$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: BVpC8MWJ+kbIfEj/j6ml/JGzppydKeYVyFz9FRY4jd0= Subject key identifier: C7:54:9B:65:30:AE:B2:6D:EF:28:C2:4C:30:AA:A7:FD:1E:F5:E6:FF Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2C8E Signing time: Tue 30 Apr 2024 15:49:40 +0000 Manifest this update: Tue 30 Apr 2024 15:49:40 +0000 Manifest next update: Tue 07 May 2024 15:49:40 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: p38yCO/d814TTSWuytSCXC2B9V6V6+NbRoFfLrZZ2FE=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: /kSK+t6Uui5gY+E46gDVyS5fJCRJ3UL5yOuwfJ+DnWw=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: peX1Vn1tpvxKT5ffW5rW/7Y8G0QyNA6fOUj8BiUa72c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11438 (0x2cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Apr 30 15:49:40 2024 GMT Not After : May 7 15:49:40 2024 GMT Subject: CN=66311314-68d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:3a:32:48:a7:3e:e3:71:8b:aa:cc:33:a1: 71:b5:82:f4:1b:f0:9f:f0:2d:d4:d1:54:dc:2b:f5: ff:bc:55:6d:53:94:e9:6d:40:0c:0a:ab:24:2a:e0: 0d:90:09:28:93:c3:1f:f7:ef:72:fb:ca:41:e2:f8: a9:ae:3d:9f:09:a6:15:e1:08:bb:c0:e7:92:4e:72: ae:4f:d1:80:bd:57:46:ca:61:fd:a4:c1:78:c8:c6: 8b:ed:c4:f7:19:72:49:a7:ba:00:03:ef:09:b3:09: ab:cd:7a:e2:8b:d8:6f:0d:6f:37:a4:11:28:43:58: 65:06:d1:97:2c:7b:af:38:e0:5a:95:00:b3:f6:e8: aa:08:d8:53:57:b8:44:bc:91:76:fd:89:1e:2a:2a: 6c:e5:5a:65:b2:bb:55:49:91:4a:3a:33:99:c4:7a: d0:08:bb:16:e8:fc:6a:3a:5c:ec:33:75:23:4c:53: e0:5c:77:ed:9c:a6:f8:c6:5d:1c:53:27:f9:b7:b4: ed:ad:a3:88:c0:f9:b1:a1:e4:3a:35:b0:b1:46:c4: c7:e6:ef:85:4c:7e:df:7e:3f:6c:5f:db:89:ce:e5: 18:cf:cd:14:a8:1c:99:a0:5b:4e:22:27:b6:4d:cd: 05:51:6f:eb:f6:fd:23:ff:28:82:c9:06:65:b2:6b: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:9B:65:30:AE:B2:6D:EF:28:C2:4C:30:AA:A7:FD:1E:F5:E6:FF X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:53:88:38:7d:74:92:7b:30:e5:12:c0:38:51:53:91:fd:f3: e9:24:6a:e6:f0:71:4a:77:dd:c5:b7:60:fa:d4:7e:7e:f8:30: 16:b0:56:57:da:a8:02:90:9e:20:32:ef:cf:cf:78:b9:14:98: 4e:bb:28:a6:2f:a2:2d:f1:75:43:3c:e4:02:1a:5a:e7:81:b9: 8c:7b:fe:0a:58:ca:04:b2:fe:a0:a4:76:ee:c0:06:0d:92:be: 6d:45:36:39:72:b5:7d:a8:c9:4f:91:c7:6a:05:9d:21:63:ba: 64:15:28:ac:35:90:65:70:dc:c2:f3:37:62:81:d8:bf:7d:d0: 95:33:c6:7d:fe:e9:e0:40:93:3c:96:7e:71:94:43:4d:4a:38: e2:9c:b8:93:a3:f6:57:25:6f:49:d6:03:16:75:c5:ac:68:ee: 74:a9:38:d2:d2:27:c2:c0:82:f1:82:d5:3e:07:18:0f:8b:b7: 85:e7:19:81:19:20:69:f6:9d:b6:e0:9e:6b:ec:16:f0:c5:2c: 41:25:35:b8:ad:7c:fa:17:27:43:5d:68:a1:2d:a0:9e:67:28: ee:c3:a1:73:84:09:8b:90:61:d8:af:67:fc:12:13:4c:14:7e: d9:e4:aa:9f:ac:e2:3b:1b:1f:64:04:cc:38:33:3a:18:9f:04: 63:d2:c9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjQwNDMwMTU0OTQwWhcNMjQwNTA3MTU0OTQwWjAYMRYwFAYD VQQDEw02NjMxMTMxNC02OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3H06MkinPuNxi6rMM6FxtYL0G/Cf8C3U0VTcK/X/vFVtU5TpbUAMCqskKuAN kAkok8Mf9+9y+8pB4viprj2fCaYV4Qi7wOeSTnKuT9GAvVdGymH9pMF4yMaL7cT3 GXJJp7oAA+8JswmrzXrii9hvDW83pBEoQ1hlBtGXLHuvOOBalQCz9uiqCNhTV7hE vJF2/YkeKips5VplsrtVSZFKOjOZxHrQCLsW6PxqOlzsM3UjTFPgXHftnKb4xl0c Uyf5t7TtraOIwPmxoeQ6NbCxRsTH5u+FTH7ffj9sX9uJzuUYz80UqByZoFtOIie2 Tc0FUW/r9v0j/yiCyQZlsms6QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdUm2Uw rrJt7yjCTDCqp/0e9eb/MB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfU4g4fXSSezDlEsA4UVOR/fPpJGrm8HFKd93Ft2D61H5++DAWsFZX 2qgCkJ4gMu/Pz3i5FJhOuyimL6It8XVDPOQCGlrngbmMe/4KWMoEsv6gpHbuwAYN kr5tRTY5crV9qMlPkcdqBZ0hY7pkFSisNZBlcNzC8zdigdi/fdCVM8Z9/ungQJM8 ln5xlENNSjjinLiTo/ZXJW9J1gMWdcWsaO50qTjS0ifCwILxgtU+BxgPi7eF5xmB GSBp9p224J5r7BbwxSxBJTW4rXz6FydDXWihLaCeZyjuw6FzhAmLkGHYr2f8EhNM FH7Z5KqfrOI7Gx9kBMw4MzoYnwRj0snm -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:03 2024 by rpki-client on console-fra.rpki-client.org