$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: 1ltWTgTAtqnRle4CUcwccu2b818voZJmYeZV008bANI= Subject key identifier: 79:04:46:0D:8D:C4:B7:C3:45:C6:52:B7:B8:7A:CC:7E:92:07:C6:95 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0EE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0ED7 Signing time: Thu 02 May 2024 18:23:00 +0000 Manifest this update: Thu 02 May 2024 18:23:00 +0000 Manifest next update: Thu 09 May 2024 18:23:00 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: C/AZrASzb6VPnpzNN1PQtulU3aWwMq/ofqjV09HMSa4=) 2: 4DF4371066B111E98B2CD954C4F9AE02.roa (hash: wnwOcdr/H0vin2k8D2HczrFn5eNuey06OLgo+xwiEHw=) 3: 166760A85CF511E9A1F5EE2BC4F9AE02.roa (hash: F0bzFVB9DpzLQNhx6YUaeBah+c9CsHyAXG1cVMQs+ZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: May 2 18:23:00 2024 GMT Not After : May 9 18:23:00 2024 GMT Subject: CN=6633da04-1f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:ba:ac:58:cc:fc:4a:f3:fc:04:91:c5:c8: 1a:b5:0b:d1:20:c6:28:4e:af:ee:83:12:27:68:54: ff:72:7a:fb:eb:6f:b5:cf:bc:28:5d:2d:89:44:2d: 93:52:a9:79:69:e6:3f:f3:13:2e:3a:6f:11:ff:fe: fe:17:9d:f5:43:34:66:f2:5b:6e:16:a5:64:95:57: e6:44:ad:59:b5:84:48:5e:43:de:49:c3:a0:f9:c2: 14:b4:9d:33:d5:59:d1:06:85:c6:86:fa:a7:29:79: 74:3c:53:46:37:be:8c:50:f4:fa:f8:89:1d:ea:eb: 5c:db:7c:39:58:6a:8a:9b:48:43:89:c8:aa:f1:2e: c5:ba:31:aa:ad:8f:01:e4:56:bc:44:3f:16:f0:61: e0:fb:ff:73:c4:50:4e:48:84:14:92:03:21:9c:a8: 77:22:63:df:f3:ff:ce:7e:77:71:06:2c:69:dd:aa: 40:b9:76:97:cc:8e:bf:3a:05:de:d1:b1:01:df:89: 76:ce:0c:6d:a6:fc:ba:36:77:4b:6c:e3:32:66:95: 11:cd:c5:98:24:47:77:49:9f:da:d3:25:ea:02:f0: db:b6:b6:a3:08:67:09:e1:0a:13:e8:d6:de:ba:bf: ab:6b:ad:d3:41:dc:5a:46:b5:96:9b:31:73:ef:ce: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:04:46:0D:8D:C4:B7:C3:45:C6:52:B7:B8:7A:CC:7E:92:07:C6:95 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:7a:85:11:c2:ab:5c:85:ac:c1:b6:68:00:bb:ea:70:e8:5a: aa:d9:a4:70:a6:f7:bf:05:93:b4:a0:1b:b8:d2:f9:04:dc:fd: bc:f6:b9:61:e3:07:be:f3:43:f1:75:33:bf:c1:bc:78:8b:4c: 80:22:6c:dc:1a:25:58:4b:7f:44:83:e1:a0:41:b6:0c:53:a7: fa:5e:a0:a3:4e:2b:b3:02:4f:44:90:6b:d9:ce:e8:2c:ae:1f: 0c:5b:29:af:3e:fb:4a:90:22:38:b6:e2:10:17:e9:bf:d8:ae: 6b:3b:17:1c:59:7f:d3:36:0b:34:b0:e2:92:4a:5b:61:21:58: 33:b8:e6:9d:fa:2f:7f:92:a7:6f:a3:7d:90:db:77:93:93:08: f4:b2:b6:2d:0d:ab:d8:da:d7:e3:f6:cd:06:d4:f0:6e:77:71: ef:6f:09:21:ab:e8:84:95:cb:a8:8e:ec:0f:97:dc:6d:1e:b9: 86:6b:86:ba:de:4e:29:f4:b7:64:e9:82:2c:35:de:d4:80:9e: f7:a7:c0:41:9f:c8:b3:47:e6:3f:35:c6:48:86:30:85:fd:5a: 2d:b4:bc:cd:7a:d2:cf:a2:d0:03:f9:f1:ef:e2:28:80:6c:a2: 62:6e:9a:04:e2:c3:09:5c:e9:37:1f:49:32:85:ad:f2:8a:24: de:ca:88:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjQwNTAyMTgyMzAwWhcNMjQwNTA5MTgyMzAwWjAYMRYwFAYD VQQDEw02NjMzZGEwNC0xZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPq6rFjM/Erz/ASRxcgatQvRIMYoTq/ugxInaFT/cnr762+1z7woXS2JRC2T Uql5aeY/8xMuOm8R//7+F531QzRm8ltuFqVklVfmRK1ZtYRIXkPeScOg+cIUtJ0z 1VnRBoXGhvqnKXl0PFNGN76MUPT6+Ikd6utc23w5WGqKm0hDiciq8S7FujGqrY8B 5Fa8RD8W8GHg+/9zxFBOSIQUkgMhnKh3ImPf8//OfndxBixp3apAuXaXzI6/OgXe 0bEB34l2zgxtpvy6NndLbOMyZpURzcWYJEd3SZ/a0yXqAvDbtrajCGcJ4QoT6Nbe ur+ra63TQdxaRrWWmzFz784FMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkERg2N xLfDRcZSt7h6zH6SB8aVMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCleoURwqtchazBtmgAu+pw6Fqq2aRwpve/BZO0oBu40vkE3P289rlh 4we+80PxdTO/wbx4i0yAImzcGiVYS39Eg+GgQbYMU6f6XqCjTiuzAk9EkGvZzugs rh8MWymvPvtKkCI4tuIQF+m/2K5rOxccWX/TNgs0sOKSSlthIVgzuOad+i9/kqdv o32Q23eTkwj0srYtDavY2tfj9s0G1PBud3Hvbwkhq+iElcuojuwPl9xtHrmGa4a6 3k4p9Ldk6YIsNd7UgJ73p8BBn8izR+Y/NcZIhjCF/VottLzNetLPotAD+fHv4iiA bKJibpoE4sMJXOk3H0kyha3yiiTeyojs -----END CERTIFICATE-----Generated at Thu May 2 20:04:49 2024 by rpki-client on console-ams.rpki-client.org