$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft File: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json) Hash identifier: 4sRMQ4lVfzCmtmEOaJjuXGYS6InJGWIEqT47as3UiRw= Subject key identifier: EE:E3:17:F1:6A:39:31:64:60:29:82:75:4E:8E:38:41:C7:11:CA:30 Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 Certificate issuer: /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft Manifest number: 0654 Signing time: Thu 02 May 2024 23:44:35 +0000 Manifest this update: Thu 02 May 2024 23:44:35 +0000 Manifest next update: Thu 09 May 2024 23:44:35 +0000 Files and hashes: 1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: YXopLsjgx0HOcVtfXjtbGZlsawGS0oJcgFiZBuzFFOc=) 2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: 3Ta/Rhmk9vEVGlhgqjD5ilg1rp+9RihhDEFlOfVXjec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Validity Not Before: May 2 23:44:35 2024 GMT Not After : May 9 23:44:35 2024 GMT Subject: CN=66342563-8c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:1e:b1:ec:60:0f:fc:f0:f2:d2:43:49:ba: 43:ea:46:5b:29:cd:ce:a7:47:76:3f:cf:51:e4:38: 53:0b:bc:b5:b1:62:a3:d7:79:81:7a:43:52:df:d5: 2c:4c:d0:68:e8:78:42:54:7d:cc:23:1f:b3:88:2e: 56:71:da:76:7f:41:5d:5b:b0:31:59:8b:e2:e9:f1: 12:4e:a7:5c:1c:b4:e4:c4:1b:9e:db:c2:c2:87:4f: 3e:81:d7:35:77:ae:f9:fb:13:e3:c2:d7:d6:a9:cf: 2f:49:9e:eb:5e:11:2c:49:c5:3e:df:40:f2:1d:0e: bb:aa:ed:34:77:e5:64:f7:62:b3:0c:cd:24:e8:84: 56:8a:38:16:ff:1a:3f:7d:68:82:34:fd:5a:bd:76: 24:28:96:d5:82:dc:fd:16:d1:dc:7e:07:ae:7b:b0: b3:58:5d:3e:0b:80:30:d0:fa:8a:b3:81:d8:ef:43: 18:56:42:60:6f:44:45:03:b6:1d:39:cc:29:88:fa: 08:2a:b1:97:42:31:59:25:73:03:3a:d5:2d:05:9b: fb:e5:34:44:82:4c:73:7d:37:25:c7:ea:a2:b5:b9: 59:ab:bd:3e:90:e8:a1:47:c9:5a:1b:95:89:0c:ca: 25:c2:77:bd:24:af:6b:57:b9:10:b3:68:bc:79:fb: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E3:17:F1:6A:39:31:64:60:29:82:75:4E:8E:38:41:C7:11:CA:30 X509v3 Authority Key Identifier: keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8b:3f:3e:4d:8e:c9:48:92:28:d5:49:ee:a1:15:d1:c5:2d: 55:2a:7c:5a:60:4d:1e:71:3f:5e:60:be:c2:b1:36:42:af:fa: b2:5e:ff:c6:da:b2:19:64:ed:fb:da:91:49:f3:85:a9:ca:4e: 44:f7:50:49:45:ba:07:7a:f9:48:02:f4:7a:4a:2f:0d:cf:fe: 77:c5:2d:ab:5e:27:8c:33:59:70:1d:3f:7d:fe:14:c4:c2:c3: 6e:79:19:d0:34:5f:63:50:51:8f:ba:07:52:54:7a:9e:a2:cd: b2:5b:69:7a:e6:e2:8c:54:55:4f:d3:04:5e:95:d4:90:b2:3b: a4:58:35:e9:e1:c4:d8:42:f8:1c:94:17:6e:84:2e:e3:87:e8: 5b:9b:ab:e5:b8:32:95:57:92:6e:1c:8e:e2:14:85:7f:67:34: 27:3d:5c:a5:d2:cd:f9:3c:fe:68:ec:c1:06:f5:7e:76:ce:ee: 39:6f:d4:81:8e:c1:66:66:f1:99:11:a5:49:b8:69:50:6a:f5: 1a:07:c0:6c:3e:45:e7:19:76:20:b0:f2:38:13:15:b8:7b:6f: 39:78:09:4b:bd:12:24:85:33:9c:88:1d:1b:91:83:2b:ea:3e: 9f:7c:7c:7a:4f:ef:26:ec:11:f5:ec:69:b3:6d:97:01:57:ec: d7:9d:89:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0OTIxMTAvBgNVBAUTKDlCMzk5QkZCRDE2OTM1Njc0OEY4MTVGMkNBODA0OEU5 RDVGQTRGRTQwHhcNMjQwNTAyMjM0NDM1WhcNMjQwNTA5MjM0NDM1WjAYMRYwFAYD VQQDEw02NjM0MjU2My04YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrYesexgD/zw8tJDSbpD6kZbKc3Op0d2P89R5DhTC7y1sWKj13mBekNS39Us TNBo6HhCVH3MIx+ziC5Wcdp2f0FdW7AxWYvi6fESTqdcHLTkxBue28LCh08+gdc1 d675+xPjwtfWqc8vSZ7rXhEsScU+30DyHQ67qu00d+Vk92KzDM0k6IRWijgW/xo/ fWiCNP1avXYkKJbVgtz9FtHcfgeue7CzWF0+C4Aw0PqKs4HY70MYVkJgb0RFA7Yd OcwpiPoIKrGXQjFZJXMDOtUtBZv75TREgkxzfTclx+qitblZq70+kOihR8laG5WJ DMolwne9JK9rV7kQs2i8efuxVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7jF/Fq OTFkYCmCdU6OOEHHEcowMB8GA1UdIwQYMBaAFJs5m/vRaTVnSPgV8sqASOnV+k/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ5Mi84MDJFQjFCRTM4 M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5XZEktQlh5eW9CSTZkWDZU LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216bWItOUZwTldkSS1CWHl5b0JJNmRYNlQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ5Mi84MDJFQjFCRTM4M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5X ZEktQlh5eW9CSTZkWDZULVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjiz8+TY7JSJIo1UnuoRXRxS1VKnxaYE0ecT9eYL7CsTZCr/qyXv/G 2rIZZO372pFJ84Wpyk5E91BJRboHevlIAvR6Si8Nz/53xS2rXieMM1lwHT99/hTE wsNueRnQNF9jUFGPugdSVHqeos2yW2l65uKMVFVP0wReldSQsjukWDXp4cTYQvgc lBduhC7jh+hbm6vluDKVV5JuHI7iFIV/ZzQnPVyl0s35PP5o7MEG9X52zu45b9SB jsFmZvGZEaVJuGlQavUaB8BsPkXnGXYgsPI4ExW4e285eAlLvRIkhTOciB0bkYMr 6j6ffHx6T+8m7BH17GmzbZcBV+zXnYkU -----END CERTIFICATE-----Generated at Fri May 3 00:28:39 2024 by rpki-client on console-fra.rpki-client.org