$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: H4zIdYQCPSV55XD4aOlQpFEWz6Yr5Q4fc8ZirR46LlQ= Subject key identifier: B9:AD:A3:9E:CF:8C:4F:CD:2B:60:53:8C:3B:67:8F:4E:A7:8F:73:7D Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 237D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 2360 Signing time: Sat 18 May 2024 16:08:34 +0000 Manifest this update: Sat 18 May 2024 16:08:33 +0000 Manifest next update: Sat 25 May 2024 16:08:33 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: LFYNQE1YeXOwqJy9hK7BzR7ojc/hP4F71X7qabFE9hk=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: rYNEGiWrpSP/p46gT0UIbY2vOINTen1a5+WUXMJC+C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9085 (0x237d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: May 18 16:08:33 2024 GMT Not After : May 25 16:08:33 2024 GMT Subject: CN=6648d282-0d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:b1:0b:56:cc:7b:2e:11:f2:16:9c:3d:c3: d7:1e:90:37:da:76:46:dc:8b:69:7d:00:bf:b2:d2: 52:b0:cd:77:55:99:08:a6:d0:45:0b:2b:df:f9:1a: ec:a7:30:82:0f:1f:f0:95:27:f6:02:09:8d:d6:73: 52:9b:4f:5f:e1:0a:18:51:19:4f:c7:18:f3:cb:87: 06:56:9b:ef:d2:9b:27:b8:a4:3c:fd:17:1a:57:d3: 03:d0:b7:f1:cf:d6:e8:00:3f:58:41:61:09:21:3c: e7:a8:65:a0:dd:41:37:98:0b:6e:bb:5b:f4:ce:a3: 0d:70:59:e6:26:3f:ed:40:5c:56:f5:cb:19:20:90: 5a:8c:c0:47:2b:6d:f7:54:27:af:4a:ca:87:ea:07: 4f:dc:d8:56:d1:ba:3e:64:2e:2c:d5:c3:61:3d:9d: 58:2c:63:38:7f:10:9c:d3:23:e9:f0:87:0d:7b:ad: 6b:e4:ec:c6:1e:e1:e9:dd:28:52:a7:6a:ec:33:27: 2b:4c:8d:4b:9f:37:cd:e7:e9:8c:1a:10:e8:36:c4: f1:95:e4:4f:1b:2d:15:c0:42:2c:91:d6:a1:e5:b8: ec:35:fb:46:9f:e4:9a:c9:28:4b:ae:01:51:65:c4: 11:44:57:09:79:00:57:8c:41:db:cc:8c:b0:c5:bd: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AD:A3:9E:CF:8C:4F:CD:2B:60:53:8C:3B:67:8F:4E:A7:8F:73:7D X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:37:ff:7d:37:37:6c:09:fb:4b:87:5f:e1:2a:20:77:02:67: 7a:e2:8b:41:09:e8:9e:b6:b8:c0:7b:e2:ca:64:9e:b2:58:e4: 47:a0:ca:56:5a:b1:78:a5:12:9c:9b:74:53:cb:48:05:d4:3b: f5:07:b1:51:38:7e:f6:20:94:9c:77:bc:9f:9d:d1:45:a1:2e: f2:cf:22:06:d2:14:7a:da:ce:16:07:6a:61:7c:c2:a6:c0:d8: 08:8d:a3:10:07:18:92:25:39:2f:a9:81:66:0d:80:93:a2:ba: 07:a6:9d:3b:12:e8:5a:d1:ae:08:1f:c1:7b:a0:1c:ba:bd:35: 3d:6f:1b:5b:40:64:7d:ab:cf:63:ea:ce:ce:c7:8a:94:0d:f8: e1:56:80:19:48:59:ed:80:a9:e1:7b:76:7b:e7:8c:06:fc:0c: ac:f4:1e:1f:15:05:48:ea:19:92:24:ed:99:2c:5b:71:e9:9c: ab:6b:bc:01:ef:c7:25:13:80:38:72:89:bc:f1:07:de:cf:cd: ba:45:b6:cd:12:01:09:78:69:ba:49:35:62:e9:11:81:3b:43: 60:68:cb:47:51:72:64:2c:67:0c:f9:64:91:10:db:dc:2e:d8: 8c:11:ae:e0:8e:a9:b2:b3:f9:b6:fd:b1:ef:fb:f0:5b:81:33: 07:36:d0:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjQwNTE4MTYwODMzWhcNMjQwNTI1MTYwODMzWjAYMRYwFAYD VQQDEw02NjQ4ZDI4Mi0wZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6+xC1bMey4R8hacPcPXHpA32nZG3ItpfQC/stJSsM13VZkIptBFCyvf+Rrs pzCCDx/wlSf2AgmN1nNSm09f4QoYURlPxxjzy4cGVpvv0psnuKQ8/RcaV9MD0Lfx z9boAD9YQWEJITznqGWg3UE3mAtuu1v0zqMNcFnmJj/tQFxW9csZIJBajMBHK233 VCevSsqH6gdP3NhW0bo+ZC4s1cNhPZ1YLGM4fxCc0yPp8IcNe61r5OzGHuHp3ShS p2rsMycrTI1LnzfN5+mMGhDoNsTxleRPGy0VwEIskdah5bjsNftGn+SayShLrgFR ZcQRRFcJeQBXjEHbzIywxb3+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmto57P jE/NK2BTjDtnj06nj3N9MB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfN/99NzdsCftLh1/hKiB3Amd64otBCeietrjAe+LKZJ6yWORHoMpW WrF4pRKcm3RTy0gF1Dv1B7FROH72IJScd7yfndFFoS7yzyIG0hR62s4WB2phfMKm wNgIjaMQBxiSJTkvqYFmDYCToroHpp07Euha0a4IH8F7oBy6vTU9bxtbQGR9q89j 6s7Ox4qUDfjhVoAZSFntgKnhe3Z754wG/Ays9B4fFQVI6hmSJO2ZLFtx6Zyra7wB 78clE4A4com88Qfez826RbbNEgEJeGm6STVi6RGBO0NgaMtHUXJkLGcM+WSRENvc LtiMEa7gjqmys/m2/bHv+/BbgTMHNtCp -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org