$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: NY8+N98UDRPD3NMViPt7XFPD4AHD5kveXPvVxxGFflQ= Subject key identifier: 29:DB:76:AB:B5:7F:36:C3:F3:E3:86:1B:F8:8C:BD:72:65:C3:09:44 Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 94 Signing time: Tue 07 May 2024 06:57:40 +0000 Manifest this update: Tue 07 May 2024 06:57:39 +0000 Manifest next update: Tue 14 May 2024 06:57:39 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: iQyuvpXyhxn50f3KhPTyN58GxLWLQON/KxNi4bXUjEk=) 2: 4950E3D278DD11EE8A6C4021C4F9AE02.roa (hash: N7VzH0midsTlxjV19OTYCmxTCrS2K3GJgRsMKbOU77U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 06:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: May 7 06:57:39 2024 GMT Not After : May 14 06:57:39 2024 GMT Subject: CN=6639d0e4-02c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:6e:79:c3:c1:2d:93:d1:69:19:36:97:a7: 5e:77:4b:cd:8c:5c:8d:cf:18:4f:0d:b2:ad:54:98: 54:6b:c3:d6:f6:79:59:8b:2a:c8:3a:e6:b4:3e:6c: 05:07:38:ed:70:21:46:f7:b0:32:8e:41:ce:33:a4: af:c3:31:ce:9e:8d:08:4c:ce:29:24:2b:73:22:14: e2:70:dc:e4:21:9b:1a:55:d9:2e:59:43:c8:c9:28: 4d:23:cb:3b:a4:f2:13:aa:d7:ce:3a:7d:b7:45:13: 3c:71:a6:ed:d8:2a:25:bd:4a:85:9e:4a:04:af:0e: 1c:e9:96:5b:2c:a0:d5:03:48:b5:be:3c:e8:87:53: a1:e3:ea:50:49:ec:cc:5b:5f:50:1f:71:e1:54:3a: 1c:bc:96:04:a5:3a:df:fd:1d:91:6d:cf:af:fe:ab: f1:74:35:18:6f:bb:9d:ae:ad:c7:db:3d:32:0e:d6: cb:1b:af:2e:40:e3:c3:2e:60:a9:96:30:6e:f9:9d: 6b:0d:83:97:cf:3e:ea:de:9f:69:21:49:e6:14:9c: 9a:11:5b:e7:f3:56:de:63:a5:55:6a:a1:8c:73:54: b8:62:0c:88:c0:6e:63:4b:b5:b8:87:7e:49:05:42: bc:5e:05:ef:fa:8b:ed:ec:d4:d3:30:a6:6a:e5:b6: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:76:AB:B5:7F:36:C3:F3:E3:86:1B:F8:8C:BD:72:65:C3:09:44 X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:83:0a:21:0a:12:d0:8d:b0:b5:d7:81:82:a8:6e:e2:a2: 02:6f:d7:ab:f5:ee:e1:06:2e:9c:e1:88:79:bd:74:f4:33:27: f3:a7:e8:07:15:37:f0:2b:80:54:7f:15:80:b4:f8:8c:a6:21: 73:ac:fe:49:5e:c3:ab:77:2d:4e:96:7c:17:98:d7:c9:0d:c5: f2:3e:0c:ed:94:a2:9c:11:78:7d:7e:f2:46:f0:2a:2f:cc:7c: c2:e1:e7:b2:27:80:8f:fa:16:49:cc:7c:ed:6a:71:46:a2:3d: 2c:a6:3b:a4:b6:90:3e:c9:a3:43:00:8b:2a:44:71:5e:e5:e5: b8:f2:f4:c3:dc:5b:bb:c4:93:e6:6d:ec:d2:43:5c:69:91:65: 3f:a6:59:a4:b0:96:ba:39:e8:2a:6d:bf:7d:c9:f2:af:02:25: f7:7f:dd:4b:3e:90:6b:d5:69:0c:83:15:f8:1e:2f:8d:d2:6f: 74:8c:0c:4d:bd:51:29:e2:fc:fa:8b:83:aa:d2:3a:5a:d4:a0: 38:05:3d:c2:44:82:e4:56:9d:0d:95:d6:74:ff:1b:4c:62:67: 01:45:94:78:6c:7b:1c:ca:e8:69:cb:dd:a8:38:aa:c4:9c:b4: 15:d0:2f:14:0f:78:c6:37:10:69:0d:71:1c:ca:68:16:61:bf: 93:9e:88:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjQwNTA3MDY1NzM5WhcNMjQwNTE0MDY1NzM5WjAYMRYwFAYD VQQDEw02NjM5ZDBlNC0wMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHRuecPBLZPRaRk2l6ded0vNjFyNzxhPDbKtVJhUa8PW9nlZiyrIOua0PmwF BzjtcCFG97AyjkHOM6SvwzHOno0ITM4pJCtzIhTicNzkIZsaVdkuWUPIyShNI8s7 pPITqtfOOn23RRM8cabt2ColvUqFnkoErw4c6ZZbLKDVA0i1vjzoh1Oh4+pQSezM W19QH3HhVDocvJYEpTrf/R2Rbc+v/qvxdDUYb7udrq3H2z0yDtbLG68uQOPDLmCp ljBu+Z1rDYOXzz7q3p9pIUnmFJyaEVvn81beY6VVaqGMc1S4YgyIwG5jS7W4h35J BUK8XgXv+ovt7NTTMKZq5bYBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnbdqu1 fzbD8+OGG/iMvXJlwwlEMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyYMKIQoS0I2wtdeBgqhu4qICb9er9e7hBi6c4Yh5vXT0Myfzp+gH FTfwK4BUfxWAtPiMpiFzrP5JXsOrdy1OlnwXmNfJDcXyPgztlKKcEXh9fvJG8Cov zHzC4eeyJ4CP+hZJzHztanFGoj0spjuktpA+yaNDAIsqRHFe5eW48vTD3Fu7xJPm bezSQ1xpkWU/plmksJa6Oegqbb99yfKvAiX3f91LPpBr1WkMgxX4Hi+N0m90jAxN vVEp4vz6i4Oq0jpa1KA4BT3CRILkVp0NldZ0/xtMYmcBRZR4bHscyuhpy92oOKrE nLQV0C8UD3jGNxBpDXEcymgWYb+TnogB -----END CERTIFICATE-----Generated at Tue May 7 09:42:11 2024 by rpki-client on console-fra.rpki-client.org