$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: CeLcDbV+nzItUkSvbrkeI0bcNzqnp4bLB4B7MNldjA8= Subject key identifier: DB:26:85:A0:21:3A:80:33:CF:C9:39:3F:58:F9:58:D5:DC:EF:6F:62 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0396 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 0332 Signing time: Sun 05 May 2024 03:34:54 +0000 Manifest this update: Sun 05 May 2024 03:34:53 +0000 Manifest next update: Sun 12 May 2024 03:34:53 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: VnWzG2JBCA8rlqGwvXf5m+VgvjtAx0GoNP9B4M/PkIo=) 2: 3A671478DAFC11EEBFDF493AC4F9AE02.roa (hash: kDKzwOwFlj7vNSrUD43mLVG5/+/WH7tzcrIxoiLmM7A=) 3: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: DhrjDdn8kRjWDcKy/f/5l8fHWm/7M7jUj5RVFK5YZrU=) 4: F00EED50ED2B11EE98C44146C4F9AE02.roa (hash: kYBl0epgzbMHurAGBI4WFsCRe01Y1m75SxkMhr+QNc4=) 5: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: 0cBoK89RmbzqpaLi2uUCLcs3Qf4Q0PZ8UMqpFnbL8nI=) 6: 7D3AC586C19B11ED854B7639C4F9AE02.roa (hash: 1Kv6KiL2a7gO+wzt0Ludt0ojD9AdARTrVG4Nz5yESG0=) 7: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: Q6b6abzdYZWnGB/sX3x2XArbAx5azJJuahj/vTgAAy8=) 8: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: 0d61zSOY/wZFeh1uE1nvRknYjYUGq3avNxYpjmwAOcs=) 9: 5042F2F6ED2D11EE83179F16C4F9AE02.roa (hash: yZVScSohj2jMaP8KjAZCcbUpwfU48CmoKpdYpULvFnw=) 10: 7539EF341CC611EEAD8F6969C4F9AE02.roa (hash: 5RGHnPNwDuEKkzUwe7+qNRSbyR45vI4500DTTpaH5vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: May 5 03:34:53 2024 GMT Not After : May 12 03:34:53 2024 GMT Subject: CN=6636fe5e-2cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:91:77:c9:25:91:88:0e:9d:57:46:3a:5b: de:df:6c:2b:a3:a2:86:af:9f:68:19:e8:bb:44:a6: 2c:dd:5f:d1:68:46:b4:7a:af:0d:18:fa:18:d0:42: 20:c3:2e:ad:84:78:74:38:df:a0:e9:73:76:b6:71: b5:1a:36:ab:13:96:35:bf:a9:c0:39:2e:f2:11:62: 8c:25:9b:26:29:ce:ed:7e:5e:e0:c4:00:cb:b1:ee: f2:9a:3b:91:88:00:27:be:c5:e7:d3:53:c8:8e:f3: 6d:9a:a5:11:6b:ec:98:2c:3d:71:54:29:c7:bb:fa: d7:db:07:ab:ac:09:f9:c5:1c:59:80:c0:41:15:a9: 8c:03:67:8a:6e:22:a9:98:16:26:ca:49:0d:a8:a1: 0c:3f:ca:4d:46:6d:cd:3c:fa:19:9d:89:b0:87:d6: 25:4d:85:82:0a:d7:44:9b:44:87:43:2b:84:40:64: ed:bc:46:b6:59:a6:39:f7:34:cb:55:d1:c2:99:6e: bf:cf:c0:01:d9:e8:79:f8:9a:fc:1c:2a:d5:3c:1e: 3a:fe:bb:af:44:ba:ad:d5:51:3f:d0:fc:84:2f:33: 3f:cf:bc:78:5f:89:61:ee:b1:e9:56:bb:fb:b2:76: 02:46:28:74:09:da:54:ab:d9:33:0f:fb:19:cf:0c: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:85:A0:21:3A:80:33:CF:C9:39:3F:58:F9:58:D5:DC:EF:6F:62 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d7:25:39:36:fd:5f:6d:3e:f9:a0:80:e2:7f:d8:0b:e3:8b: 32:18:d5:5c:2a:27:10:45:c0:a2:0a:ac:f5:bb:55:ed:e9:10: 20:db:21:5b:9e:6f:3d:57:ec:36:5e:37:64:0a:c0:ae:0f:bc: 08:a1:9b:cb:46:86:23:7f:9a:b5:01:2c:58:cd:9f:26:89:03: ba:1b:c7:bd:56:0a:af:5f:46:10:8d:66:f4:27:94:bd:e0:4e: 3e:21:20:60:76:f6:76:7f:2e:8a:93:52:d5:dd:4e:67:9d:6a: 8f:17:ee:52:cf:11:73:e6:46:f8:3f:b0:18:aa:45:d0:5a:1e: ef:70:6e:81:c5:18:a6:97:bb:1c:a8:42:03:50:2c:77:ad:c2: 1b:61:b0:ce:82:88:8a:ee:98:2d:56:e3:6a:bc:92:e1:e2:6c: a6:b9:71:b1:69:db:6b:25:4c:96:c5:52:12:c2:cb:69:10:c0: 47:08:4a:ed:66:e2:9e:0d:bd:0f:d9:66:f2:cf:b7:1a:d2:b0: 8b:16:22:56:85:d0:01:7e:34:a8:6b:70:7c:5e:f3:e1:3c:da: 93:13:f7:c4:f3:71:d2:b3:f9:6e:91:6b:98:f5:f4:a2:ba:95: c6:ce:2e:b6:5a:ac:13:b3:0e:80:d4:cc:e4:a4:88:3d:2f:44: 31:ff:90:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQwNTA1MDMzNDUzWhcNMjQwNTEyMDMzNDUzWjAYMRYwFAYD VQQDEw02NjM2ZmU1ZS0yY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh6Rd8klkYgOnVdGOlve32wro6KGr59oGei7RKYs3V/RaEa0eq8NGPoY0EIg wy6thHh0ON+g6XN2tnG1GjarE5Y1v6nAOS7yEWKMJZsmKc7tfl7gxADLse7ymjuR iAAnvsXn01PIjvNtmqURa+yYLD1xVCnHu/rX2werrAn5xRxZgMBBFamMA2eKbiKp mBYmykkNqKEMP8pNRm3NPPoZnYmwh9YlTYWCCtdEm0SHQyuEQGTtvEa2WaY59zTL VdHCmW6/z8AB2eh5+Jr8HCrVPB46/ruvRLqt1VE/0PyELzM/z7x4X4lh7rHpVrv7 snYCRih0CdpUq9kzD/sZzwzRYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsmhaAh OoAzz8k5P1j5WNXc729iMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh1yU5Nv1fbT75oIDif9gL44syGNVcKicQRcCiCqz1u1Xt6RAg2yFb nm89V+w2XjdkCsCuD7wIoZvLRoYjf5q1ASxYzZ8miQO6G8e9VgqvX0YQjWb0J5S9 4E4+ISBgdvZ2fy6Kk1LV3U5nnWqPF+5SzxFz5kb4P7AYqkXQWh7vcG6BxRiml7sc qEIDUCx3rcIbYbDOgoiK7pgtVuNqvJLh4mymuXGxadtrJUyWxVISwstpEMBHCErt ZuKeDb0P2Wbyz7ca0rCLFiJWhdABfjSoa3B8XvPhPNqTE/fE83HSs/lukWuY9fSi upXGzi62WqwTsw6A1MzkpIg9L0Qx/5AF -----END CERTIFICATE-----Generated at Sun May 5 04:39:57 2024 by rpki-client on console-ams.rpki-client.org