$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: e94ZeniWKEzDpN8E0rbtPLdRa4jD2bcfoNa23/Ju8JI= Subject key identifier: F5:47:4D:42:24:0C:23:CE:11:2B:00:6E:21:D5:8F:15:39:50:37:BB Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0BA6 Signing time: Tue 30 Apr 2024 19:28:51 +0000 Manifest this update: Tue 30 Apr 2024 19:28:51 +0000 Manifest next update: Tue 07 May 2024 19:28:51 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: n92YP/CaYAQe38KbbGNFjMIXgmN00EoKC99Rbifhy+Q=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: SQXs/tY3XOSQNHiYfHzxydfLP1PY6AbFebk6F2wwSZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Apr 30 19:28:51 2024 GMT Not After : May 7 19:28:51 2024 GMT Subject: CN=66314673-64f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:32:a2:db:f8:dd:ab:e6:b4:8e:ec:7f:84: f3:8b:ed:69:9d:04:bb:bc:f3:97:d9:91:5b:32:bc: 2e:ca:6f:de:f1:fe:af:7b:eb:df:85:2f:52:85:ff: a2:f6:ab:99:6d:5c:c9:5a:e6:90:3d:71:8c:0f:f2: 61:81:da:76:0e:76:f3:c9:da:96:3a:65:5f:19:fb: d0:0c:b1:5a:df:d0:71:ed:ff:f3:9f:cd:b6:4e:a9: 3c:55:bc:df:c0:33:47:70:f9:90:06:c7:99:e7:e4: 41:58:89:25:12:e3:8c:16:59:c5:4f:86:0e:5e:5b: a5:48:47:11:d9:b4:d7:09:58:58:79:45:35:bf:cf: 9e:02:a8:ee:02:ac:27:8d:fb:2d:16:98:9e:30:aa: 94:4e:dc:51:a5:b5:e8:c0:df:33:e2:a8:fa:8f:af: d4:67:d2:98:ef:ad:bd:af:79:6e:f5:6f:9d:7b:46: 68:f5:fd:44:07:3d:82:42:b9:01:e5:40:9d:ca:c6: cf:96:af:18:e4:73:e5:5b:a9:49:16:05:35:ee:4a: 62:db:47:61:30:2a:f0:5f:4f:24:26:f0:5f:ad:7b: ee:96:40:24:44:1f:5b:c0:2d:da:2e:18:77:ab:f6: 67:f3:e6:1e:39:5a:c9:f5:c3:88:9f:42:17:d8:ab: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:47:4D:42:24:0C:23:CE:11:2B:00:6E:21:D5:8F:15:39:50:37:BB X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2f:cc:b1:c5:f9:df:cd:e5:b4:96:7c:0f:5c:9f:fe:b6:48: ca:b9:04:0d:99:95:5a:cb:c1:af:42:e8:27:98:19:cb:bf:dc: 08:da:e3:b9:63:25:4b:8a:c3:e5:31:5b:ae:86:41:5d:71:54: 74:93:35:e7:c7:7f:87:f4:2d:4f:e4:74:68:06:50:ad:e4:25: 06:17:e0:dd:21:25:22:1f:86:58:2e:62:26:ad:11:cb:77:46: 6a:8f:82:e0:a8:b3:bf:de:ae:f7:8a:e6:8c:20:a9:a2:f9:31: 37:1d:5b:0c:09:e9:8d:d0:85:91:17:d8:7b:96:a9:dc:33:ee: f2:05:34:83:cd:e3:fe:af:c2:75:6b:c8:91:2b:a5:0a:4e:96: da:bc:29:14:21:70:d2:b0:73:f2:ef:7f:3f:82:2f:6c:80:1e: f9:cd:51:97:96:91:41:c4:43:8b:07:4a:cc:6d:ca:32:c7:0a: 4b:ea:46:41:e6:7e:02:8c:19:44:f4:4f:34:89:7a:e1:a6:f7: b1:7e:06:09:0b:c2:00:d1:a7:2a:1c:f4:a8:5e:14:ee:df:b7: fb:8d:61:53:b2:4f:a5:ca:f2:79:f1:a1:a3:ba:14:36:17:30: 78:36:cc:f1:1a:ff:07:4a:31:8f:08:aa:0b:11:3f:e6:e8:de: 87:75:17:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjQwNDMwMTkyODUxWhcNMjQwNTA3MTkyODUxWjAYMRYwFAYD VQQDEw02NjMxNDY3My02NGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzecyotv43avmtI7sf4Tzi+1pnQS7vPOX2ZFbMrwuym/e8f6ve+vfhS9Shf+i 9quZbVzJWuaQPXGMD/Jhgdp2DnbzydqWOmVfGfvQDLFa39Bx7f/zn822Tqk8Vbzf wDNHcPmQBseZ5+RBWIklEuOMFlnFT4YOXlulSEcR2bTXCVhYeUU1v8+eAqjuAqwn jfstFpieMKqUTtxRpbXowN8z4qj6j6/UZ9KY7629r3lu9W+de0Zo9f1EBz2CQrkB 5UCdysbPlq8Y5HPlW6lJFgU17kpi20dhMCrwX08kJvBfrXvulkAkRB9bwC3aLhh3 q/Zn8+YeOVrJ9cOIn0IX2Kt5PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVHTUIk DCPOESsAbiHVjxU5UDe7MB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcL8yxxfnfzeW0lnwPXJ/+tkjKuQQNmZVay8GvQugnmBnLv9wI2uO5 YyVLisPlMVuuhkFdcVR0kzXnx3+H9C1P5HRoBlCt5CUGF+DdISUiH4ZYLmImrRHL d0Zqj4LgqLO/3q73iuaMIKmi+TE3HVsMCemN0IWRF9h7lqncM+7yBTSDzeP+r8J1 a8iRK6UKTpbavCkUIXDSsHPy738/gi9sgB75zVGXlpFBxEOLB0rMbcoyxwpL6kZB 5n4CjBlE9E80iXrhpvexfgYJC8IA0acqHPSoXhTu37f7jWFTsk+lyvJ58aGjuhQ2 FzB4NszxGv8HSjGPCKoLET/m6N6HdReB -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:58 2024 by rpki-client on console-fra.rpki-client.org