$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: k6CFCnR5Bhn+EKkfhOpjAHZDBcGT7/7M5xi3EaGhUyU= Subject key identifier: C4:94:32:47:3B:51:85:9C:CB:CC:B8:E2:C5:81:EF:A9:C2:9F:93:A6 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 03C2 Signing time: Tue 07 May 2024 02:25:36 +0000 Manifest this update: Tue 07 May 2024 02:25:36 +0000 Manifest next update: Tue 14 May 2024 02:25:36 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: JtlrEXYFQiRM8UdB7JLNSLTc8Eu/g349p484mZlSquc=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: 6fC5uJsYuT7amsDta892a0EU/d7pcupqa3A43Hhp7pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: May 7 02:25:36 2024 GMT Not After : May 14 02:25:36 2024 GMT Subject: CN=66399120-72f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:be:7a:ae:56:bf:5d:e0:e3:a5:66:d9:a1: cb:2a:05:6f:98:0b:97:7d:27:8f:5c:89:31:e9:9e: 36:0e:98:cc:9c:38:59:7d:f5:b8:1c:14:ea:0e:db: 01:fc:15:45:49:d5:3e:fb:84:81:1a:52:6d:af:ec: 7d:15:0a:ca:6e:b3:9e:16:09:10:74:03:84:ed:e0: 67:dc:14:af:f7:2a:63:51:b7:7b:24:21:01:78:17: 88:86:8a:f7:e5:25:0a:f2:2d:39:ab:25:38:92:be: 56:d9:a1:c0:04:a7:82:6d:20:1d:4a:84:9f:ea:c7: 68:e4:1a:19:84:65:da:c5:0f:2a:f9:3e:1b:d2:c6: e2:dc:02:c3:1a:83:7b:66:7a:b3:2c:55:c3:ef:11: 95:46:48:20:8f:82:c9:1d:90:4b:18:93:f6:d0:7c: 23:5d:4e:86:b4:6e:f3:d3:84:fc:a8:4e:4f:ce:82: dd:28:c1:c2:8b:d6:6d:56:7b:dd:f9:ec:87:8f:4f: af:d5:d0:d4:d1:89:8d:a0:ca:35:ec:df:02:7c:27: 9f:97:d4:92:fd:f8:89:9f:8c:e2:09:ac:cc:02:94: 47:60:36:ae:9d:86:92:22:ee:f7:a4:94:b1:43:7b: 2f:f6:e6:9f:2b:3b:ec:a8:12:55:24:66:39:d8:37: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:94:32:47:3B:51:85:9C:CB:CC:B8:E2:C5:81:EF:A9:C2:9F:93:A6 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b6:2c:30:66:0e:6a:74:c7:17:2d:e6:ae:43:a1:b5:1b:a6: 8c:fb:ce:b0:02:d2:92:68:1c:5c:d7:7a:4f:5b:28:df:62:39: 15:ef:55:f7:29:e0:b0:cc:8a:ea:7e:54:ad:35:4b:d4:68:e7: 3a:0b:8d:50:17:e4:67:6c:df:08:4f:7e:9d:8d:b4:9e:38:dd: 8c:25:5a:99:cc:3e:e3:98:ac:6b:97:58:40:4c:44:43:2d:1b: 72:2a:86:a1:92:88:0f:a6:a6:e7:a7:ee:04:aa:42:66:f4:34: 1a:53:9b:49:df:0f:1b:0f:a8:45:ca:c7:08:fb:4d:27:5e:f4: f6:1d:55:5c:6b:1f:37:df:a5:87:07:69:f7:28:0b:c5:f1:49: 5b:8c:9f:9e:c5:33:92:de:fa:22:87:6e:01:83:f8:be:08:d9: 44:fe:66:10:45:e1:09:ce:23:d0:49:27:69:9f:db:67:a8:e2: 08:4e:dd:86:39:11:dd:60:00:c5:94:70:69:05:a2:31:bc:e9: cc:c5:de:5f:e7:a2:27:68:5e:b4:4a:21:78:08:61:b4:ce:71: 09:b2:ce:28:71:a5:a4:3d:e0:74:56:c2:c4:80:94:3a:e1:89: c7:d8:54:14:55:99:88:3a:2d:a3:50:85:a6:76:37:33:fd:99: 74:6b:4d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjQwNTA3MDIyNTM2WhcNMjQwNTE0MDIyNTM2WjAYMRYwFAYD VQQDEw02NjM5OTEyMC03MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo2+eq5Wv13g46Vm2aHLKgVvmAuXfSePXIkx6Z42DpjMnDhZffW4HBTqDtsB /BVFSdU++4SBGlJtr+x9FQrKbrOeFgkQdAOE7eBn3BSv9ypjUbd7JCEBeBeIhor3 5SUK8i05qyU4kr5W2aHABKeCbSAdSoSf6sdo5BoZhGXaxQ8q+T4b0sbi3ALDGoN7 ZnqzLFXD7xGVRkggj4LJHZBLGJP20HwjXU6GtG7z04T8qE5PzoLdKMHCi9ZtVnvd +eyHj0+v1dDU0YmNoMo17N8CfCefl9SS/fiJn4ziCazMApRHYDaunYaSIu73pJSx Q3sv9uafKzvsqBJVJGY52DejkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSUMkc7 UYWcy8y44sWB76nCn5OmMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCotiwwZg5qdMcXLeauQ6G1G6aM+86wAtKSaBxc13pPWyjfYjkV71X3 KeCwzIrqflStNUvUaOc6C41QF+RnbN8IT36djbSeON2MJVqZzD7jmKxrl1hATERD LRtyKoahkogPpqbnp+4EqkJm9DQaU5tJ3w8bD6hFyscI+00nXvT2HVVcax8336WH B2n3KAvF8UlbjJ+exTOS3voih24Bg/i+CNlE/mYQReEJziPQSSdpn9tnqOIITt2G ORHdYADFlHBpBaIxvOnMxd5f56InaF60SiF4CGG0znEJss4ocaWkPeB0VsLEgJQ6 4YnH2FQUVZmIOi2jUIWmdjcz/Zl0a00k -----END CERTIFICATE-----Generated at Tue May 7 03:10:19 2024 by rpki-client on console-ams.rpki-client.org