$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: 7ZceLoCtLLloBnJBjlCjnb/9yP+s9WkeAKCAofsSDoc= Subject key identifier: D8:54:AC:30:1D:3F:18:0D:82:FA:3F:28:52:98:95:DE:06:EB:D4:CA Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0C63 Signing time: Tue 30 Apr 2024 19:12:44 +0000 Manifest this update: Tue 30 Apr 2024 19:12:44 +0000 Manifest next update: Tue 07 May 2024 19:12:44 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: 5KN1nVBGpJ0n6yZ0tTs+45crCxCkdZq9gE3NsAuvoes=) 2: FF84F326C3D611ED9FE9A84EC4F9AE02.roa (hash: P9gPFPVfjNvP9QaZ8KqoFzW97LRgcoNKxvirz1Fbmb0=) 3: FE7AD4B4C3D611ED9FE9A84EC4F9AE02.roa (hash: NRJCmbLQCtM5qgKqMx/tPyHWVFbHbwZZGx+RIuXS4Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: Apr 30 19:12:44 2024 GMT Not After : May 7 19:12:44 2024 GMT Subject: CN=663142ac-a27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:6c:7f:df:2f:c2:64:ff:51:c6:ec:a9:e8: 0b:67:af:b9:ed:e8:0c:f2:ee:c4:23:f3:2c:93:ca: f1:fb:20:df:2f:88:a5:94:fc:66:fd:0b:f4:46:a0: 13:f7:a7:3e:c8:8c:67:3a:f2:9e:fe:cb:f9:96:d2: fa:eb:85:dd:a1:82:6e:85:05:4e:d1:56:0d:bc:e4: 0d:d3:3a:4c:58:4f:93:d3:36:4a:d5:fc:f0:be:cd: a1:33:ee:85:99:ef:42:f3:ec:3f:e9:2c:15:fd:43: fa:9d:0e:64:4b:61:79:bb:b2:3d:8c:2b:5d:8b:c5: d6:37:ed:ee:5d:30:7b:ee:b2:2d:86:4b:47:d4:3c: 74:0c:78:77:45:7e:d5:74:18:b0:72:cb:d3:2c:7f: 21:4b:87:2e:07:0c:40:10:9c:5f:70:f6:eb:c2:62: 42:f4:1e:f3:75:8d:34:e4:f9:c3:3d:4c:ed:97:c2: 9a:42:58:31:c1:3f:f0:de:fe:00:3d:46:9f:20:dc: 6f:f2:35:15:a2:b3:de:3e:25:fa:ad:65:9d:a0:22: 02:92:de:07:9c:5a:fb:27:bb:b9:6a:ed:90:97:9a: 7b:43:b2:7a:be:0c:54:bc:23:f7:b2:0e:6e:a4:7c: 4a:63:a4:41:26:78:be:53:45:88:d7:5c:4a:71:ed: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:54:AC:30:1D:3F:18:0D:82:FA:3F:28:52:98:95:DE:06:EB:D4:CA X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:ca:76:db:99:da:88:e2:7e:1c:04:02:05:ad:64:f4:a5: bf:16:bb:28:88:26:74:57:a4:c6:7c:c8:e2:b0:8b:96:bc:14: ca:37:5d:a5:14:df:df:6f:c3:1a:de:ed:a1:ab:aa:02:11:12: ff:df:b7:c6:a2:11:d1:c3:05:c4:58:94:ea:56:ff:ec:03:de: c7:fb:f7:11:28:7c:47:e1:2e:d3:1e:f4:ee:f6:7f:87:4f:6e: ef:2a:72:84:5e:0a:eb:49:c9:f8:3c:55:c8:3e:ca:22:62:a4: 97:9d:ef:e0:6e:ce:3f:ce:44:b5:b6:bf:cb:40:74:49:9a:52: 79:c9:b7:e7:01:8b:35:c8:e0:00:08:a4:75:e4:40:b5:5a:22: 64:d5:92:ef:33:0b:18:37:0a:74:c9:70:58:94:a1:b1:2e:81: 6f:6f:e1:12:95:0a:a6:5f:88:45:3e:a2:18:86:39:1c:5c:f2: ec:21:c3:83:9e:b8:b1:87:fc:7d:aa:4b:90:4e:b2:af:85:d1: 9a:c6:3d:66:03:2e:07:ed:a1:d4:7d:2a:56:21:3c:69:3c:d6: 39:1e:f9:b3:a4:eb:73:27:13:fe:56:94:0c:85:43:8b:22:3b: e3:dc:5c:2b:3e:e5:ab:19:3b:2c:bf:14:23:2a:24:a5:7c:a5: 86:89:b1:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjQwNDMwMTkxMjQ0WhcNMjQwNTA3MTkxMjQ0WjAYMRYwFAYD VQQDEw02NjMxNDJhYy1hMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpBsf98vwmT/UcbsqegLZ6+57egM8u7EI/Msk8rx+yDfL4illPxm/Qv0RqAT 96c+yIxnOvKe/sv5ltL664XdoYJuhQVO0VYNvOQN0zpMWE+T0zZK1fzwvs2hM+6F me9C8+w/6SwV/UP6nQ5kS2F5u7I9jCtdi8XWN+3uXTB77rIthktH1Dx0DHh3RX7V dBiwcsvTLH8hS4cuBwxAEJxfcPbrwmJC9B7zdY005PnDPUztl8KaQlgxwT/w3v4A PUafINxv8jUVorPePiX6rWWdoCICkt4HnFr7J7u5au2Ql5p7Q7J6vgxUvCP3sg5u pHxKY6RBJni+U0WI11xKce0/XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhUrDAd PxgNgvo/KFKYld4G69TKMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRKMp225naiOJ+HAQCBa1k9KW/FrsoiCZ0V6TGfMjisIuWvBTKN12l FN/fb8Ma3u2hq6oCERL/37fGohHRwwXEWJTqVv/sA97H+/cRKHxH4S7THvTu9n+H T27vKnKEXgrrScn4PFXIPsoiYqSXne/gbs4/zkS1tr/LQHRJmlJ5ybfnAYs1yOAA CKR15EC1WiJk1ZLvMwsYNwp0yXBYlKGxLoFvb+ESlQqmX4hFPqIYhjkcXPLsIcOD nrixh/x9qkuQTrKvhdGaxj1mAy4H7aHUfSpWITxpPNY5HvmzpOtzJxP+VpQMhUOL Ijvj3FwrPuWrGTssvxQjKiSlfKWGibEQ -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:54 2024 by rpki-client on console-fra.rpki-client.org