$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: AIPIaSnAb16LWIiG6Agxt84pVGx0Va5MySEYllYoRwk= Subject key identifier: B1:D1:CE:1A:EE:9B:2E:B5:8D:2D:29:51:0D:5C:E0:27:C8:38:70:C7 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0818 Signing time: Sat 18 May 2024 21:49:57 +0000 Manifest this update: Sat 18 May 2024 21:49:57 +0000 Manifest next update: Sat 25 May 2024 21:49:57 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: ogd+heCuA8UcMT6d8tlOsKRKVGeUItx2cBVU+XxUCk4=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: JASfvNQGueVGvvI4vyDMOa1HuqKYc3UAFhDDUGxJcdo=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: Qq9CVIwOQl8iOT2IAZyZUQMWOjo9Ahg0VBSPTd2tmZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: May 18 21:49:57 2024 GMT Not After : May 25 21:49:57 2024 GMT Subject: CN=66492285-6159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:e0:2b:ab:13:85:f7:ee:4f:25:bf:f9:14: 35:ff:e8:a7:f3:aa:6b:43:ac:51:bf:7f:6f:78:81: 9a:d3:68:ec:a9:bc:7e:ff:b2:c6:f7:7b:79:9c:0b: 13:7b:2b:0f:a6:23:b2:5c:e5:55:68:d6:b1:cf:71: 26:d0:5f:bc:93:13:b4:4a:59:04:3b:eb:41:5e:d6: 84:21:b8:9f:d7:4a:98:b8:da:c8:71:57:ab:51:0d: b7:9a:a9:be:39:0c:f0:51:e4:87:c6:a7:d9:7c:75: 20:54:70:a2:dc:76:38:8c:39:db:5b:cc:05:06:47: 8c:9d:e3:97:d2:91:94:a6:53:60:8e:8f:f2:a2:f3: 5f:a2:36:af:1d:1c:dd:a4:72:05:37:55:47:ff:de: 79:1f:bf:f8:03:f2:57:cf:67:e3:64:01:e4:07:85: 4d:70:7d:fe:4b:0c:cf:83:1d:38:c4:61:cc:21:28: 30:54:48:85:a1:02:a5:39:8b:61:82:7a:29:20:b5: b7:41:14:b6:d2:b0:98:a6:06:36:75:18:88:59:04: 89:e0:e6:83:31:09:9c:ab:82:1f:29:94:93:5e:1f: d4:b8:53:35:43:a0:c6:58:02:db:16:5c:5b:20:f0: 25:6a:03:a5:75:67:c9:a6:b6:c6:55:9d:f9:80:b0: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D1:CE:1A:EE:9B:2E:B5:8D:2D:29:51:0D:5C:E0:27:C8:38:70:C7 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:91:f1:00:a8:7b:ea:a9:04:0d:91:eb:b7:07:63:d0:38:7f: 5b:24:02:ac:a7:85:d3:9c:47:bc:4d:e7:2c:a8:ae:34:c5:64: af:f5:18:10:39:c9:07:d0:51:0f:d8:60:1a:9b:eb:68:f8:e9: 60:46:06:a6:32:bb:c8:89:de:50:81:eb:3f:12:57:45:9a:f0: e4:f1:21:77:4b:6a:47:ab:a0:1f:ac:e2:c4:13:55:90:ed:b9: f1:0e:a1:71:63:d2:f2:14:47:74:41:bc:63:ad:f2:83:9d:6a: 77:62:e2:71:29:2a:21:f0:f0:ea:3f:a8:b7:86:b4:2c:38:8a: 62:d6:f6:d1:52:6e:9b:64:e0:9c:d3:3f:92:ce:9e:e1:e4:94: 28:df:f3:e8:5c:e0:31:5c:ac:cd:fe:51:9a:f5:ee:3b:a5:8f: d1:9a:01:48:b5:4b:61:a5:81:90:1b:14:73:43:32:d5:b7:6b: e8:ce:fd:86:aa:45:e8:37:c2:28:e8:f4:9e:e2:09:b0:38:b7: de:c9:82:3e:28:fb:1c:f1:92:45:8f:43:b3:83:c8:8e:8c:0e: b2:8e:00:04:4e:8c:49:07:6e:10:dd:cf:d4:55:b5:1a:2c:1f: d8:ff:9a:bb:8b:4b:4d:e5:87:c4:f6:33:06:e1:d9:1a:5b:f7: 12:59:27:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjQwNTE4MjE0OTU3WhcNMjQwNTI1MjE0OTU3WjAYMRYwFAYD VQQDEw02NjQ5MjI4NS02MTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuvgK6sThffuTyW/+RQ1/+in86prQ6xRv39veIGa02jsqbx+/7LG93t5nAsT eysPpiOyXOVVaNaxz3Em0F+8kxO0SlkEO+tBXtaEIbif10qYuNrIcVerUQ23mqm+ OQzwUeSHxqfZfHUgVHCi3HY4jDnbW8wFBkeMneOX0pGUplNgjo/yovNfojavHRzd pHIFN1VH/955H7/4A/JXz2fjZAHkB4VNcH3+SwzPgx04xGHMISgwVEiFoQKlOYth gnopILW3QRS20rCYpgY2dRiIWQSJ4OaDMQmcq4IfKZSTXh/UuFM1Q6DGWALbFlxb IPAlagOldWfJprbGVZ35gLCbtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHRzhru my61jS0pUQ1c4CfIOHDHMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCykfEAqHvqqQQNkeu3B2PQOH9bJAKsp4XTnEe8TecsqK40xWSv9RgQ OckH0FEP2GAam+to+OlgRgamMrvIid5Qges/EldFmvDk8SF3S2pHq6AfrOLEE1WQ 7bnxDqFxY9LyFEd0QbxjrfKDnWp3YuJxKSoh8PDqP6i3hrQsOIpi1vbRUm6bZOCc 0z+Szp7h5JQo3/PoXOAxXKzN/lGa9e47pY/RmgFItUthpYGQGxRzQzLVt2vozv2G qkXoN8Io6PSe4gmwOLfeyYI+KPsc8ZJFj0Ozg8iOjA6yjgAEToxJB24Q3c/UVbUa LB/Y/5q7i0tN5YfE9jMG4dkaW/cSWSc4 -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org