$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: dOW2EAhjMPh5hAhfUgU1hsbs7hm99pIiNIKiZqt4xF4= Subject key identifier: BC:06:A5:6B:5C:BF:DB:E1:33:E4:00:A7:A0:E6:72:BA:32:26:22:EA Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 01AB Signing time: Fri 03 May 2024 04:40:18 +0000 Manifest this update: Fri 03 May 2024 04:40:17 +0000 Manifest next update: Fri 10 May 2024 04:40:17 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: QZ+JAVS1jVMPDYsE01JODQ0WPZfBUxrpusr1L+AiXJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: May 3 04:40:17 2024 GMT Not After : May 10 04:40:17 2024 GMT Subject: CN=66346ab1-24fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:ee:07:c1:e1:46:93:b6:c1:b4:51:1d:7a: bb:ba:93:fb:a2:c2:70:95:44:67:36:3e:bd:02:e2: cd:6e:92:35:65:c1:65:19:fb:21:8d:bf:44:4c:d5: be:cb:5f:5d:56:81:61:18:7c:a9:ad:2b:ac:16:73: f8:cd:38:56:a0:33:fb:bc:8e:18:50:28:07:ff:b9: 10:f3:24:b9:20:91:6e:da:44:c7:b7:42:94:ea:41: 2a:05:c9:5b:12:1f:0d:ee:7c:38:7a:c7:eb:14:df: 83:09:ec:86:40:38:d6:1e:d8:13:d6:71:f8:26:bb: c1:ca:3c:81:85:87:79:34:54:f4:e2:9a:7e:2c:47: 85:b9:ec:59:0d:ac:45:17:d7:ae:43:5d:35:5f:c3: b0:95:0f:1a:e5:3d:ca:1e:37:d5:13:33:e7:00:80: 0e:61:41:cb:33:68:ee:4d:2c:e9:75:87:c6:5b:3e: a9:79:b8:6b:f8:f5:52:c1:15:d5:b6:64:79:ad:ac: d1:29:b2:9a:47:8e:6e:e9:be:b0:1f:ae:a2:60:f7: b3:2c:1e:c7:d0:b2:46:7a:ce:b6:71:32:b8:7e:de: d2:e7:07:1b:d4:bc:2d:89:93:25:4f:d1:94:14:8f: 2a:7b:31:6b:8f:ff:e6:fe:79:c4:8c:fb:23:d7:9d: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:A5:6B:5C:BF:DB:E1:33:E4:00:A7:A0:E6:72:BA:32:26:22:EA X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:88:1b:f8:93:13:c2:a3:0e:1c:24:45:79:86:ce:96:b2:6d: f9:22:4e:9d:fb:ae:3f:01:84:63:79:ef:58:ba:88:fa:a2:76: 22:6a:c1:89:bd:12:8c:f5:41:ef:c0:c3:f0:fb:d5:12:f2:65: 3c:0d:5a:f0:3d:a2:21:29:22:8d:13:09:95:ae:1e:56:31:37: 78:18:e8:c7:a4:e8:ce:ef:e5:11:b8:17:2a:b8:4b:b5:51:14: f4:0b:e9:a3:fd:c0:2a:29:87:d3:b2:a9:78:44:9b:d0:4d:6f: 0b:5f:07:d2:b9:cf:3a:f4:a3:30:84:62:d0:ab:7a:ae:a6:93: 29:3e:74:b6:42:e3:24:d8:7f:40:4a:06:a4:b7:dd:86:6d:7e: f8:7f:54:a4:e7:e2:2f:6c:16:3f:a5:86:cc:92:d1:51:75:ae: 64:3f:8f:f7:c0:c3:fb:49:26:66:b6:9d:20:82:fe:e4:f5:86: ac:70:47:b0:58:f4:ef:30:29:d3:45:ba:35:b9:db:0b:04:04: ba:c9:aa:ff:7c:c7:c0:20:43:b2:77:ae:77:9d:e8:68:a9:ac: af:5b:e1:2b:79:69:e6:1a:44:01:dd:17:20:fa:72:81:c3:1a: a5:b3:ba:cb:b3:ab:c8:8d:f9:26:33:ce:25:33:72:36:83:b6: 51:d2:ac:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjQwNTAzMDQ0MDE3WhcNMjQwNTEwMDQ0MDE3WjAYMRYwFAYD VQQDEw02NjM0NmFiMS0yNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvDuB8HhRpO2wbRRHXq7upP7osJwlURnNj69AuLNbpI1ZcFlGfshjb9ETNW+ y19dVoFhGHyprSusFnP4zThWoDP7vI4YUCgH/7kQ8yS5IJFu2kTHt0KU6kEqBclb Eh8N7nw4esfrFN+DCeyGQDjWHtgT1nH4JrvByjyBhYd5NFT04pp+LEeFuexZDaxF F9euQ101X8OwlQ8a5T3KHjfVEzPnAIAOYUHLM2juTSzpdYfGWz6pebhr+PVSwRXV tmR5razRKbKaR45u6b6wH66iYPezLB7H0LJGes62cTK4ft7S5wcb1LwtiZMlT9GU FI8qezFrj//m/nnEjPsj151oBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwGpWtc v9vhM+QAp6DmcroyJiLqMB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNiBv4kxPCow4cJEV5hs6Wsm35Ik6d+64/AYRjee9Yuoj6onYiasGJ vRKM9UHvwMPw+9US8mU8DVrwPaIhKSKNEwmVrh5WMTd4GOjHpOjO7+URuBcquEu1 URT0C+mj/cAqKYfTsql4RJvQTW8LXwfSuc869KMwhGLQq3quppMpPnS2QuMk2H9A Sgakt92GbX74f1Sk5+IvbBY/pYbMktFRda5kP4/3wMP7SSZmtp0ggv7k9YascEew WPTvMCnTRbo1udsLBAS6yar/fMfAIEOyd653nehoqayvW+EreWnmGkQB3Rcg+nKB wxqls7rLs6vIjfkmM84lM3I2g7ZR0qwb -----END CERTIFICATE-----Generated at Fri May 3 06:28:37 2024 by rpki-client on console-fra.rpki-client.org