$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft File: rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json) Hash identifier: JijEsv+PfqZQ/xzJYD33+j4zH93D/0oZJx5W1xWQv0Y= Subject key identifier: 72:EE:7A:06:93:15:55:5D:90:D9:22:84:E1:1F:22:07:66:F5:25:1E Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 Certificate issuer: /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft Manifest number: DC Signing time: Wed 01 May 2024 06:18:47 +0000 Manifest this update: Wed 01 May 2024 06:18:46 +0000 Manifest next update: Wed 08 May 2024 06:18:46 +0000 Files and hashes: 1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: vVDahsbFNOCWjgnI0s57RQ42pudJOHPqT6K6PCQbZDs=) 2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: nXIaKuUBJG5iCj/tPzK1KC24tDJ2glAmEW+mAsZE8j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Validity Not Before: May 1 06:18:46 2024 GMT Not After : May 8 06:18:46 2024 GMT Subject: CN=6631dec7-4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:64:a7:7d:da:65:c9:26:32:5c:e1:b0:23: b7:98:fc:24:0c:92:10:72:55:f0:9f:9d:8c:7f:d9: e4:78:8a:f9:ff:54:8e:86:68:8c:db:ae:60:3e:2c: 7e:ce:36:04:8d:df:93:3c:5b:48:2c:49:d2:ac:8e: e9:d3:47:0f:84:5a:38:b0:63:a7:d6:f8:7c:57:ad: 64:a2:61:1d:e6:25:cc:92:bd:b2:06:63:da:e5:87: 55:99:92:c4:41:2b:a7:a7:f8:38:b4:f2:9e:3f:45: ee:ec:8f:d9:30:30:3d:a4:2d:87:e7:29:f3:86:e8: fb:10:aa:f7:2f:43:32:39:8c:9c:c7:4b:40:fb:c9: b8:62:25:66:f7:d7:0b:ad:50:50:ad:fe:16:7c:f5: 88:f5:00:2c:bf:6d:6f:16:a5:0c:2f:c8:11:ed:8b: 31:ec:84:c1:e2:82:76:ba:6e:4d:65:eb:10:7a:50: 76:c0:8b:f0:7d:48:c6:41:48:0c:a3:cf:54:07:17: e8:f2:5e:68:d4:11:5a:c3:8d:16:aa:34:bb:94:66: 49:65:88:e0:fc:d2:27:13:10:90:c3:c6:ac:34:3c: cf:47:71:5a:36:07:25:74:bf:ce:aa:2b:e2:77:04: eb:4e:a5:fa:23:52:bd:29:bc:b2:db:62:43:92:ed: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:7A:06:93:15:55:5D:90:D9:22:84:E1:1F:22:07:66:F5:25:1E X509v3 Authority Key Identifier: keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:16:9c:c1:66:eb:85:43:cf:af:db:94:a0:34:d7:f1:92: e9:a7:89:67:8e:b5:00:53:92:a7:51:09:d5:04:d6:04:92:ee: dc:8d:d0:1c:99:64:4e:8b:c9:95:94:1e:1c:09:94:40:5d:21: 50:6c:cf:5b:2a:6f:06:fb:8b:07:ab:7b:26:93:18:9e:7b:ae: 4c:9b:9c:ff:1b:d2:5a:0e:86:43:f7:60:0d:f3:0f:b8:bb:75: a2:7c:15:0d:18:0f:b8:06:d0:b0:b9:11:1b:60:e1:c6:ca:0a: 95:06:a2:0c:6c:dd:87:86:f9:b2:57:d0:89:ac:31:ca:1d:5c: bb:23:d4:94:6c:62:31:f8:f8:6d:2c:29:1b:fd:d5:7f:0d:8f: 4c:90:29:3d:c6:b8:d2:e7:6d:2f:2c:40:9d:56:18:f6:22:67: a4:50:aa:4a:1f:de:00:56:44:34:b4:cc:30:fe:4e:44:33:93: 5e:76:55:ab:94:05:61:be:b8:85:82:00:62:d3:2b:8c:2e:93: ee:fa:b0:f2:f8:ac:3a:ec:3f:67:ff:30:a4:5b:59:91:c3:27: 25:08:c1:fe:c7:ad:54:dc:2a:fa:97:01:be:6d:81:c6:a1:96: 34:3b:d2:c6:16:b6:29:9b:0e:0f:f5:82:07:66:63:fc:b6:7a: 6f:76:b0:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc0MjcxMTAvBgNVBAUTKEFEOTUxNURGOTVCRkQ0RjhFREZGNUQ4Q0JEMkFCNEI5 QkQ4NEY4QTQwHhcNMjQwNTAxMDYxODQ2WhcNMjQwNTA4MDYxODQ2WjAYMRYwFAYD VQQDEw02NjMxZGVjNy00ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTZkp33aZckmMlzhsCO3mPwkDJIQclXwn52Mf9nkeIr5/1SOhmiM265gPix+ zjYEjd+TPFtILEnSrI7p00cPhFo4sGOn1vh8V61komEd5iXMkr2yBmPa5YdVmZLE QSunp/g4tPKeP0Xu7I/ZMDA9pC2H5ynzhuj7EKr3L0MyOYycx0tA+8m4YiVm99cL rVBQrf4WfPWI9QAsv21vFqUML8gR7Ysx7ITB4oJ2um5NZesQelB2wIvwfUjGQUgM o89UBxfo8l5o1BFaw40WqjS7lGZJZYjg/NInExCQw8asNDzPR3FaNgcldL/Oqivi dwTrTqX6I1K9Kbyy22JDku30qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLuegaT FVVdkNkihOEfIgdm9SUeMB8GA1UdIwQYMBaAFK2VFd+Vv9T47f9djL0qtLm9hPik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzQyNy82QUI5MUZGNkJE ODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQanRfMTJNdlNxMHViMkUt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JaVVYzNVdfMVBqdF8xMk12U3EwdWIyRS1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzQyNy82QUI5MUZGNkJEODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQ anRfMTJNdlNxMHViMkUtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnoBacwWbrhUPPr9uUoDTX8ZLpp4lnjrUAU5KnUQnVBNYEku7cjdAc mWROi8mVlB4cCZRAXSFQbM9bKm8G+4sHq3smkxiee65Mm5z/G9JaDoZD92AN8w+4 u3WifBUNGA+4BtCwuREbYOHGygqVBqIMbN2HhvmyV9CJrDHKHVy7I9SUbGIx+Pht LCkb/dV/DY9MkCk9xrjS520vLECdVhj2ImekUKpKH94AVkQ0tMww/k5EM5NedlWr lAVhvriFggBi0yuMLpPu+rDy+Kw67D9n/zCkW1mRwyclCMH+x61U3Cr6lwG+bYHG oZY0O9LGFrYpmw4P9YIHZmP8tnpvdrAk -----END CERTIFICATE-----Generated at Wed May 1 07:06:28 2024 by rpki-client on console-fra.rpki-client.org