$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: ddY8QeLcqqHwb3XyVG+p35YNFz3cM7soJvSvrQYw9D4= Subject key identifier: 4D:43:CE:14:B4:2D:72:89:63:6F:09:D1:A5:73:70:4A:D4:B8:FB:9B Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 237F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 2371 Signing time: Sat 18 May 2024 16:07:46 +0000 Manifest this update: Sat 18 May 2024 16:07:46 +0000 Manifest next update: Sat 25 May 2024 16:07:46 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: tDtV9YAHzeNep3dHlup+5Jh9ZCa7XrT080BycR0Ct80=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: b5wTP1s0WI6qO63RwbIC1+8mETnuMbCWHPaXYtzE2jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9087 (0x237f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: May 18 16:07:46 2024 GMT Not After : May 25 16:07:46 2024 GMT Subject: CN=6648d252-d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:1c:9b:bc:0a:91:6c:84:ab:23:23:b9:70: 44:8f:c3:04:90:e2:4f:fb:b7:59:1c:5b:1d:ec:58: 0e:3e:1e:f0:14:2c:9d:6d:a6:10:32:d0:8b:29:a4: 82:3b:09:8f:4b:87:a1:b5:25:44:33:10:54:cd:d9: 1b:0d:cd:9b:ce:94:5a:a1:0f:f1:f5:fb:25:27:ff: 5b:67:0e:aa:e2:ed:17:5c:f9:15:85:d4:70:aa:64: 33:63:80:34:6a:f9:6c:28:b2:26:dc:8e:91:6b:dc: 7d:d4:a2:b1:48:9e:f0:93:13:a8:34:6d:af:6a:d3: cc:20:26:a4:76:f8:ce:73:d2:be:b1:0a:ba:c4:ac: f1:62:bf:d2:6a:ae:90:69:e1:3a:23:4d:b2:0a:b9: c0:62:f9:c8:38:b8:2d:7b:c0:ed:be:70:ba:4b:63: a8:53:03:aa:e6:69:ab:ef:a6:8f:f7:b3:26:41:69: 6c:32:35:5e:58:6f:48:6d:c8:a9:cb:66:28:d1:b9: f9:48:2c:e1:fd:78:a8:d5:5f:f6:f5:a1:87:d6:7a: 66:ea:96:31:86:4c:42:73:e5:cf:3b:74:b1:ec:d5: c3:92:b5:a0:dc:5b:68:78:69:14:6e:a7:c4:df:a3: 91:6b:cb:ac:9d:73:ef:60:b8:45:ea:d3:d7:f8:96: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:CE:14:B4:2D:72:89:63:6F:09:D1:A5:73:70:4A:D4:B8:FB:9B X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:3b:a4:4e:71:c4:ce:f7:14:f9:56:8e:1d:fb:03:88:70: 06:77:03:b9:c2:24:0d:72:91:74:67:e5:78:98:8c:d7:df:67: 6b:b0:66:77:30:59:8a:7f:62:07:4b:bb:e6:bd:c7:9c:f9:da: 6d:58:a6:9f:56:43:18:2d:aa:6f:ce:62:e4:90:7e:4a:a7:52: 08:3a:86:f6:0d:59:8b:44:2d:02:a2:40:33:29:3d:34:46:26: d2:cb:be:5f:99:f4:4e:17:d2:e3:ac:08:fe:59:ac:e2:ca:ab: 8b:05:3e:b4:e7:b6:e2:06:60:af:2d:03:29:7f:5e:7c:20:52: c3:f9:ae:a2:a3:25:4a:58:d3:31:9e:69:37:f6:f7:04:13:11: 1f:4d:0d:d9:ef:d1:e3:11:90:01:2f:ad:34:c5:14:03:73:98: dc:06:89:d7:c3:4f:95:5e:c8:da:9b:89:bd:14:5d:e7:1b:b8: 60:52:24:a4:3a:02:2b:89:b8:08:44:8d:e8:84:af:88:2b:1e: 17:27:29:05:df:4d:bd:6b:bf:f9:a4:a9:65:6e:85:8b:b0:18: 1f:e6:ec:7f:92:5f:07:23:28:b4:3f:1d:38:c4:2e:7c:03:52: df:f5:2e:5c:8d:68:eb:b8:c9:14:ac:21:9f:b3:c4:fa:46:5c: f1:a7:55:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjQwNTE4MTYwNzQ2WhcNMjQwNTI1MTYwNzQ2WjAYMRYwFAYD VQQDEw02NjQ4ZDI1Mi1kMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjYcm7wKkWyEqyMjuXBEj8MEkOJP+7dZHFsd7FgOPh7wFCydbaYQMtCLKaSC OwmPS4ehtSVEMxBUzdkbDc2bzpRaoQ/x9fslJ/9bZw6q4u0XXPkVhdRwqmQzY4A0 avlsKLIm3I6Ra9x91KKxSJ7wkxOoNG2vatPMICakdvjOc9K+sQq6xKzxYr/Saq6Q aeE6I02yCrnAYvnIOLgte8DtvnC6S2OoUwOq5mmr76aP97MmQWlsMjVeWG9Ibcip y2Yo0bn5SCzh/Xio1V/29aGH1npm6pYxhkxCc+XPO3Sx7NXDkrWg3FtoeGkUbqfE 36ORa8usnXPvYLhF6tPX+JYYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1DzhS0 LXKJY28J0aVzcErUuPubMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJZTukTnHEzvcU+VaOHfsDiHAGdwO5wiQNcpF0Z+V4mIzX32drsGZ3 MFmKf2IHS7vmvcec+dptWKafVkMYLapvzmLkkH5Kp1IIOob2DVmLRC0CokAzKT00 RibSy75fmfROF9LjrAj+WaziyquLBT6057biBmCvLQMpf158IFLD+a6ioyVKWNMx nmk39vcEExEfTQ3Z79HjEZABL600xRQDc5jcBonXw0+VXsjam4m9FF3nG7hgUiSk OgIribgIRI3ohK+IKx4XJykF3029a7/5pKllboWLsBgf5ux/kl8HIyi0Px04xC58 A1Lf9S5cjWjruMkUrCGfs8T6Rlzxp1Xj -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org