$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: uqKlW819+EePwYkB6/BFHu6LnL8vf3hWmVDiGSkOsbE= Subject key identifier: 0C:70:79:48:C1:9B:A5:9A:9D:93:02:47:55:F6:73:94:AA:E3:45:62 Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2744 Signing time: Tue 30 Apr 2024 17:48:12 +0000 Manifest this update: Tue 30 Apr 2024 17:48:11 +0000 Manifest next update: Tue 07 May 2024 17:48:11 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: 4CBKhEvfybbI5VjOXF7Y2OdxztEAh5Il0b0BEvN7m1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Apr 30 17:48:11 2024 GMT Not After : May 7 17:48:11 2024 GMT Subject: CN=66312edc-94dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:26:4d:4e:49:3e:63:ca:88:fd:f2:33:9b: 1e:9b:a4:26:c7:ec:11:3a:f4:ff:13:9b:db:7a:bf: 03:cf:31:7e:93:2f:23:e9:59:5e:82:d5:e2:02:3c: 78:89:42:d8:59:f5:55:2a:bb:c1:cb:c4:6d:b9:1f: 3b:6b:cd:21:ba:04:de:4f:1f:d7:ab:4c:c0:bb:db: 2f:d6:1f:da:38:38:47:54:bc:8a:4c:20:71:41:d1: 74:56:2f:1d:34:4a:3b:cc:bf:a6:b2:78:3c:67:3a: c5:cb:7e:b9:fa:00:29:68:37:a5:f8:3a:7d:76:70: 34:13:7a:e8:81:39:b3:47:96:97:3b:4a:7b:61:6e: 0b:a8:60:f8:6a:4b:e9:84:50:10:a4:44:ea:31:4b: 1d:a4:3f:72:e6:80:43:89:60:1d:c5:0e:5b:da:7b: 4a:f3:dc:45:20:c2:d5:d6:2c:43:2f:e1:52:e8:df: ae:f8:ed:22:39:c9:9d:44:ef:72:7e:c4:be:de:c4: b1:58:c0:3f:4a:89:5a:77:d0:4e:19:79:c7:8c:e8: 6b:79:65:e3:c5:89:ed:d7:4f:04:17:ae:6c:13:ef: 6e:86:8c:91:98:77:f4:88:00:8d:25:4b:a0:c9:57: a1:61:38:a8:a6:bd:26:3b:9a:26:f5:e5:87:ca:fc: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:79:48:C1:9B:A5:9A:9D:93:02:47:55:F6:73:94:AA:E3:45:62 X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:13:f4:6a:ad:5b:df:e5:17:92:99:e6:3b:6e:2c:4c:98:81: 80:20:d8:84:9d:b3:da:35:dc:05:15:f1:e9:95:28:1e:14:60: a9:ad:e3:11:47:b0:d8:4f:e3:f4:dc:0a:5e:d1:48:f8:d8:25: b5:75:8b:af:40:d5:4f:9c:39:3c:5b:46:6e:bc:53:a9:c0:ea: 6f:08:49:0a:e3:c9:c2:53:13:9c:c7:b7:7c:b4:3a:d4:9b:2c: fd:0f:35:a0:61:46:12:bd:ad:bc:71:67:e7:ed:21:d0:5a:89: 1c:df:ce:90:31:c6:e4:c6:59:86:8e:57:38:a2:35:94:35:96: 6d:09:83:34:6a:1b:df:66:0e:82:55:ed:c4:69:3a:a4:43:81: 5f:1e:63:a5:24:16:d6:1f:1b:9e:ac:86:c7:ad:87:27:a4:b2: a9:e8:26:80:9e:8d:20:93:3a:93:80:f2:28:0f:e2:3a:8a:d3: 04:e4:ff:36:99:09:d2:d1:ec:a8:85:6b:c4:a7:82:58:0f:eb: 04:24:58:25:27:dc:35:f4:e4:16:69:5b:85:d9:7a:1b:8c:a4: 2c:ab:ce:a8:77:81:87:18:33:88:5b:76:7d:d3:19:ff:19:fb: 75:fb:ec:93:99:0f:38:f3:4a:ab:48:f0:55:75:b4:79:36:20: 2a:56:1f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjQwNDMwMTc0ODExWhcNMjQwNTA3MTc0ODExWjAYMRYwFAYD VQQDEw02NjMxMmVkYy05NGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK4mTU5JPmPKiP3yM5sem6Qmx+wROvT/E5vber8DzzF+ky8j6VlegtXiAjx4 iULYWfVVKrvBy8RtuR87a80hugTeTx/Xq0zAu9sv1h/aODhHVLyKTCBxQdF0Vi8d NEo7zL+msng8ZzrFy365+gApaDel+Dp9dnA0E3rogTmzR5aXO0p7YW4LqGD4akvp hFAQpETqMUsdpD9y5oBDiWAdxQ5b2ntK89xFIMLV1ixDL+FS6N+u+O0iOcmdRO9y fsS+3sSxWMA/Solad9BOGXnHjOhreWXjxYnt108EF65sE+9uhoyRmHf0iACNJUug yVehYTiopr0mO5om9eWHyvwQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxweUjB m6WanZMCR1X2c5Sq40ViMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtE/RqrVvf5ReSmeY7bixMmIGAINiEnbPaNdwFFfHplSgeFGCpreMR R7DYT+P03Ape0Uj42CW1dYuvQNVPnDk8W0ZuvFOpwOpvCEkK48nCUxOcx7d8tDrU myz9DzWgYUYSva28cWfn7SHQWokc386QMcbkxlmGjlc4ojWUNZZtCYM0ahvfZg6C Ve3EaTqkQ4FfHmOlJBbWHxuerIbHrYcnpLKp6CaAno0gkzqTgPIoD+I6itME5P82 mQnS0eyohWvEp4JYD+sEJFglJ9w19OQWaVuF2XobjKQsq86od4GHGDOIW3Z90xn/ Gft1++yTmQ8480qrSPBVdbR5NiAqVh9B -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:40 2024 by rpki-client on console-fra.rpki-client.org