$ rpki-client -vvf rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft File: zHLheXsiBNjsaeyYxBc5zIxmTJw.mft (raw, json) Hash identifier: YqmPc0QrbHBBLC31ZISvK/SiqF9q+ZNxevNmqqUbABs= Subject key identifier: 61:CE:03:5B:40:25:9A:5D:B7:4F:B9:3A:36:03:A5:F4:8B:AF:F7:A2 Authority key identifier: CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C Certificate issuer: /CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C Certificate serial: 09BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft Manifest number: 09B8 Signing time: Tue 30 Apr 2024 21:10:25 +0000 Manifest this update: Tue 30 Apr 2024 21:10:24 +0000 Manifest next update: Tue 07 May 2024 21:10:24 +0000 Files and hashes: 1: zHLheXsiBNjsaeyYxBc5zIxmTJw.crl (hash: 7yuYuI06RIjMxp0SwWzWanheCIvx7QkWDxVnaWv3s9k=) 2: 7086C108890711EEA367A12CC4F9AE02.roa (hash: SMYVmN3H85ArX88Q9SnZho91DrBw7afY44CRQJ2Yhk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C725F/serialNumber=CC72E1797B2204D8EC69EC98C41739CC8C664C9C Validity Not Before: Apr 30 21:10:24 2024 GMT Not After : May 7 21:10:24 2024 GMT Subject: CN=66315e41-2648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:6d:82:5a:99:3c:d3:d9:09:c9:8e:e4:fa: f0:91:24:8e:7c:14:3b:b9:a4:59:ce:67:a3:31:53: c5:d5:32:24:08:1f:35:f5:57:77:ff:66:c4:e0:57: d5:92:1a:31:47:e6:f9:bb:93:ca:54:9a:c0:4e:5d: d0:a1:37:c5:82:b2:63:df:3f:6e:0c:5a:e1:23:c4: 4f:9d:f2:ac:e6:1b:29:f7:73:fa:ea:32:9d:b7:a5: 2d:4d:b8:fc:c9:60:6c:6d:75:9f:9f:cd:69:c6:63: 34:b3:b2:17:01:97:aa:f7:99:b5:19:36:c8:7d:37: e0:cc:2e:f4:1a:2d:14:05:c9:1a:81:c3:5b:bc:09: ae:df:e3:2f:fe:c0:f2:df:4c:f4:cc:80:8c:0e:d1: 7e:95:56:6b:61:13:8e:53:ad:e8:64:f3:b6:0f:f8: 48:60:a5:45:48:7b:52:0a:fe:41:a8:47:0c:e4:cc: 15:e2:47:7f:44:c5:f8:ff:5e:e5:5c:27:d1:20:7c: 8e:1c:95:68:42:80:45:4c:16:bf:0e:1f:14:ab:d8: 47:6a:a4:98:8a:db:80:87:cd:c0:f8:55:ee:38:67: 1e:2d:99:ba:83:f1:2f:05:c9:98:a8:4a:dc:1a:fb: 40:97:1b:5b:88:db:3a:40:cc:78:a7:85:9f:87:89: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CE:03:5B:40:25:9A:5D:B7:4F:B9:3A:36:03:A5:F4:8B:AF:F7:A2 X509v3 Authority Key Identifier: keyid:CC:72:E1:79:7B:22:04:D8:EC:69:EC:98:C4:17:39:CC:8C:66:4C:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHLheXsiBNjsaeyYxBc5zIxmTJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C725F/4E8D2B5C5D4411EA94C97D11C4F9AE02/zHLheXsiBNjsaeyYxBc5zIxmTJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d5:cd:1e:e7:a9:bf:ca:70:25:bb:a5:d0:1a:2a:76:9c:de: 7d:4b:f9:b2:c4:6c:07:36:ca:f4:e2:80:b0:b5:bd:54:8a:c4: 71:55:6f:74:f6:21:36:40:fa:2e:96:34:83:c6:c0:47:4c:84: e0:57:95:d9:c9:0d:91:bd:96:66:8e:f0:90:37:22:7c:5f:5d: 48:70:3e:96:2e:8c:50:70:a3:6b:16:df:35:51:6f:73:23:be: e2:d5:58:b7:4b:ca:a4:96:af:5b:ec:93:94:2f:8e:a7:ac:28: cf:d1:50:50:cc:b3:a2:00:3d:16:da:ce:d6:81:04:de:52:de: 4d:19:3e:cc:ed:82:d3:0e:54:9a:1b:fd:8b:a7:5d:51:90:c8: 90:cd:91:3f:a5:d7:86:b1:13:27:59:13:b5:33:d9:a9:f0:62: e9:ad:4c:85:68:a5:a8:19:85:76:bc:41:69:ad:84:9d:2b:74: b6:2b:53:12:b4:85:e4:df:02:11:b8:c3:f7:2d:8a:15:de:29: 4e:8b:55:e8:8d:f9:fd:8a:48:87:b1:2b:7e:67:e1:56:07:45: c8:7e:c8:88:78:f4:ab:1c:ef:d8:e8:44:44:92:40:9e:40:49: 07:6a:c5:5a:27:bf:b5:d1:82:35:a6:cb:b0:ca:22:b4:b4:86: af:a0:09:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyNUYxMTAvBgNVBAUTKENDNzJFMTc5N0IyMjA0RDhFQzY5RUM5OEM0MTczOUND OEM2NjRDOUMwHhcNMjQwNDMwMjExMDI0WhcNMjQwNTA3MjExMDI0WjAYMRYwFAYD VQQDEw02NjMxNWU0MS0yNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8ZtglqZPNPZCcmO5PrwkSSOfBQ7uaRZzmejMVPF1TIkCB819Vd3/2bE4FfV khoxR+b5u5PKVJrATl3QoTfFgrJj3z9uDFrhI8RPnfKs5hsp93P66jKdt6UtTbj8 yWBsbXWfn81pxmM0s7IXAZeq95m1GTbIfTfgzC70Gi0UBckagcNbvAmu3+Mv/sDy 30z0zICMDtF+lVZrYROOU63oZPO2D/hIYKVFSHtSCv5BqEcM5MwV4kd/RMX4/17l XCfRIHyOHJVoQoBFTBa/Dh8Uq9hHaqSYituAh83A+FXuOGceLZm6g/EvBcmYqErc GvtAlxtbiNs6QMx4p4Wfh4kvIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHOA1tA JZpdt0+5OjYDpfSLr/eiMB8GA1UdIwQYMBaAFMxy4Xl7IgTY7GnsmMQXOcyMZkyc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI1Ri80RThEMkI1QzVE NDQxMUVBOTRDOTdEMTFDNEY5QUUwMi96SExoZVhzaUJOanNhZXlZeEJjNXpJeG1U SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pITGhlWHNpQk5qc2FleVl4QmM1ekl4bVRKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzI1Ri80RThEMkI1QzVENDQxMUVBOTRDOTdEMTFDNEY5QUUwMi96SExoZVhzaUJO anNhZXlZeEJjNXpJeG1USncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW1c0e56m/ynAlu6XQGip2nN59S/myxGwHNsr04oCwtb1UisRxVW90 9iE2QPouljSDxsBHTITgV5XZyQ2RvZZmjvCQNyJ8X11IcD6WLoxQcKNrFt81UW9z I77i1Vi3S8qklq9b7JOUL46nrCjP0VBQzLOiAD0W2s7WgQTeUt5NGT7M7YLTDlSa G/2Lp11RkMiQzZE/pdeGsRMnWRO1M9mp8GLprUyFaKWoGYV2vEFprYSdK3S2K1MS tIXk3wIRuMP3LYoV3ilOi1Xojfn9ikiHsSt+Z+FWB0XIfsiIePSrHO/Y6EREkkCe QEkHasVaJ7+10YI1psuwyiK0tIavoAkT -----END CERTIFICATE-----Generated at Tue Apr 30 21:59:06 2024 by rpki-client on console-ams.rpki-client.org