$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: Z7eO+VUB5GX8OdVQd6OHk/oTaF01kXaU9jDEmzHNqRY= Subject key identifier: A8:16:B2:80:D4:E9:34:59:92:17:7F:F7:8F:DC:D8:E1:E7:DC:81:CF Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 1771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 175C Signing time: Sat 04 May 2024 17:06:53 +0000 Manifest this update: Sat 04 May 2024 17:06:53 +0000 Manifest next update: Sat 11 May 2024 17:06:53 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: VnRcnZoep+DsuWy2OvqvBsPWWQQ/v09P+jNev1YEc2E=) 2: 67EFECE2414811EEB3FB961AC4F9AE02.roa (hash: klvVUWRZ8/0CgSnhVAEhGlG2oqclI9m9tHBf7aLddwE=) 3: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: nI3yZmnSdsVB8w1Scj2HA5x9f9q6bMD+CfH5CHWCUdk=) 4: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: scF26x64TJmDlZHZ9FSuVX7hajd8atv1bYl+KAum2lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6001 (0x1771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: May 4 17:06:53 2024 GMT Not After : May 11 17:06:53 2024 GMT Subject: CN=66366b2d-9e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:87:ec:45:0a:22:cf:b8:8d:4b:a0:2d:42: 36:7c:c6:8c:32:ac:71:ed:b6:7a:90:6b:53:b8:17: c2:c7:db:9f:97:d0:31:61:e0:8c:42:c3:61:ce:65: 2a:d1:01:55:35:9f:b7:09:eb:24:94:7f:c7:b8:c0: 6a:53:4c:86:30:94:1e:ec:0d:44:c8:fe:bc:d2:a2: e4:81:48:cf:c3:64:3c:23:cd:68:a1:b2:6d:9e:81: 42:63:89:71:6c:9d:f1:a0:fb:5f:27:04:b2:73:75: c0:ac:90:b8:a7:39:85:f7:04:6e:1d:e5:ce:45:73: ed:33:22:b2:9e:d3:ef:52:6a:56:c4:51:29:1a:16: b7:cb:e4:34:6f:7a:89:eb:f0:8f:68:12:3b:4d:f1: 32:57:b1:95:b1:7a:7e:c7:5e:da:3a:45:cd:94:be: 33:f1:b9:9e:fa:92:78:8a:6f:f3:f7:70:80:e5:b4: d8:ac:94:6a:fd:79:38:0e:4d:5b:a5:76:41:a3:02: e4:a5:aa:8c:c8:e7:ce:51:d0:cc:bf:ca:a6:45:af: 93:06:92:51:f6:3e:cd:c6:ab:1f:14:dd:9b:b0:a1: 3c:1c:1f:09:8e:8d:ff:43:6d:e3:06:7a:c8:63:9e: b3:3e:44:bd:42:2d:4b:26:06:b9:f1:af:eb:68:93: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:B2:80:D4:E9:34:59:92:17:7F:F7:8F:DC:D8:E1:E7:DC:81:CF X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:5a:a5:bf:ac:ac:2a:de:23:b8:1e:87:fe:2a:c7:4d:1c: 4b:b3:0b:91:72:c9:e8:8d:e0:10:3d:33:d9:c2:34:f5:e1:3a: 28:01:6f:32:f1:61:f8:51:b5:8a:20:c6:82:f0:78:59:4e:87: 9a:ca:e4:03:40:19:5a:ae:c6:d3:45:56:70:61:4e:47:8b:98: 92:c6:5f:e7:0b:47:b7:be:26:c2:93:67:38:0c:3a:e6:ac:19: 57:2b:ec:20:ef:c5:02:fa:e7:26:19:09:84:b9:6b:6b:b5:8f: 44:b2:ee:3d:2f:1b:2b:08:27:ff:72:16:fc:b1:c9:9d:fb:a5: c0:66:18:ea:1b:bd:ac:2a:f8:3f:4e:5c:63:3a:36:77:ab:b1: 15:52:7b:e0:92:3d:f8:08:a5:fb:06:4e:64:25:67:f4:45:3c: 3d:d5:c3:59:c4:64:da:0e:10:bd:14:3e:cc:1d:f1:6a:55:78: a8:73:13:78:4e:2d:d9:e6:bb:c7:a7:6c:46:28:20:26:f6:4e: c2:9e:5b:d0:99:5a:cc:f8:63:b4:84:b7:6e:bf:71:7c:b4:2d: c5:70:73:7e:88:b1:33:e8:a4:ec:0c:a3:28:b1:1c:3b:ca:73: 99:98:55:bc:c1:1b:ed:c6:3b:f5:81:ad:4c:06:4b:1b:b6:4b: 68:21:cb:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjQwNTA0MTcwNjUzWhcNMjQwNTExMTcwNjUzWjAYMRYwFAYD VQQDEw02NjM2NmIyZC05ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JmH7EUKIs+4jUugLUI2fMaMMqxx7bZ6kGtTuBfCx9ufl9AxYeCMQsNhzmUq 0QFVNZ+3CesklH/HuMBqU0yGMJQe7A1EyP680qLkgUjPw2Q8I81oobJtnoFCY4lx bJ3xoPtfJwSyc3XArJC4pzmF9wRuHeXORXPtMyKyntPvUmpWxFEpGha3y+Q0b3qJ 6/CPaBI7TfEyV7GVsXp+x17aOkXNlL4z8bme+pJ4im/z93CA5bTYrJRq/Xk4Dk1b pXZBowLkpaqMyOfOUdDMv8qmRa+TBpJR9j7NxqsfFN2bsKE8HB8Jjo3/Q23jBnrI Y56zPkS9Qi1LJga58a/raJNHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgWsoDU 6TRZkhd/94/c2OHn3IHPMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgFqlv6ysKt4juB6H/irHTRxLswuRcsnojeAQPTPZwjT14TooAW8y 8WH4UbWKIMaC8HhZToeayuQDQBlarsbTRVZwYU5Hi5iSxl/nC0e3vibCk2c4DDrm rBlXK+wg78UC+ucmGQmEuWtrtY9Esu49LxsrCCf/chb8scmd+6XAZhjqG72sKvg/ TlxjOjZ3q7EVUnvgkj34CKX7Bk5kJWf0RTw91cNZxGTaDhC9FD7MHfFqVXiocxN4 Ti3Z5rvHp2xGKCAm9k7CnlvQmVrM+GO0hLduv3F8tC3FcHN+iLEz6KTsDKMosRw7 ynOZmFW8wRvtxjv1ga1MBksbtktoIcvc -----END CERTIFICATE-----Generated at Sat May 4 17:44:38 2024 by rpki-client on console-ams.rpki-client.org