$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: uyP45Mi1+Bnhap5UIHfJ3z/ULqGMiM69fWj+JIvbFEE= Subject key identifier: 2D:78:B3:DE:7F:84:99:A1:9D:3D:C1:13:61:32:62:E5:FE:C6:87:B9 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 33 Signing time: Wed 15 May 2024 08:32:02 +0000 Manifest this update: Wed 15 May 2024 08:32:02 +0000 Manifest next update: Wed 22 May 2024 08:32:02 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: D2GDbmJKItXDktZOcG+HttWqi8BBnvy1S/SONTtj0bk=) 2: 37EB330AC9A411EE98496754C4F9AE02.roa (hash: pq3YmshSa5LiwtO4lXl1oBpAEwDO9Rdm27qbxdhtJJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: May 15 08:32:02 2024 GMT Not After : May 22 08:32:02 2024 GMT Subject: CN=66447302-7c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:8d:c2:02:5f:bd:4c:3b:bc:61:b0:89:f8: 40:75:00:4d:f8:88:7f:37:d4:8d:f9:b8:22:e1:3b: db:10:41:84:39:ca:84:59:c1:e4:60:d5:92:4c:89: bd:c2:c1:94:c4:fe:39:71:35:a5:81:86:9d:80:1f: 42:f1:ed:c7:34:0b:b7:34:26:20:8d:22:ed:58:d0: f7:fe:02:66:2c:66:f7:9f:80:75:e8:30:82:62:73: bf:b1:aa:07:a4:6e:ec:98:60:a8:ce:34:85:da:1c: 48:fb:89:11:08:5c:cf:ef:a2:c7:94:41:cc:37:76: 23:63:f0:47:86:9a:e1:e0:b1:ac:65:ab:cb:59:e8: b3:9b:f1:c6:56:df:94:9b:93:19:a3:76:76:8c:7e: d0:e3:52:4e:80:e2:c3:42:25:2f:cf:ba:9a:2c:06: a5:a5:ff:e0:65:d5:be:2d:fe:58:d3:88:e6:f5:a5: 8c:4a:73:b2:11:59:e7:da:51:07:b3:19:a0:76:05: 1c:d7:e1:3b:0a:80:43:91:83:62:45:96:8d:fd:86: fa:17:e0:d7:b5:d3:ba:76:fc:dd:51:ab:3a:d5:f1: 51:83:fc:c1:07:90:9f:da:01:d9:f9:e2:2a:59:ac: ba:c8:c5:d1:31:61:97:07:f4:5e:07:57:db:2a:93: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:78:B3:DE:7F:84:99:A1:9D:3D:C1:13:61:32:62:E5:FE:C6:87:B9 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d2:42:cd:95:be:a6:0f:44:b7:14:32:ea:d7:dd:dc:f6:e3: 53:fd:c4:83:88:64:fa:cb:a0:b0:86:f2:04:9d:08:98:9b:c8: e4:33:9e:82:d8:89:2f:a2:59:90:bb:80:93:4f:8c:42:61:91: 43:35:bb:07:c3:67:12:22:39:cf:1e:9e:f7:95:60:60:3c:ae: 4c:f5:70:37:28:b3:4c:0a:48:d0:3f:a2:f5:90:7c:17:f5:b5: 75:77:b8:da:f4:49:42:c9:ae:f8:75:89:cf:16:0d:12:59:9d: 3d:65:62:b4:57:e3:0d:94:bd:4c:ea:16:34:b6:1c:91:79:09: 7a:0a:03:89:40:0a:a8:87:81:71:ca:db:73:d3:ff:8f:65:bb: 51:00:60:fc:13:05:31:f3:98:f0:24:ef:2a:9b:16:14:36:c5: a7:68:01:53:ea:30:3e:e5:4d:30:42:b7:97:2c:9f:d7:ae:d7: bd:4c:47:82:59:80:32:61:5a:21:60:8c:ee:7b:4f:01:02:b5: d4:18:3d:f8:46:6f:f6:a6:9c:cb:20:57:28:ce:e8:5c:de:91: ab:ce:85:15:f4:0a:e8:ac:60:d3:11:7c:18:74:bc:53:86:a0: 87:63:ac:eb:89:6e:7e:da:db:9a:01:34:ff:56:be:51:6c:c3: 4c:ef:cc:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEU2MjExMC8GA1UEBRMoNjU4MDkxMEI1NUZBRTVGRjYwRjcxRUIyMDcwNDcwQTEy NjJFMzQzQjAeFw0yNDA1MTUwODMyMDJaFw0yNDA1MjIwODMyMDJaMBgxFjAUBgNV BAMTDTY2NDQ3MzAyLTdjOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChIo3CAl+9TDu8YbCJ+EB1AE34iH831I35uCLhO9sQQYQ5yoRZweRg1ZJMib3C wZTE/jlxNaWBhp2AH0Lx7cc0C7c0JiCNIu1Y0Pf+AmYsZvefgHXoMIJic7+xqgek buyYYKjONIXaHEj7iREIXM/voseUQcw3diNj8EeGmuHgsaxlq8tZ6LOb8cZW35Sb kxmjdnaMftDjUk6A4sNCJS/PuposBqWl/+Bl1b4t/ljTiOb1pYxKc7IRWefaUQez GaB2BRzX4TsKgEORg2JFlo39hvoX4Ne107p2/N1RqzrV8VGD/MEHkJ/aAdn54ipZ rLrIxdExYZcH9F4HV9sqk6pZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULXiz3n+E maGdPcETYTJi5f7Gh7kwHwYDVR0jBBgwFoAUZYCRC1X65f9g9x6yBwRwoSYuNDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RTYyLzcwMkEwMjhDQzk5 RjExRUVBODE1OEU3OUM0RjlBRTAyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWllDUkMxWDY1ZjlnOXg2eUJ3UndvU1l1TkRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 RTYyLzcwMkEwMjhDQzk5RjExRUVBODE1OEU3OUM0RjlBRTAyL1pZQ1JDMVg2NWY5 Zzl4NnlCd1J3b1NZdU5Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXSQs2VvqYPRLcUMurX3dz241P9xIOIZPrLoLCG8gSdCJibyOQznoLY iS+iWZC7gJNPjEJhkUM1uwfDZxIiOc8enveVYGA8rkz1cDcos0wKSNA/ovWQfBf1 tXV3uNr0SULJrvh1ic8WDRJZnT1lYrRX4w2UvUzqFjS2HJF5CXoKA4lACqiHgXHK 23PT/49lu1EAYPwTBTHzmPAk7yqbFhQ2xadoAVPqMD7lTTBCt5csn9eu171MR4JZ gDJhWiFgjO57TwECtdQYPfhGb/amnMsgVyjO6FzekavOhRX0CuisYNMRfBh0vFOG oIdjrOuJbn7a25oBNP9WvlFsw0zvzKo= -----END CERTIFICATE-----Generated at Wed May 15 09:28:15 2024 by rpki-client on console-fra.rpki-client.org