$ rpki-client -vvf rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft File: zHVip1iMEglcwjP9RsOxHXI91M8.mft (raw, json) Hash identifier: dPuylbYSIw0RFMzoPRdO7scJOlulERO7ddb3nh6n8lY= Subject key identifier: ED:02:8D:6E:46:AA:05:A8:6A:B1:BD:34:99:FE:27:BE:72:91:41:C1 Authority key identifier: CC:75:62:A7:58:8C:12:09:5C:C2:33:FD:46:C3:B1:1D:72:3D:D4:CF Certificate issuer: /CN=A915A1D9/serialNumber=CC7562A7588C12095CC233FD46C3B11D723DD4CF Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHVip1iMEglcwjP9RsOxHXI91M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft Manifest number: 0123 Signing time: Sun 05 May 2024 05:14:41 +0000 Manifest this update: Sun 05 May 2024 05:14:40 +0000 Manifest next update: Sun 12 May 2024 05:14:40 +0000 Files and hashes: 1: zHVip1iMEglcwjP9RsOxHXI91M8.crl (hash: ZjRwjIlkc+XDuW/Mu5iQigCvSdOEVULLGNUxmnn02xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.crl rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHVip1iMEglcwjP9RsOxHXI91M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A1D9/serialNumber=CC7562A7588C12095CC233FD46C3B11D723DD4CF Validity Not Before: May 5 05:14:40 2024 GMT Not After : May 12 05:14:40 2024 GMT Subject: CN=663715c0-86ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:c4:a0:16:4e:5c:52:b9:bb:c6:bb:50:0a: b7:d2:ae:8f:c4:ba:4b:d8:38:33:62:9b:fc:f0:cf: d3:8a:2b:18:39:12:f4:b2:e4:1c:68:8f:e7:5a:30: 3f:d4:2e:a1:6a:43:25:6d:2c:cf:f8:4e:cd:d0:7f: 66:8b:8e:ea:e1:fa:69:c4:cf:6b:02:34:2e:02:1e: 11:df:ad:52:b1:88:6e:c3:d6:c9:69:b6:22:ea:8e: d8:14:8d:19:fd:16:7a:91:16:d1:37:9f:9d:d8:ec: 58:db:3a:c8:1e:5d:93:e7:e0:d2:c7:77:48:b6:f6: d0:65:e9:19:f8:f0:16:a1:71:d7:46:a1:1c:aa:81: 5e:ae:df:d7:76:b3:51:aa:4e:b4:6b:90:e5:44:5b: ab:94:c3:20:35:38:25:39:73:cc:42:6c:de:b3:b8: c0:6d:61:9a:12:3a:c4:80:aa:1f:ef:35:33:67:f0: d7:e3:dc:b6:6b:88:7d:f0:03:ba:0d:bc:b9:74:6b: b9:4b:d4:ff:6c:f0:07:80:a2:14:40:86:62:b3:a5: d5:3c:d0:24:80:27:fe:d1:e5:ef:d6:55:e8:e0:f5: 2e:70:22:a7:a5:dc:f1:5f:de:a5:70:09:bb:43:1b: 48:04:b9:c3:d0:d9:14:60:34:47:9d:fe:1a:d5:b6: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:8D:6E:46:AA:05:A8:6A:B1:BD:34:99:FE:27:BE:72:91:41:C1 X509v3 Authority Key Identifier: keyid:CC:75:62:A7:58:8C:12:09:5C:C2:33:FD:46:C3:B1:1D:72:3D:D4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHVip1iMEglcwjP9RsOxHXI91M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A1D9/4B515576535F11EDAC762E34C4F9AE02/zHVip1iMEglcwjP9RsOxHXI91M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:57:8c:70:c3:46:63:02:99:e0:96:3a:3e:f2:e8:f3:1d:0a: f6:58:73:80:3f:d9:54:d1:69:c1:0c:f4:d1:bc:cc:67:bc:9d: 6b:9c:2a:5f:79:29:35:a3:01:f1:02:7f:4e:61:f7:74:18:76: a2:56:26:7a:ba:08:22:91:08:1f:aa:57:48:d3:a0:73:2f:0a: 06:cc:ba:f0:46:88:05:20:e0:15:4d:82:20:3a:b2:c2:86:6e: 75:5f:74:fc:33:cc:8d:d1:4f:d8:89:83:6f:ea:cd:51:b5:ee: 55:db:07:ba:b4:69:8e:85:06:90:3f:e8:19:da:68:2d:70:b4: 52:20:a8:02:26:c9:32:80:2a:b4:b8:8a:e5:40:fb:3d:e2:4a: d3:ff:06:a8:6b:5c:11:db:25:09:ec:68:b9:6d:d1:97:ba:75: b5:92:d4:5a:8d:82:79:8d:c4:6d:cf:8b:96:f9:72:94:64:9d: 99:7f:58:14:ce:43:9b:45:e0:07:fe:73:e2:9b:b7:7a:3c:8e: f2:57:89:cb:6c:6d:fa:f0:d0:c0:7b:cd:db:f5:dc:0b:55:3f: 32:64:72:72:99:e8:29:5a:13:03:dc:af:78:4c:88:99:1c:af: 17:cd:c7:ea:68:81:12:45:79:47:9c:6f:e2:4c:5e:7c:6c:a4: 5b:c2:fd:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExRDkxMTAvBgNVBAUTKENDNzU2MkE3NTg4QzEyMDk1Q0MyMzNGRDQ2QzNCMTFE NzIzREQ0Q0YwHhcNMjQwNTA1MDUxNDQwWhcNMjQwNTEyMDUxNDQwWjAYMRYwFAYD VQQDEw02NjM3MTVjMC04NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslHEoBZOXFK5u8a7UAq30q6PxLpL2DgzYpv88M/TiisYORL0suQcaI/nWjA/ 1C6hakMlbSzP+E7N0H9mi47q4fppxM9rAjQuAh4R361SsYhuw9bJabYi6o7YFI0Z /RZ6kRbRN5+d2OxY2zrIHl2T5+DSx3dItvbQZekZ+PAWoXHXRqEcqoFert/XdrNR qk60a5DlRFurlMMgNTglOXPMQmzes7jAbWGaEjrEgKof7zUzZ/DX49y2a4h98AO6 Dby5dGu5S9T/bPAHgKIUQIZis6XVPNAkgCf+0eXv1lXo4PUucCKnpdzxX96lcAm7 QxtIBLnD0NkUYDRHnf4a1bYhTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0CjW5G qgWoarG9NJn+J75ykUHBMB8GA1UdIwQYMBaAFMx1YqdYjBIJXMIz/UbDsR1yPdTP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTFEOS80QjUxNTU3NjUz NUYxMUVEQUM3NjJFMzRDNEY5QUUwMi96SFZpcDFpTUVnbGN3alA5UnNPeEhYSTkx TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pIVmlwMWlNRWdsY3dqUDlSc094SFhJOTFNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTFEOS80QjUxNTU3NjUzNUYxMUVEQUM3NjJFMzRDNEY5QUUwMi96SFZpcDFpTUVn bGN3alA5UnNPeEhYSTkxTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaV4xww0ZjApngljo+8ujzHQr2WHOAP9lU0WnBDPTRvMxnvJ1rnCpf eSk1owHxAn9OYfd0GHaiViZ6uggikQgfqldI06BzLwoGzLrwRogFIOAVTYIgOrLC hm51X3T8M8yN0U/YiYNv6s1Rte5V2we6tGmOhQaQP+gZ2mgtcLRSIKgCJskygCq0 uIrlQPs94krT/waoa1wR2yUJ7Gi5bdGXunW1ktRajYJ5jcRtz4uW+XKUZJ2Zf1gU zkObReAH/nPim7d6PI7yV4nLbG368NDAe83b9dwLVT8yZHJymegpWhMD3K94TIiZ HK8XzcfqaIESRXlHnG/iTF58bKRbwv2H -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org