$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft File: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json) Hash identifier: VGJdL7aMSf1gNEM95cJHUr6S1ge3I7gIpS4oyvo2Pjw= Subject key identifier: 87:74:1E:3B:3F:93:3D:37:11:DB:1D:3B:0D:EF:45:E5:F0:A5:78:96 Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft Manifest number: 02CC Signing time: Wed 01 May 2024 03:46:10 +0000 Manifest this update: Wed 01 May 2024 03:46:09 +0000 Manifest next update: Wed 08 May 2024 03:46:09 +0000 Files and hashes: 1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: D/evFxF0CEWZk+O2N51jDLEQmxUV/7Y9rIRqEBPX+XM=) 2: 1E2EB8D09F3811ECBB84BD76C4F9AE02.roa (hash: 0VgavC+GSFC8kFFDgkonqsGv9bWBdCImRRdTdkeaeH8=) 3: 1F26C9129F3811ECBB84BD76C4F9AE02.roa (hash: 4/Z4flJpyUablTpKqfLyo+AwvZDxQW6x7bvb56HHFQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: May 1 03:46:09 2024 GMT Not After : May 8 03:46:09 2024 GMT Subject: CN=6631bb02-6d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:39:9e:4b:b7:a1:32:90:c0:2f:96:b2:0a: 53:19:a6:69:45:ed:72:cf:c7:34:9a:80:c3:65:a6: 94:e2:3c:f3:5d:4c:96:a2:dd:c0:78:d8:b2:74:60: 2b:5f:c4:94:26:bd:39:7d:79:76:b2:02:88:ed:50: f3:27:b2:86:bb:57:20:c9:61:78:1d:f7:ee:6a:4b: 9e:4d:6e:35:53:dc:12:2a:a9:ad:80:50:ff:2d:d8: 15:0b:5c:e8:3f:23:2e:a3:08:37:1d:da:c2:44:cc: c8:91:15:6b:df:e7:9d:d5:e4:15:e7:be:5c:e0:25: 15:b7:ce:aa:31:a6:34:ad:87:db:f6:92:80:d6:f6: d2:36:df:6f:fc:bd:28:80:e4:43:62:db:7d:25:39: e2:1b:4c:0c:1c:84:7a:7c:30:05:3f:c4:08:4e:28: 9d:f9:f7:9a:6f:bc:16:85:70:2a:bd:82:ca:ac:da: 03:f2:f9:3f:f2:42:cb:e2:59:95:38:c6:ae:0c:ae: f9:26:52:8a:44:c2:0a:2c:2e:f3:da:20:8f:41:fa: 25:08:ab:8c:68:5c:f8:f3:5f:68:89:3c:0a:1b:8e: 35:a3:c8:6e:38:26:79:4b:c3:0d:d9:7a:f0:f9:82: a7:0f:b4:6c:62:12:b5:f9:b1:24:e1:da:2e:20:bf: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:1E:3B:3F:93:3D:37:11:DB:1D:3B:0D:EF:45:E5:F0:A5:78:96 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:3d:63:5b:6b:84:b8:31:c6:b9:72:e9:0d:03:ff:9f:66:b9: 73:91:5a:ff:34:a6:b7:d0:a8:ba:39:25:66:4e:47:de:c6:dc: 86:46:44:19:46:f1:cc:82:29:84:97:d0:90:e2:40:4b:3b:ae: e8:60:bf:84:d1:f9:26:71:61:d0:5d:2b:16:9d:73:28:61:4e: d8:0e:b2:72:02:b3:ae:e0:72:7a:12:e9:0f:0c:ff:40:8b:7e: a5:c1:4b:2d:05:32:b7:e5:b0:f0:db:65:cc:fd:d2:c2:bd:8f: 16:a0:9f:2d:65:a9:ab:7b:64:cf:e4:10:1d:28:f3:f8:bc:1d: 6e:ee:82:a8:82:01:f4:3c:5a:72:9a:70:63:e6:9e:b4:cc:c6: af:e1:62:00:a1:82:ae:8c:98:5f:f6:5c:ae:26:8a:14:4e:c0: f4:25:dc:6e:bc:14:90:e6:69:49:e1:1d:13:3f:9f:f9:0e:c4: cc:78:a1:e6:2c:56:ac:4e:f8:25:84:ca:e1:12:a3:45:03:2d: 23:86:45:5d:87:b8:63:8b:ea:48:6e:c1:60:28:1b:d6:e3:e0: b3:ac:c5:dd:1a:a4:f1:f1:f5:72:8d:b1:e6:74:ad:4c:0b:73: be:29:ca:98:29:2f:84:8a:68:87:ee:2b:36:17:03:fe:15:a9: 98:cf:77:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjQwNTAxMDM0NjA5WhcNMjQwNTA4MDM0NjA5WjAYMRYwFAYD VQQDEw02NjMxYmIwMi02ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u85nku3oTKQwC+WsgpTGaZpRe1yz8c0moDDZaaU4jzzXUyWot3AeNiydGAr X8SUJr05fXl2sgKI7VDzJ7KGu1cgyWF4HffuakueTW41U9wSKqmtgFD/LdgVC1zo PyMuowg3HdrCRMzIkRVr3+ed1eQV575c4CUVt86qMaY0rYfb9pKA1vbSNt9v/L0o gORDYtt9JTniG0wMHIR6fDAFP8QITiid+feab7wWhXAqvYLKrNoD8vk/8kLL4lmV OMauDK75JlKKRMIKLC7z2iCPQfolCKuMaFz4819oiTwKG441o8huOCZ5S8MN2Xrw +YKnD7RsYhK1+bEk4douIL9/UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId0Hjs/ kz03EdsdOw3vReXwpXiWMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzA0NS9CRkFEQzYxMDlGMjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtr bU50VmNEWkdNRnlqZm5UN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoPWNba4S4Mca5cukNA/+fZrlzkVr/NKa30Ki6OSVmTkfextyGRkQZ RvHMgimEl9CQ4kBLO67oYL+E0fkmcWHQXSsWnXMoYU7YDrJyArOu4HJ6EukPDP9A i36lwUstBTK35bDw22XM/dLCvY8WoJ8tZamre2TP5BAdKPP4vB1u7oKoggH0PFpy mnBj5p60zMav4WIAoYKujJhf9lyuJooUTsD0JdxuvBSQ5mlJ4R0TP5/5DsTMeKHm LFasTvglhMrhEqNFAy0jhkVdh7hji+pIbsFgKBvW4+CzrMXdGqTx8fVyjbHmdK1M C3O+KcqYKS+EimiH7is2FwP+FamYz3fw -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org