$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: PEMk9dpLdhXkbkKgVfVoT2cnM4gh8bou6P/QaK7TX6s= Subject key identifier: 0F:94:C5:16:70:87:AD:98:EC:74:CC:13:CE:B4:3A:12:6E:3A:80:AA Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0A31 Signing time: Thu 02 May 2024 20:37:51 +0000 Manifest this update: Thu 02 May 2024 20:37:51 +0000 Manifest next update: Thu 09 May 2024 20:37:51 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: anRsDre1JaM76PASAfXcuiIQUWvX0cpLZSQ8mFjS/7w=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: 5C7m7GFnWhicE7+xRmZn+jKvVPR91IhQJPbubfTdmAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: May 2 20:37:51 2024 GMT Not After : May 9 20:37:51 2024 GMT Subject: CN=6633f99f-91c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:81:eb:50:9d:8e:a9:e8:95:6e:78:33:e2: 4e:c5:fb:04:dc:7b:cb:fe:a7:e2:45:4a:02:a4:b4: 31:44:2a:12:20:61:0f:96:94:c5:7c:2d:0a:6b:29: 3a:0a:3b:a0:5a:64:91:b3:ee:ab:23:c8:59:0f:fd: 6a:5f:c8:48:76:4e:34:bc:bc:41:6c:dc:47:d4:0f: 0d:1e:61:6d:dc:b0:02:11:90:07:30:4f:25:37:eb: 18:a7:15:dd:55:b9:c5:06:76:f4:a2:7f:8a:fb:c2: 58:42:ea:4a:90:e5:e9:f0:32:17:0f:f1:92:f2:9c: ef:db:4f:31:dc:d8:e7:ae:c2:14:e5:ce:f4:b9:ab: b6:ad:a9:bd:73:b6:c3:ee:d3:96:7c:00:37:7d:04: 3b:e4:52:dd:d3:26:ed:20:f1:58:15:f4:37:25:e7: 5d:12:30:8e:15:f2:0c:20:a4:c9:ca:46:20:72:14: e9:36:ef:75:4d:d0:e4:bf:03:40:18:50:34:d8:d8: c6:df:f3:59:9f:01:d9:05:ee:63:78:97:54:36:3e: 83:ed:6c:41:bf:39:e0:a9:c8:c7:ee:36:01:d5:7a: a4:b4:04:80:97:9b:fe:8c:c4:61:c0:4f:44:75:99: 48:a7:c6:af:0a:5a:75:e7:eb:78:09:2f:35:06:6d: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:94:C5:16:70:87:AD:98:EC:74:CC:13:CE:B4:3A:12:6E:3A:80:AA X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ab:6e:d7:cf:cd:c5:1f:75:20:34:08:de:32:ff:93:aa:6d: 46:3d:89:ea:46:52:2a:6b:21:36:e0:d8:bc:2a:73:6e:1a:f9: c6:fd:86:f8:e3:af:dd:fa:3f:d4:77:c5:a7:9f:91:c5:d4:87: 51:ef:61:7d:e8:e5:74:66:c1:a1:c9:da:a1:90:1e:e5:41:db: 72:4e:2a:78:ce:2b:76:89:92:ee:ec:54:0d:c1:14:ec:01:75: 4c:a5:64:85:83:2e:c5:22:e4:32:1b:4b:6d:69:18:fc:c7:7f: 01:fe:5e:be:54:84:b5:82:75:f9:5d:e8:8f:be:42:cb:f8:fa: d2:e4:66:33:87:0f:13:30:ad:38:fa:47:65:8f:f6:4e:98:6c: 1b:69:a3:78:06:57:3d:f4:1b:7e:cf:8b:cf:59:18:80:c8:4b: a9:e2:2f:57:49:87:93:53:c2:bd:23:4a:56:ce:9f:b3:93:6e: 97:18:3b:f1:77:5e:5d:83:a5:d3:b6:e8:32:f0:a8:5e:a3:33: 5a:3f:90:aa:e7:a8:58:0d:aa:2a:e6:1c:bd:46:b4:05:17:14: c9:80:73:a6:10:54:1e:2b:61:fc:0b:68:89:9e:81:7e:e3:02: 26:ac:0c:fd:2b:c4:41:31:5a:e0:08:29:9b:56:3f:f4:30:4a: 1f:9f:41:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjQwNTAyMjAzNzUxWhcNMjQwNTA5MjAzNzUxWjAYMRYwFAYD VQQDEw02NjMzZjk5Zi05MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtuB61CdjqnolW54M+JOxfsE3HvL/qfiRUoCpLQxRCoSIGEPlpTFfC0Kayk6 CjugWmSRs+6rI8hZD/1qX8hIdk40vLxBbNxH1A8NHmFt3LACEZAHME8lN+sYpxXd VbnFBnb0on+K+8JYQupKkOXp8DIXD/GS8pzv208x3NjnrsIU5c70uau2ram9c7bD 7tOWfAA3fQQ75FLd0ybtIPFYFfQ3JeddEjCOFfIMIKTJykYgchTpNu91TdDkvwNA GFA02NjG3/NZnwHZBe5jeJdUNj6D7WxBvzngqcjH7jYB1XqktASAl5v+jMRhwE9E dZlIp8avClp15+t4CS81Bm39XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+UxRZw h62Y7HTME860OhJuOoCqMB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjq27Xz83FH3UgNAjeMv+Tqm1GPYnqRlIqayE24Ni8KnNuGvnG/Yb4 46/d+j/Ud8Wnn5HF1IdR72F96OV0ZsGhydqhkB7lQdtyTip4zit2iZLu7FQNwRTs AXVMpWSFgy7FIuQyG0ttaRj8x38B/l6+VIS1gnX5XeiPvkLL+PrS5GYzhw8TMK04 +kdlj/ZOmGwbaaN4Blc99Bt+z4vPWRiAyEup4i9XSYeTU8K9I0pWzp+zk26XGDvx d15dg6XTtugy8KheozNaP5Cq56hYDaoq5hy9RrQFFxTJgHOmEFQeK2H8C2iJnoF+ 4wImrAz9K8RBMVrgCCmbVj/0MEofn0Hs -----END CERTIFICATE-----Generated at Thu May 2 22:13:19 2024 by rpki-client on console-fra.rpki-client.org