$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: Php2oojiVMoo/uCkz65DDrhFo2qBt0dKp6aZFVPEiYU= Subject key identifier: A9:B7:BD:33:D7:70:AA:FE:9A:69:DB:2A:B9:26:B6:68:89:9D:50:E5 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0221 Signing time: Wed 01 May 2024 04:24:34 +0000 Manifest this update: Wed 01 May 2024 04:24:33 +0000 Manifest next update: Wed 08 May 2024 04:24:33 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: LAyOYTrnDvujN+LWR7l8newyriS/IbA8QACAELJR3HE=) 2: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: szo/ZA8KpVIOHATJaoTCrdRxhc+wJk6tYTX7mBsve/Q=) 3: 0E0E73A8EBFB11ED8184D438C4F9AE02.roa (hash: Nptpwy8aBE2O4nlz0N7k/Ll0b7PMoohVrgBQiRsW9tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: May 1 04:24:33 2024 GMT Not After : May 8 04:24:33 2024 GMT Subject: CN=6631c402-7c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:4f:ca:22:41:8f:9c:51:22:10:1e:93:53: f2:a5:3c:4e:17:b6:c6:1c:d1:1e:ea:bd:98:ec:14: 60:fb:e5:36:5f:93:9e:be:3d:3a:a1:76:a2:02:44: 40:6a:90:d9:9b:33:f5:d8:f4:be:9a:4e:3c:35:09: fa:92:63:af:cc:b5:8d:3f:a7:1c:27:e0:88:f6:66: d6:68:4b:1b:ac:ae:a3:9b:de:75:6d:ee:41:38:19: d8:ec:24:9c:7a:e8:d9:39:bc:d7:8f:e9:5f:bf:aa: 99:9e:d3:ab:62:27:8d:af:9a:83:c3:73:64:26:3f: 3a:0f:07:67:6c:f7:9e:1b:5c:71:00:80:cf:dc:17: 6a:55:ae:93:c9:e9:6a:14:08:20:49:ec:db:8a:df: 50:5a:b4:cf:a5:a1:72:fa:af:76:fa:0a:7b:ae:26: e2:20:fb:89:e7:81:1b:77:f9:19:a8:92:53:30:5b: 87:ae:20:44:4c:49:5d:fc:64:e1:9e:77:49:be:47: 65:ce:fb:6b:97:23:8b:27:f6:61:24:da:e6:8d:cb: 8d:0b:0c:46:e2:43:5d:10:40:4e:c4:de:c4:82:c6: e5:56:5e:12:76:2e:b8:fb:86:d5:d2:42:3c:23:a8: 91:fe:2b:67:27:d0:57:21:cf:28:07:fc:08:37:ac: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:BD:33:D7:70:AA:FE:9A:69:DB:2A:B9:26:B6:68:89:9D:50:E5 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:da:49:ab:13:fa:0d:42:aa:c0:65:6f:37:3e:64:8c:61:93: bf:07:9d:65:d8:66:5d:a1:47:42:12:cf:f8:10:99:a9:9d:a8: 50:5b:33:41:9e:28:c9:83:0e:52:8b:69:24:6e:4d:09:2b:ed: a3:b3:96:8c:ac:4d:40:02:40:13:07:a6:81:19:29:be:4c:a2: 77:33:84:a9:40:dd:77:a4:88:9e:5e:44:7b:9c:cf:6a:6f:10: 72:6f:dc:53:0c:5a:d9:2e:27:43:bf:e7:8f:a6:b7:6b:09:7d: cd:f6:1e:15:e5:f6:ad:38:61:90:46:96:9b:c6:ed:db:bb:02: ff:ab:67:a5:88:cb:d2:52:4a:d3:92:a8:1f:fe:2d:52:bb:2f: e1:96:5f:68:29:e8:64:b0:b0:0f:31:c3:45:a8:61:43:80:99: eb:b2:ec:24:f3:e6:72:c7:7f:b2:78:2c:cc:11:58:7c:e9:43: 60:75:a1:af:e5:19:9c:4a:67:1b:c3:0a:39:df:4f:c8:6a:4b: b3:84:d4:8e:cd:60:2b:be:28:c2:81:bc:64:27:e7:3d:ff:ee: e9:d5:58:92:53:61:88:45:20:4c:9d:8b:6a:1c:59:53:0d:84: 7c:d6:30:db:dc:4b:40:2e:7d:ba:d8:b4:f6:27:f5:5a:71:de: b6:ea:17:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjQwNTAxMDQyNDMzWhcNMjQwNTA4MDQyNDMzWjAYMRYwFAYD VQQDEw02NjMxYzQwMi03Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPFPyiJBj5xRIhAek1PypTxOF7bGHNEe6r2Y7BRg++U2X5Oevj06oXaiAkRA apDZmzP12PS+mk48NQn6kmOvzLWNP6ccJ+CI9mbWaEsbrK6jm951be5BOBnY7CSc eujZObzXj+lfv6qZntOrYieNr5qDw3NkJj86DwdnbPeeG1xxAIDP3BdqVa6Tyelq FAggSezbit9QWrTPpaFy+q92+gp7ribiIPuJ54Ebd/kZqJJTMFuHriBETEld/GTh nndJvkdlzvtrlyOLJ/ZhJNrmjcuNCwxG4kNdEEBOxN7EgsblVl4Sdi64+4bV0kI8 I6iR/itnJ9BXIc8oB/wIN6wsoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm3vTPX cKr+mmnbKrkmtmiJnVDlMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62kmrE/oNQqrAZW83PmSMYZO/B51l2GZdoUdCEs/4EJmpnahQWzNB nijJgw5Si2kkbk0JK+2js5aMrE1AAkATB6aBGSm+TKJ3M4SpQN13pIieXkR7nM9q bxByb9xTDFrZLidDv+ePprdrCX3N9h4V5fatOGGQRpabxu3buwL/q2eliMvSUkrT kqgf/i1Suy/hll9oKehksLAPMcNFqGFDgJnrsuwk8+Zyx3+yeCzMEVh86UNgdaGv 5RmcSmcbwwo530/IakuzhNSOzWArvijCgbxkJ+c9/+7p1ViSU2GIRSBMnYtqHFlT DYR81jDb3EtALn262LT2J/Vacd626hen -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org