$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: bEV9UCh6On1f0Pz1SXoE2iMKB422ZMr72mwmq8DTmyI= Subject key identifier: A5:1F:E8:0C:24:60:D8:D3:48:BD:0F:7C:22:77:D4:A7:06:09:B5:4C Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 1701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 16B7 Signing time: Thu 02 May 2024 17:11:49 +0000 Manifest this update: Thu 02 May 2024 17:11:49 +0000 Manifest next update: Thu 09 May 2024 17:11:49 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: aNJZxOJFKbbn4PcSBxZp9LZ9uPpBCsqDn4I2ZNaK3js=) 2: 7166B29E9AD811EE999AC186C4F9AE02.roa (hash: 9L0FYBm6vBSRwVAFtNppTiFQXy8CRKKZY6ZKorYpHxA=) 3: EE2B9106D95E11E7A5E2E166C4F9AE02.roa (hash: 464b1biL/7a6FIAKPAceLOp0kJT6PQlnl7HNFihj0TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5889 (0x1701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: May 2 17:11:49 2024 GMT Not After : May 9 17:11:49 2024 GMT Subject: CN=6633c955-acd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:bd:53:ca:9a:97:b0:ef:60:cf:82:ec:c7: 96:4b:e8:3b:ba:c5:e6:94:57:6a:86:c2:0b:55:65: 2f:d4:b0:10:11:f2:31:f6:79:34:1f:44:b0:9e:8b: 31:d7:ab:6c:30:10:0c:00:25:56:ed:c8:e0:99:24: 58:88:e7:43:12:89:07:d8:2a:0a:66:cf:2b:14:16: f2:30:73:0c:79:8d:b4:96:4f:3b:fc:94:c8:58:aa: b3:f3:33:70:75:4b:4e:ce:a1:ee:74:df:d3:42:52: 21:66:de:59:3e:a1:c5:33:50:bf:20:79:40:b8:14: 4c:21:7a:e1:36:82:78:12:fc:66:db:aa:63:4d:62: 1d:b1:e7:d0:9f:1e:04:22:e3:01:ca:eb:8c:51:0b: dc:63:01:be:fa:6c:36:ba:1e:b3:61:e2:03:4f:6a: 7f:ce:b8:86:f3:f7:44:90:f2:9b:6b:63:aa:d6:75: a8:65:9f:62:fd:d5:8d:ac:de:61:64:95:d8:d5:e0: 7c:a4:5f:47:7d:ab:60:96:ab:bc:9b:af:3e:c1:5a: 38:1e:e4:1c:b4:bf:1e:61:76:59:36:a5:37:41:70: 7d:a0:81:bc:ce:d8:cf:0d:38:64:10:48:33:22:e9: 38:e1:e3:7c:db:41:7d:66:ee:22:43:b0:37:a0:7a: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1F:E8:0C:24:60:D8:D3:48:BD:0F:7C:22:77:D4:A7:06:09:B5:4C X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:48:27:eb:93:19:aa:2e:46:89:d7:62:ea:1f:dc:49:d8:6b: 79:cd:55:4c:5b:35:fe:02:c0:ae:d8:d6:42:72:ab:4c:78:e1: 35:40:84:a5:8c:15:61:ee:26:7c:13:7a:5a:17:1f:b1:a8:d6: ad:93:a9:54:be:43:92:a4:64:ca:0b:a3:2f:21:60:f3:0f:a8: 00:8e:e8:4f:ba:2f:96:46:86:f5:fd:91:37:ce:44:6a:72:e2: a3:12:21:2d:01:9a:27:cd:03:25:ba:2e:47:d3:62:75:ff:c8: 91:eb:63:6e:80:f9:6a:40:56:41:93:f6:ed:ce:57:6e:ae:13: 11:8c:ff:db:4b:07:5e:f3:11:55:63:61:2d:ae:da:70:3b:91: 0e:92:5e:2f:3e:91:82:ee:b0:57:bf:32:21:fd:38:0a:ea:96: 4e:29:74:34:cd:25:73:2f:a6:e0:ce:09:92:49:fe:53:cb:ca: 42:36:e1:73:e4:5a:22:1a:e6:8f:62:c4:eb:a3:43:e1:28:09: 7d:f3:46:33:b3:f6:38:2e:92:87:5e:6a:72:6f:e8:00:61:27: 1e:43:ce:75:f4:0b:d9:49:09:27:68:6b:56:b3:d8:4b:33:6e: 29:87:2a:ef:04:c8:85:5c:86:b8:94:6b:19:cf:62:64:8e:06: d6:d1:6a:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjQwNTAyMTcxMTQ5WhcNMjQwNTA5MTcxMTQ5WjAYMRYwFAYD VQQDEw02NjMzYzk1NS1hY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuU69U8qal7DvYM+C7MeWS+g7usXmlFdqhsILVWUv1LAQEfIx9nk0H0Swnosx 16tsMBAMACVW7cjgmSRYiOdDEokH2CoKZs8rFBbyMHMMeY20lk87/JTIWKqz8zNw dUtOzqHudN/TQlIhZt5ZPqHFM1C/IHlAuBRMIXrhNoJ4Evxm26pjTWIdsefQnx4E IuMByuuMUQvcYwG++mw2uh6zYeIDT2p/zriG8/dEkPKba2Oq1nWoZZ9i/dWNrN5h ZJXY1eB8pF9Hfatglqu8m68+wVo4HuQctL8eYXZZNqU3QXB9oIG8ztjPDThkEEgz Iuk44eN820F9Zu4iQ7A3oHoD2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUf6Awk YNjTSL0PfCJ31KcGCbVMMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpSCfrkxmqLkaJ12LqH9xJ2Gt5zVVMWzX+AsCu2NZCcqtMeOE1QISl jBVh7iZ8E3paFx+xqNatk6lUvkOSpGTKC6MvIWDzD6gAjuhPui+WRob1/ZE3zkRq cuKjEiEtAZonzQMlui5H02J1/8iR62NugPlqQFZBk/btzldurhMRjP/bSwde8xFV Y2EtrtpwO5EOkl4vPpGC7rBXvzIh/TgK6pZOKXQ0zSVzL6bgzgmSSf5Ty8pCNuFz 5FoiGuaPYsTro0PhKAl980Yzs/Y4LpKHXmpyb+gAYSceQ8519AvZSQknaGtWs9hL M24phyrvBMiFXIa4lGsZz2JkjgbW0Wpu -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org