$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json) Hash identifier: mlV2k05kv9wD3Qpa5pcmVpWQ3hbb2QjgEOOd2vj97Vo= Subject key identifier: 1F:1A:D1:32:48:40:D7:1A:DF:BE:6A:B1:94:DE:21:46:F8:30:A0:9A Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Certificate serial: 1C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft Manifest number: 1C86 Signing time: Thu 02 May 2024 16:37:02 +0000 Manifest this update: Thu 02 May 2024 16:37:01 +0000 Manifest next update: Thu 09 May 2024 16:37:01 +0000 Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: eCcUzQOoipL0zjwfz53SSvEOFsoK13Y2GSy4RRL9L+s=) 2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: EMRtPDIPmvcHDystOkxHvkGOqeIprACWnSxHtorfoCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7311 (0x1c8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563 Validity Not Before: May 2 16:37:01 2024 GMT Not After : May 9 16:37:01 2024 GMT Subject: CN=6633c12e-ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:3c:10:61:07:62:1e:89:2b:bb:cd:32:78: 3f:e9:7d:14:98:c9:f1:2c:f7:ab:72:eb:5f:7a:e2: e8:40:83:54:97:60:fa:77:4d:dc:d3:63:3b:86:17: 35:fe:d8:7e:b9:4f:df:90:24:74:49:36:c2:a6:9a: 31:b6:c4:03:bc:d4:d6:e5:d4:d4:b2:f8:35:b9:9c: a2:53:6f:bd:95:fd:7d:fe:ed:a7:4a:47:72:1f:0c: af:57:8a:bf:11:77:98:5a:ee:36:e7:78:22:ab:b4: e7:f3:dd:43:d6:d2:42:94:83:ac:d7:d8:08:75:42: a0:c8:e6:86:2b:cd:b4:e1:4d:f1:7f:5e:d7:13:78: ee:d3:f4:14:03:4d:15:21:d0:ec:0f:dd:e9:89:23: 68:21:7e:19:0c:1f:e3:33:3c:47:89:bd:e2:b3:d2: 9f:bc:2a:af:ef:21:92:d7:32:aa:5e:ae:51:9d:9e: 04:82:99:b8:82:4e:6f:c1:b4:82:2b:f2:7a:fb:06: e0:6d:c3:ee:fc:7b:23:f3:82:df:7e:38:64:ce:2a: dd:47:81:13:71:07:22:7d:8d:80:fc:2d:f6:99:f9: 70:14:71:28:09:8f:90:d8:dd:cb:71:02:64:03:2a: 14:d9:a1:4f:1f:42:35:e3:f8:b0:95:9e:9c:33:ee: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:D1:32:48:40:D7:1A:DF:BE:6A:B1:94:DE:21:46:F8:30:A0:9A X509v3 Authority Key Identifier: keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cd:1c:82:a6:bd:5d:a3:63:0e:e8:5a:5d:3b:3f:aa:a9:1a: 93:2b:dc:ce:ba:a0:2c:a2:8d:56:4d:30:86:78:17:7a:95:c6: 80:21:79:9d:b4:f5:8a:0e:75:a0:82:46:05:26:6a:35:8f:2a: 55:be:87:26:41:3b:41:39:98:42:ba:32:1d:9b:70:79:9b:a1: 69:12:82:4f:41:f4:9c:96:f2:a7:8f:a5:57:1e:9a:a7:cf:6c: 24:cb:be:34:75:19:21:4b:b2:8a:22:aa:71:f6:d5:97:e6:87: 76:c7:da:76:2f:5c:48:f1:16:89:de:3c:14:2b:13:96:e5:98: 33:a5:1f:9e:ba:90:e5:b8:cf:82:ca:89:50:ea:9d:f5:ec:62: 0e:ac:d7:86:1f:4e:c3:f4:c9:3a:21:50:e2:9c:18:84:f5:1b: 9e:4a:10:c2:77:1d:3d:f2:62:f1:f9:2a:bb:ef:ae:b1:1b:b7: 9c:a2:05:49:60:8b:e8:7a:46:e7:da:fa:80:a1:1d:71:19:a4: 82:01:8c:0f:12:cd:fe:15:e5:f7:65:0a:1d:25:f9:4f:c6:3c: 2b:28:13:44:69:c3:18:b2:b5:4c:0d:2b:07:af:b7:a7:3c:d5: e2:3b:80:c5:12:66:b0:4c:88:15:2e:77:8c:b9:17:18:3f:09: 91:90:af:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlENEExMTAvBgNVBAUTKDY0NkIxQzQxQTgxRkY3RTU4MkI1RUNEQzFDRUY1NENF NjExNTI1NjMwHhcNMjQwNTAyMTYzNzAxWhcNMjQwNTA5MTYzNzAxWjAYMRYwFAYD VQQDEw02NjMzYzEyZS1hYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7A8EGEHYh6JK7vNMng/6X0UmMnxLPercutfeuLoQINUl2D6d03c02M7hhc1 /th+uU/fkCR0STbCppoxtsQDvNTW5dTUsvg1uZyiU2+9lf19/u2nSkdyHwyvV4q/ EXeYWu4253giq7Tn891D1tJClIOs19gIdUKgyOaGK8204U3xf17XE3ju0/QUA00V IdDsD93piSNoIX4ZDB/jMzxHib3is9KfvCqv7yGS1zKqXq5RnZ4Egpm4gk5vwbSC K/J6+wbgbcPu/Hsj84LffjhkzirdR4ETcQcifY2A/C32mflwFHEoCY+Q2N3LcQJk AyoU2aFPH0I14/iwlZ6cM+6ajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8a0TJI QNca375qsZTeIUb4MKCaMB8GA1UdIwQYMBaAFGRrHEGoH/flgrXs3BzvVM5hFSVj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUQ0QS8yNDgxMDNBNEFD OTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjktV0N0ZXpjSE85VXptRVZK V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pHc2NRYWdmOS1XQ3RlemNITzlVem1FVkpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUQ0QS8yNDgxMDNBNEFDOTYxMUU2QTU2MUEzMTVDNEY5QUUwMi9aR3NjUWFnZjkt V0N0ZXpjSE85VXptRVZKV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACzRyCpr1do2MO6FpdOz+qqRqTK9zOuqAsoo1WTTCGeBd6lcaAIXmd tPWKDnWggkYFJmo1jypVvocmQTtBOZhCujIdm3B5m6FpEoJPQfSclvKnj6VXHpqn z2wky740dRkhS7KKIqpx9tWX5od2x9p2L1xI8RaJ3jwUKxOW5ZgzpR+eupDluM+C yolQ6p317GIOrNeGH07D9Mk6IVDinBiE9RueShDCdx098mLx+Sq7766xG7ecogVJ YIvoekbn2vqAoR1xGaSCAYwPEs3+FeX3ZQodJflPxjwrKBNEacMYsrVMDSsHr7en PNXiO4DFEmawTIgVLneMuRcYPwmRkK/S -----END CERTIFICATE-----Generated at Thu May 2 17:18:26 2024 by rpki-client on console-ams.rpki-client.org