$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: QzxJDBObjl4AlTEoUTmLoiLw48K31G1uJAEMunEK5UM= Subject key identifier: 77:54:85:D1:BC:08:4F:8E:FC:A5:1D:A8:7C:14:46:8A:2C:4F:6D:60 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 014F Signing time: Fri 03 May 2024 05:00:21 +0000 Manifest this update: Fri 03 May 2024 05:00:20 +0000 Manifest next update: Fri 10 May 2024 05:00:20 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: pi5LbbDF+5e+0gVPcJ8YBC7ZFL+ZlCUXqiVAzc1zGiQ=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: C51lZrSkmiHfhRN2orS87DL386YZSDAlrqGSAk6Pr1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: May 3 05:00:20 2024 GMT Not After : May 10 05:00:20 2024 GMT Subject: CN=66346f64-1b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:6a:46:41:03:3c:32:6e:2a:7e:07:44:9f: f4:5b:1c:03:f4:e2:49:fc:66:34:01:5c:10:ca:6b: c6:77:c4:95:5d:e2:bf:ea:ed:a4:67:d7:ed:e1:f8: 77:93:7d:bb:bf:a0:94:6e:91:a1:93:37:b5:88:9d: 63:3f:fd:85:2e:3a:27:c5:fc:52:8d:ef:55:12:6b: 46:46:16:f8:64:97:99:b1:69:77:ca:d1:26:12:18: 8e:73:09:e5:43:2c:75:61:62:7c:5a:57:19:a3:86: 7e:e8:46:36:12:f4:32:00:95:4d:45:c8:e8:5d:45: 88:dc:6a:cc:b9:eb:53:23:ee:15:1e:3a:eb:0b:73: 16:ac:53:d5:36:b0:30:ae:5b:e5:d6:c8:dd:4e:9b: 3d:fb:97:97:0b:f8:eb:43:6a:49:4f:3b:57:c1:56: 6d:05:0f:4f:88:0e:ae:48:61:da:c8:ac:b1:9b:d1: 63:c2:c5:60:4b:54:a2:b2:a3:64:44:eb:b9:08:23: 6e:47:5a:c0:0e:67:07:5d:9d:f1:4b:4f:9a:35:39: f7:b8:fa:a0:32:66:d9:d4:7c:1d:de:87:50:14:a8: dc:78:c2:e4:37:8e:1d:fa:94:50:58:fe:7d:8d:e7: 9e:4c:50:54:1e:cb:88:fa:6f:f4:e9:34:98:9b:d0: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:54:85:D1:BC:08:4F:8E:FC:A5:1D:A8:7C:14:46:8A:2C:4F:6D:60 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:02:22:53:16:1f:db:04:62:dc:d5:68:c1:a7:93:a2:6e:06: 65:8d:65:c5:b8:f2:75:27:fa:6a:20:0b:74:5e:c4:89:a6:26: 42:6b:e5:ba:70:75:2e:88:71:78:43:71:b9:6f:d0:15:05:6d: d7:60:dd:af:3e:04:f0:0d:75:73:7a:73:8d:78:07:5b:60:8a: fe:de:33:30:54:e0:4d:f6:f1:10:6e:eb:92:44:22:a1:1b:20: 6c:50:bb:08:f2:a9:e1:6d:df:6c:b7:f7:b8:61:e9:1b:fd:78: 87:24:97:dd:23:b3:0a:1f:b8:51:b7:5d:94:9e:c5:ef:83:41: 12:3e:95:21:5a:4b:fa:25:05:ee:95:3a:2f:31:eb:34:55:fb: cd:7c:33:af:c5:7e:93:6c:ef:88:ef:9f:36:f8:e1:a0:af:a2: 2d:b2:9b:46:42:5d:db:31:f4:47:05:ba:8a:01:74:21:6d:ba: e6:87:be:74:9e:f5:92:4f:e7:58:98:da:00:ac:78:24:b1:6d: 85:75:9a:8c:dd:98:9b:9b:b7:bb:db:7d:6d:44:7c:a1:7d:b5: 5e:1e:c3:b0:8d:12:08:5c:86:43:40:f1:8a:c9:52:80:48:aa: e3:b3:87:48:62:22:e3:47:0f:28:1b:18:a8:b3:42:fa:b4:03: 1d:55:02:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjQwNTAzMDUwMDIwWhcNMjQwNTEwMDUwMDIwWjAYMRYwFAYD VQQDEw02NjM0NmY2NC0xYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RJqRkEDPDJuKn4HRJ/0WxwD9OJJ/GY0AVwQymvGd8SVXeK/6u2kZ9ft4fh3 k327v6CUbpGhkze1iJ1jP/2FLjonxfxSje9VEmtGRhb4ZJeZsWl3ytEmEhiOcwnl Qyx1YWJ8WlcZo4Z+6EY2EvQyAJVNRcjoXUWI3GrMuetTI+4VHjrrC3MWrFPVNrAw rlvl1sjdTps9+5eXC/jrQ2pJTztXwVZtBQ9PiA6uSGHayKyxm9FjwsVgS1SisqNk ROu5CCNuR1rADmcHXZ3xS0+aNTn3uPqgMmbZ1Hwd3odQFKjceMLkN44d+pRQWP59 jeeeTFBUHsuI+m/06TSYm9CJVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdUhdG8 CE+O/KUdqHwURoosT21gMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSAiJTFh/bBGLc1WjBp5OibgZljWXFuPJ1J/pqIAt0XsSJpiZCa+W6 cHUuiHF4Q3G5b9AVBW3XYN2vPgTwDXVzenONeAdbYIr+3jMwVOBN9vEQbuuSRCKh GyBsULsI8qnhbd9st/e4Yekb/XiHJJfdI7MKH7hRt12UnsXvg0ESPpUhWkv6JQXu lTovMes0VfvNfDOvxX6TbO+I7582+OGgr6ItsptGQl3bMfRHBbqKAXQhbbrmh750 nvWST+dYmNoArHgksW2FdZqM3Zibm7e7231tRHyhfbVeHsOwjRIIXIZDQPGKyVKA SKrjs4dIYiLjRw8oGxios0L6tAMdVQJm -----END CERTIFICATE-----Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org