$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: pOLPUH6tLaKkUNtJDV3VpDfsLoBMlcpAmFF+W/SljfE= Subject key identifier: 77:B1:B2:8E:EF:8B:C1:3A:07:87:1A:74:E2:C4:E0:78:38:8B:ED:E5 Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 17 Signing time: Fri 17 May 2024 08:52:22 +0000 Manifest this update: Fri 17 May 2024 08:52:22 +0000 Manifest next update: Fri 24 May 2024 08:52:22 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: oICDv2r/Hvgo11fYXJ94afkS3N44jonJGhbNn5pg1J8=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: JYbpzpLW52231ZAzTFSJa6h0jqk+nYAnIDRg3dToHsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: May 17 08:52:22 2024 GMT Not After : May 24 08:52:22 2024 GMT Subject: CN=66471ac6-b963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:bf:5f:0a:ef:b0:c0:a9:ef:9a:83:12:4e: 93:98:14:ee:8c:07:c8:85:ef:92:36:a5:df:b8:b8: c1:8a:19:41:be:cf:cf:da:52:84:f1:e2:63:84:5e: f5:d9:fc:1a:d4:d3:9b:1f:64:f1:2d:e9:af:65:4b: aa:37:0b:8d:e7:08:f6:52:88:44:69:d2:d4:99:d3: ec:8d:dd:80:94:5c:08:5e:3c:07:95:4b:5f:1c:5a: 56:eb:6b:99:5f:ab:e7:5d:98:dd:7e:a9:41:23:5c: 3a:66:9d:90:b1:71:18:4c:6e:83:05:37:7b:8f:10: 2b:71:89:1e:5f:24:31:88:ec:70:bf:bc:5c:ee:d5: 6f:1d:59:61:fe:80:12:72:6b:62:eb:7f:16:f4:1e: 81:e5:80:b3:41:27:3e:ec:68:cd:d1:7c:40:9e:24: 33:c2:ce:92:5c:42:d7:5d:88:1d:fb:2f:5f:cf:b6: 96:0b:41:a2:fe:9c:2e:dd:b1:44:6e:1c:92:b0:d8: ee:e5:ff:c5:1c:d3:00:f9:36:1e:1a:61:90:f0:27: 55:b6:9f:ff:b9:36:c3:5a:fd:2b:26:41:c1:c3:29: 71:e7:ff:6f:2c:49:04:e7:30:26:97:4c:74:f9:7c: 09:86:5b:1e:22:7b:b8:76:3b:a1:03:e7:9b:1a:f0: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:B2:8E:EF:8B:C1:3A:07:87:1A:74:E2:C4:E0:78:38:8B:ED:E5 X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:0c:f7:41:32:a5:a4:b1:c0:0a:68:54:2f:c8:a9:fc:a1:d8: 21:11:5d:ad:de:a7:6d:53:fb:55:cb:8f:f4:31:31:a7:d3:a4: 0c:54:b9:fd:b0:61:27:ef:36:ce:00:85:cc:d3:67:f2:1d:10: b7:5d:6e:27:fe:86:a4:12:47:3c:dd:5b:d2:aa:d4:3c:30:bf: cc:6b:57:7b:3c:46:8d:d1:4f:90:13:51:b0:f4:77:27:9d:f9: 25:2d:f5:4b:e0:dc:cd:af:ac:a2:85:00:a5:fd:a1:82:a4:a5: 36:63:18:71:07:6e:4d:47:d9:db:4d:69:e2:a0:30:25:b2:46: fd:16:ad:19:3e:eb:7b:fc:af:b6:46:0a:6b:31:e1:5d:12:fb: e8:a7:eb:f6:2a:9a:68:1f:b6:ff:a3:18:3e:c6:ef:27:74:6b: 16:5e:8e:51:2b:f4:21:06:7e:40:ad:96:20:26:f1:b1:32:e1: 61:e1:b3:24:e4:08:9f:6f:e0:4d:76:06:70:47:98:cd:5c:4e: fa:c3:80:af:3f:6a:0f:12:b3:39:5f:f2:1f:66:a8:82:5f:6c: f9:ad:89:ea:b8:e4:44:92:7b:ee:73:56:e8:09:77:bc:c9:51: 57:6d:51:07:56:28:7e:81:c8:b2:00:5b:3d:3b:12:96:94:b8: e9:ce:84:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0E0RTExMC8GA1UEBRMoNjVCNDM1MkZDNUI3NEQzMUQ3Nzk3MzZGQ0ZFN0Y2NDFC QUM3M0VCMjAeFw0yNDA1MTcwODUyMjJaFw0yNDA1MjQwODUyMjJaMBgxFjAUBgNV BAMTDTY2NDcxYWM2LWI5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8GL9fCu+wwKnvmoMSTpOYFO6MB8iF75I2pd+4uMGKGUG+z8/aUoTx4mOEXvXZ /BrU05sfZPEt6a9lS6o3C43nCPZSiERp0tSZ0+yN3YCUXAhePAeVS18cWlbra5lf q+ddmN1+qUEjXDpmnZCxcRhMboMFN3uPECtxiR5fJDGI7HC/vFzu1W8dWWH+gBJy a2Lrfxb0HoHlgLNBJz7saM3RfECeJDPCzpJcQtddiB37L1/PtpYLQaL+nC7dsURu HJKw2O7l/8Uc0wD5Nh4aYZDwJ1W2n/+5NsNa/SsmQcHDKXHn/28sSQTnMCaXTHT5 fAmGWx4ie7h2O6ED55sa8F1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd7Gyju+L wToHhxp04sTgeDiL7eUwHwYDVR0jBBgwFoAUZbQ1L8W3TTHXeXNvz+f2QbrHPrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQTRFLzc2MkZFNjQ0RjEz OTExRUVBNUVDNTA1OEM0RjlBRTAyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmJRMUw4VzNUVEhYZVhOdnotZjJRYnJIUHJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QTRFLzc2MkZFNjQ0RjEzOTExRUVBNUVDNTA1OEM0RjlBRTAyL1piUTFMOFczVFRI WGVYTnZ6LWYyUWJySFBySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAM90EypaSxwApoVC/Iqfyh2CERXa3ep21T+1XLj/QxMafTpAxUuf2w YSfvNs4AhczTZ/IdELddbif+hqQSRzzdW9Kq1Dwwv8xrV3s8Ro3RT5ATUbD0dyed +SUt9Uvg3M2vrKKFAKX9oYKkpTZjGHEHbk1H2dtNaeKgMCWyRv0WrRk+63v8r7ZG Cmsx4V0S++in6/Yqmmgftv+jGD7G7yd0axZejlEr9CEGfkCtliAm8bEy4WHhsyTk CJ9v4E12BnBHmM1cTvrDgK8/ag8Sszlf8h9mqIJfbPmtieq45ESSe+5zVugJd7zJ UVdtUQdWKH6ByLIAWz07EpaUuOnOhOg= -----END CERTIFICATE-----Generated at Fri May 17 10:59:14 2024 by rpki-client on console-ams.rpki-client.org