aa:6a:25:c1:f8:40:b1:b5:39:0c:6b:19:1d: e7:6b:a1:79:c6:8c:f5:fa:54:a9:5a:8f:33:ad:85:42:82:42: 40:41:27:7a:f5:af:a3:b4:eb:06:da:1b:c9:df:16:d7:c4:41: 52:b2:f6:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjQwNjAyMTc0NjI3WhcNMjQwNjA5MTc0NjI3WjAYMRYwFAYD VQQDEw02NjVjYWZmMy03MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1PaBsAJaX0FPDwEZPdjuZu6fEhgB0+PA25tQVDcfsokMhLJTAUV3hICGMGF iafNq23dLcBlhyBONHDrO4uoBvyRKEP5iux+Qi/EGjdQPuSa+1Ex+limuDi38yU6 BFgPcp87M/CqyHU/fUYWFq5I4/sEw9kQ4TEsqEigF4fk8lEB1gXP2wt1/+DoVlOn UoofGTohXzAXrVZBXf1j6Q0hHzhp/v+lT7sqnmxTT09OLNyHqRQOpljXHrgBa7ib io03ZXPWiRCwxMStFVf2YpGKCUSH7MhCamaf2k8mfeLXW8vMauMEWKHGe0leqyKt TNxT8gjth353IgRYfHA3IGQsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhWjQBl m2EMtri2inCHISdJPEXiMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0RCMS9EQTJBNDJCRThCQzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VD WklVdkV0R0xJWXdGNUVpRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcewo+XYH0f5gYARO8Kq/KDCe89cIxOl+wuzNN9XnafZpkfW7mQtYI PUbUkU+OZ18vD0b5ICWErzPU0UAxGriiBnIm6XB4Y+B9jC+9RZgQvt8SRWFPOoE9 TGqJa//j9btxsNWUnHmrh1wad+P4MASIGA0A05Qr2QnEbyrTgMxmdMVILysCj09e n0zIwfa7e9JjRmvvLt08ERhZgwzY7vMqHfstMLsdmQDOF01yBZal0VNgxfDmFAOW jT9/0Z0EtGq1MvAC12/H0DliQKpqJcH4QLG1OQxrGR3na6F5xoz1+lSpWo8zrYVC gkJAQSd69a+jtOsG2hvJ3xbXxEFSsvaN -----END CERTIFICATE-----Generated at Sun Jun 2 18:46:14 2024 by rpki-client on console-ams.rpki-client.org