$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json) Hash identifier: 3DICgpvo3H+f2IqEyrnX9w7vhs3h2W0WFlKYR/fG8ys= Subject key identifier: 94:B6:1F:56:E7:FE:AE:11:18:70:E2:A1:7E:7B:EB:88:0C:8A:22:FE Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Certificate serial: 222C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft Manifest number: 221F Signing time: Sat 04 May 2024 16:14:48 +0000 Manifest this update: Sat 04 May 2024 16:14:48 +0000 Manifest next update: Sat 11 May 2024 16:14:48 +0000 Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: jskh9zdq9SlPa7bAr48L11fSR80lZMShX02vGqLVdSY=) 2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: gYjMHhjYQFKOWHetvRQNNjg0KgSGH44iQ64b+ALMA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8748 (0x222c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C Validity Not Before: May 4 16:14:48 2024 GMT Not After : May 11 16:14:48 2024 GMT Subject: CN=66365ef8-9ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:0f:04:15:b9:b6:64:a0:d0:0b:74:81:f1: 3c:24:96:c9:6b:e9:d8:a8:88:cb:d8:2e:55:37:df: a0:9b:b4:41:f7:8f:e5:f3:6d:98:36:8b:f0:74:3a: eb:d4:3a:26:af:3d:af:c3:81:4f:f2:ae:6a:b5:4c: 22:7d:39:37:f0:bb:e6:d5:38:90:56:4f:fa:a7:c3: bb:33:c4:92:d5:36:4f:6e:92:2a:39:19:1f:09:a8: 82:be:17:43:63:7b:28:76:d8:27:96:d2:8e:52:4d: 50:b8:d7:aa:76:21:3e:37:57:9c:11:f2:5b:e1:04: 78:db:31:10:3b:55:39:57:37:ea:b1:29:c2:e0:39: 63:ed:f4:63:f8:d9:e2:32:83:ad:df:5e:f3:e2:6d: 47:67:9e:0e:3e:75:c3:26:f2:01:04:9e:87:62:11: af:7d:99:68:e2:5a:d0:e3:85:a0:48:d7:36:ef:1f: b7:10:98:26:e2:0e:20:47:39:d6:25:80:ae:15:90: 0f:d6:f4:4c:c6:07:31:9e:2c:48:25:35:cd:79:d0: 58:aa:d2:1b:de:76:18:4f:af:a4:f5:94:42:9f:b2: 45:8a:2d:e6:c1:26:66:ee:69:08:d3:0f:52:13:0d: 4d:98:37:b7:fc:ab:a8:51:14:7f:0c:58:22:2b:d3: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:1F:56:E7:FE:AE:11:18:70:E2:A1:7E:7B:EB:88:0C:8A:22:FE X509v3 Authority Key Identifier: keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fc:be:d6:d5:9e:eb:7a:7a:b4:d6:48:21:73:ac:04:80:60: c6:cd:5c:81:9d:e2:85:84:f8:9b:9c:17:b6:35:2f:f4:47:08: db:ad:0d:ea:66:0f:58:65:e4:ea:fc:30:1d:05:e6:3e:c2:bc: 18:5c:4e:b9:ca:67:77:9c:1f:3b:ab:22:bc:31:9e:dd:32:f1: 8a:bb:63:d5:b2:63:26:d4:20:af:9b:2f:cb:7b:7e:9b:b4:56: 7c:25:59:34:09:8e:40:73:09:42:65:84:da:a2:68:82:ca:aa: 10:2f:01:33:0c:bd:92:7c:e8:0d:27:a0:f1:f6:e0:7f:8d:f2: 13:92:57:fa:7b:ac:f7:b0:35:fe:3f:34:fd:2a:c9:51:1e:eb: 4f:49:07:6f:80:4b:79:16:45:5d:77:86:26:c4:18:4d:11:76: b1:6e:f2:80:2d:b7:a2:20:c1:51:b8:f7:53:46:aa:23:a5:db: 55:82:b6:da:9f:20:0f:e1:8c:e2:31:9b:26:48:2c:92:ba:35: 9e:84:34:31:7a:a1:a6:8c:c4:24:8e:e2:de:eb:21:d1:60:d9: bc:a8:19:a9:5d:5e:1b:aa:8d:9f:71:af:b4:0b:ee:2e:02:83: 15:00:da:c6:41:f1:35:4c:44:44:43:e9:a8:df:b9:63:9e:51: b5:ee:c9:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz NTc4QjEzOUMwHhcNMjQwNTA0MTYxNDQ4WhcNMjQwNTExMTYxNDQ4WjAYMRYwFAYD VQQDEw02NjM2NWVmOC05ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTEPBBW5tmSg0At0gfE8JJbJa+nYqIjL2C5VN9+gm7RB94/l822YNovwdDrr 1Domrz2vw4FP8q5qtUwifTk38Lvm1TiQVk/6p8O7M8SS1TZPbpIqORkfCaiCvhdD Y3sodtgnltKOUk1QuNeqdiE+N1ecEfJb4QR42zEQO1U5VzfqsSnC4Dlj7fRj+Nni MoOt317z4m1HZ54OPnXDJvIBBJ6HYhGvfZlo4lrQ44WgSNc27x+3EJgm4g4gRznW JYCuFZAP1vRMxgcxnixIJTXNedBYqtIb3nYYT6+k9ZRCn7JFii3mwSZm7mkI0w9S Ew1NmDe3/KuoURR/DFgiK9OVzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS2H1bn /q4RGHDioX5764gMiiL+MB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0 QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/L7W1Z7renq01kghc6wEgGDGzVyBneKFhPibnBe2NS/0RwjbrQ3q Zg9YZeTq/DAdBeY+wrwYXE65ymd3nB87qyK8MZ7dMvGKu2PVsmMm1CCvmy/Le36b tFZ8JVk0CY5AcwlCZYTaomiCyqoQLwEzDL2SfOgNJ6Dx9uB/jfITklf6e6z3sDX+ PzT9KslRHutPSQdvgEt5FkVdd4YmxBhNEXaxbvKALbeiIMFRuPdTRqojpdtVgrba nyAP4YziMZsmSCySujWehDQxeqGmjMQkjuLe6yHRYNm8qBmpXV4bqo2fca+0C+4u AoMVANrGQfE1TEREQ+mo37ljnlG17smZ -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org