$ rpki-client -vvf rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft File: 1ZVULlIPSK9153kD6majnGTB0KM.mft (raw, json) Hash identifier: /Ijfaehk3uAcbNWpvDuOZoH3rxM9geC77OquKXqDqL0= Subject key identifier: 8E:37:AF:7E:0E:FB:01:5E:CF:4E:FD:0A:F9:2C:93:39:C1:B0:03:17 Authority key identifier: D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 Certificate issuer: /CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft Manifest number: 44 Signing time: Wed 15 May 2024 08:12:40 +0000 Manifest this update: Wed 15 May 2024 08:12:39 +0000 Manifest next update: Wed 22 May 2024 08:12:39 +0000 Files and hashes: 1: 1ZVULlIPSK9153kD6majnGTB0KM.crl (hash: nA9uwZI104UXtviZZluJklcKvawF+2rM1sHqL3EFG6M=) 2: A4F5FB1ED0BC11EE8238E71AC4F9AE02.roa (hash: bQkUW47Omh2zud2h3jRyO8DuSrBukJKJFd0HuML8p2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175866/serialNumber=D595542E520F48AF75E77903EA66A39C64C1D0A3 Validity Not Before: May 15 08:12:39 2024 GMT Not After : May 22 08:12:39 2024 GMT Subject: CN=66446e78-0e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:04:47:24:25:d0:60:73:71:9d:39:d2:d7: 59:16:38:44:6f:0c:36:79:6d:c0:bb:d1:18:70:7f: 79:24:49:d9:03:f9:17:15:6c:4f:03:94:1a:f8:06: 20:a4:8a:9b:b6:fa:7a:29:8e:e8:c7:b6:0a:59:75: fb:4e:e2:3e:86:be:8a:62:17:ff:16:bb:47:fa:f6: 99:8e:6a:8e:93:47:0c:d9:1f:7b:23:0f:48:40:02: 61:f4:a2:25:fe:c6:7c:29:2a:ac:4a:25:36:53:ce: 60:8d:c6:cc:f1:32:dd:05:40:dd:e7:3e:b1:c7:82: 39:c1:71:1c:02:65:99:09:0b:49:13:69:56:a1:b5: cf:47:86:3d:cc:89:2a:a5:4d:5f:48:2c:66:e1:37: 21:8e:35:3b:7f:79:b2:22:cf:8e:b5:4f:0c:a0:6c: ee:10:fd:ee:cb:fc:ca:f0:ec:c6:d7:ca:ce:d8:79: 0e:5c:79:2a:a5:f3:0d:e6:c1:dc:e5:cc:a7:14:73: 38:92:81:24:38:2a:65:e7:3a:e9:6a:d7:3a:1e:ac: 16:c6:59:8a:20:cf:96:0a:2a:d2:c7:22:c2:d6:07: a3:6a:e2:08:02:45:01:79:82:fb:c9:bb:f5:15:92: c1:86:09:4d:37:58:db:06:bc:ba:6e:ed:e7:a9:88: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:37:AF:7E:0E:FB:01:5E:CF:4E:FD:0A:F9:2C:93:39:C1:B0:03:17 X509v3 Authority Key Identifier: keyid:D5:95:54:2E:52:0F:48:AF:75:E7:79:03:EA:66:A3:9C:64:C1:D0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ZVULlIPSK9153kD6majnGTB0KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175866/F19D2202AFD911EE84C6F27BC4F9AE02/1ZVULlIPSK9153kD6majnGTB0KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:74:c2:57:d2:c4:d6:b4:dd:7b:45:ce:f8:86:d1:0a:dc:25: 55:6e:86:58:a2:4a:9b:8b:73:fd:52:15:9c:07:0c:2d:aa:61: f7:d1:60:56:8c:11:9e:94:12:14:2d:ff:71:09:04:75:36:7b: 0e:fd:7b:71:b9:ec:bc:09:67:a0:db:67:54:8a:c0:fb:c7:41: 4b:cf:e7:a8:bd:6a:4c:29:00:ca:e4:20:fc:58:3f:48:f1:0d: f7:8e:8a:57:4a:3e:ac:e1:45:0f:65:6c:40:81:8c:0d:7f:3f: 1c:64:64:3e:82:ba:f3:2c:d8:f6:b0:61:6d:c1:90:02:5c:28: 8f:99:00:61:60:47:c3:9f:3f:b2:b2:e9:01:e1:bf:45:11:30: 39:bd:84:47:1b:b6:3a:b1:04:da:02:c6:2e:21:64:31:4a:0c: fa:b9:96:e3:c1:d1:1b:a9:c2:dc:56:a4:e3:8a:49:98:b8:44: 08:fd:04:95:e4:f0:fc:41:15:cd:12:a3:20:05:28:43:cf:88: f7:24:8a:b7:32:bb:a6:b7:d2:85:05:ff:55:04:17:fe:3e:46: 81:6e:42:e1:86:9c:99:8d:cd:84:5e:e4:62:e6:69:83:cd:1b: 50:ae:0b:57:de:de:f1:98:87:9c:5b:d6:35:60:68:03:d4:5a: dd:3b:69:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTg2NjExMC8GA1UEBRMoRDU5NTU0MkU1MjBGNDhBRjc1RTc3OTAzRUE2NkEzOUM2 NEMxRDBBMzAeFw0yNDA1MTUwODEyMzlaFw0yNDA1MjIwODEyMzlaMBgxFjAUBgNV BAMTDTY2NDQ2ZTc4LTBlNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAuwRHJCXQYHNxnTnS11kWOERvDDZ5bcC70Rhwf3kkSdkD+RcVbE8DlBr4BiCk ipu2+nopjujHtgpZdftO4j6GvopiF/8Wu0f69pmOao6TRwzZH3sjD0hAAmH0oiX+ xnwpKqxKJTZTzmCNxszxMt0FQN3nPrHHgjnBcRwCZZkJC0kTaVahtc9Hhj3MiSql TV9ILGbhNyGONTt/ebIiz461TwygbO4Q/e7L/Mrw7MbXys7YeQ5ceSql8w3mwdzl zKcUcziSgSQ4KmXnOulq1zoerBbGWYogz5YKKtLHIsLWB6Nq4ggCRQF5gvvJu/UV ksGGCU03WNsGvLpu7eepiDNdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjjevfg77 AV7PTv0K+SyTOcGwAxcwHwYDVR0jBBgwFoAU1ZVULlIPSK9153kD6majnGTB0KMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1ODY2L0YxOUQyMjAyQUZE OTExRUU4NEM2RjI3QkM0RjlBRTAyLzFaVlVMbElQU0s5MTUza0Q2bWFqbkdUQjBL TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVpWVUxsSVBTSzkxNTNrRDZtYWpuR1RCMEtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 ODY2L0YxOUQyMjAyQUZEOTExRUU4NEM2RjI3QkM0RjlBRTAyLzFaVlVMbElQU0s5 MTUza0Q2bWFqbkdUQjBLTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ50wlfSxNa03XtFzviG0QrcJVVuhliiSpuLc/1SFZwHDC2qYffRYFaM EZ6UEhQt/3EJBHU2ew79e3G57LwJZ6DbZ1SKwPvHQUvP56i9akwpAMrkIPxYP0jx DfeOildKPqzhRQ9lbECBjA1/PxxkZD6CuvMs2PawYW3BkAJcKI+ZAGFgR8OfP7Ky 6QHhv0URMDm9hEcbtjqxBNoCxi4hZDFKDPq5luPB0RupwtxWpOOKSZi4RAj9BJXk 8PxBFc0SoyAFKEPPiPckircyu6a30oUF/1UEF/4+RoFuQuGGnJmNzYRe5GLmaYPN G1CuC1fe3vGYh5xb1jVgaAPUWt07ae8= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org