$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: ELaMWpIj77oOYc1CUJlgCObe7crOqtiC04/yKH82pAk= Subject key identifier: 9D:37:E1:F4:C1:21:93:DA:B5:05:84:03:56:A8:B4:32:EB:81:C7:22 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0BB5 Signing time: Sat 04 May 2024 19:22:55 +0000 Manifest this update: Sat 04 May 2024 19:22:55 +0000 Manifest next update: Sat 11 May 2024 19:22:55 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: vnFxXUXWbYf0bsrT5aOQy3ZWERwbhJHw8ZtySKhYhMM=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: K1rAuJOED+6Q4BLx8v57fInKqUu+2+FMuirq4Ojpcg4=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: Oj/HpRoXwbskrx6g4DxKc4eANqMpbexlTcX718AemjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: May 4 19:22:55 2024 GMT Not After : May 11 19:22:55 2024 GMT Subject: CN=66368b0f-beba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:fd:f7:fc:ce:a2:46:95:80:20:1d:4a:77: 6a:e9:2a:f7:47:45:d7:6b:50:3b:6d:6e:6b:5c:1c: 72:d9:b3:c9:cc:9a:43:f8:e6:98:db:89:37:84:31: 43:cb:cd:3b:6b:bc:3c:e3:48:7b:ab:83:f6:be:12: f1:92:81:15:13:d4:62:e8:89:eb:25:32:c7:89:3a: f5:01:d0:af:eb:d5:7e:91:19:02:b4:e7:13:15:70: b2:87:92:cb:d0:9a:0b:58:42:30:46:1d:49:b3:03: bf:67:f5:58:a5:da:63:21:02:dd:ab:9b:9a:3a:00: d2:30:46:5f:18:44:96:1c:0a:7a:f3:47:2e:c1:b5: c9:09:60:02:86:12:36:18:c8:90:9e:4c:8f:a7:23: f7:bc:45:4a:16:bf:92:9c:9c:3e:e2:57:66:51:90: 76:44:8a:06:8b:78:71:f3:e9:43:23:ae:c9:52:cf: 16:8c:83:1a:24:c2:79:aa:99:37:c7:8b:59:3f:ab: 94:d0:fa:eb:2f:3d:c0:28:1e:37:46:f6:52:f9:49: 31:a1:c1:2d:a7:6e:66:92:43:57:c6:42:88:58:c4: 36:d8:71:fa:a0:3d:85:85:c9:1d:9d:01:8b:3c:f3: 01:61:64:76:02:76:d2:b3:ec:a0:b6:b7:c3:47:ce: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:37:E1:F4:C1:21:93:DA:B5:05:84:03:56:A8:B4:32:EB:81:C7:22 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:65:7c:93:95:d6:ce:80:91:1f:56:df:fc:f2:bc:4b:b2:6e: 3b:9d:da:ee:aa:0e:73:0c:0a:8a:9f:39:d3:25:de:a9:c6:b1: c3:80:b2:a2:d8:e8:da:70:49:b3:bd:3e:54:4e:61:72:c7:33: 51:78:9b:c1:29:14:39:19:8f:2f:02:e4:c3:10:7e:4e:81:3a: 1c:b7:af:79:75:ae:f3:aa:61:39:9d:cd:5a:9f:08:97:36:97: 39:f2:9a:75:7b:fc:50:06:36:31:06:d4:a9:d9:4e:51:d7:7b: ec:71:ff:b1:93:c3:92:fc:9c:54:34:90:98:47:bc:c7:c5:c0: 9f:be:ef:f2:87:b0:73:b2:33:d2:e3:2d:cc:ec:62:c0:8c:31: 03:4b:b4:70:52:eb:03:89:73:7c:31:d7:74:80:7b:aa:eb:cc: ac:34:69:7d:ab:6f:53:e2:7a:ce:1b:13:a1:13:b0:d4:2e:c3: 92:ed:1d:3a:2b:d1:0e:15:a8:20:6d:a4:c6:93:48:d9:bb:70: 13:4f:d7:c4:23:4d:5b:b7:87:d4:eb:f3:47:37:50:e6:f1:79: 4f:a5:6d:5e:93:d1:9b:52:cd:da:29:43:b1:5e:0e:2d:6c:fd: 67:49:64:1a:56:9f:73:2c:6c:7c:fd:3c:e6:44:ee:01:52:ce: fa:18:01:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjQwNTA0MTkyMjU1WhcNMjQwNTExMTkyMjU1WjAYMRYwFAYD VQQDEw02NjM2OGIwZi1iZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+P99/zOokaVgCAdSndq6Sr3R0XXa1A7bW5rXBxy2bPJzJpD+OaY24k3hDFD y807a7w840h7q4P2vhLxkoEVE9Ri6InrJTLHiTr1AdCv69V+kRkCtOcTFXCyh5LL 0JoLWEIwRh1JswO/Z/VYpdpjIQLdq5uaOgDSMEZfGESWHAp680cuwbXJCWAChhI2 GMiQnkyPpyP3vEVKFr+SnJw+4ldmUZB2RIoGi3hx8+lDI67JUs8WjIMaJMJ5qpk3 x4tZP6uU0PrrLz3AKB43RvZS+UkxocEtp25mkkNXxkKIWMQ22HH6oD2FhckdnQGL PPMBYWR2AnbSs+ygtrfDR84Y/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ034fTB IZPatQWEA1aotDLrgcciMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ZXyTldbOgJEfVt/88rxLsm47ndruqg5zDAqKnznTJd6pxrHDgLKi 2OjacEmzvT5UTmFyxzNReJvBKRQ5GY8vAuTDEH5OgToct695da7zqmE5nc1anwiX Npc58pp1e/xQBjYxBtSp2U5R13vscf+xk8OS/JxUNJCYR7zHxcCfvu/yh7BzsjPS 4y3M7GLAjDEDS7RwUusDiXN8Mdd0gHuq68ysNGl9q29T4nrOGxOhE7DULsOS7R06 K9EOFaggbaTGk0jZu3ATT9fEI01bt4fU6/NHN1Dm8XlPpW1ek9GbUs3aKUOxXg4t bP1nSWQaVp9zLGx8/TzmRO4BUs76GAGs -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org