$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: 92yQoo8qw2B8th6tmdfO0F3RzJQHLc/df9tD2IcIQw0= Subject key identifier: 01:0B:C5:EA:79:32:36:A5:17:E7:A6:8A:AC:93:F3:8D:13:A1:06:94 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0B84 Signing time: Sat 18 May 2024 19:21:00 +0000 Manifest this update: Sat 18 May 2024 19:20:59 +0000 Manifest next update: Sat 25 May 2024 19:20:59 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: A4Sz4xoOXPdCHpkM8t5gITl5Um2NgPOekid9UngSJJ4=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: P7GXV6aA9dHiZJysliChpv6ngsAblSKuNIBuT4WgWZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: May 18 19:20:59 2024 GMT Not After : May 25 19:20:59 2024 GMT Subject: CN=6648ff9b-7a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:e8:44:67:85:92:6d:40:a3:2e:8c:58:f5: 55:f9:f4:ae:02:60:3b:bf:d8:58:ea:3a:73:51:2c: 20:a5:a6:27:42:83:52:da:7d:0c:52:b3:22:83:da: 62:cc:dd:55:09:4c:d7:6a:a9:0a:ac:32:ba:6c:a1: 99:8b:ac:89:e8:70:c8:56:20:5b:30:cb:11:0b:1e: 8e:85:65:c7:52:c1:07:cd:33:02:9e:f8:51:89:ed: 72:c5:72:fd:dc:00:fb:f0:4d:29:69:4a:61:ec:a0: b5:63:bd:ee:c3:e7:db:85:74:c5:10:c5:2c:71:0a: fd:7e:79:6c:10:86:8e:38:09:ba:3c:6a:20:bd:9b: 9d:24:7b:96:f6:20:9c:70:c7:33:ae:34:a0:7d:62: 87:2d:fa:1b:f3:b6:f5:10:6e:9c:9b:08:54:4b:73: fa:4e:8f:36:31:35:41:a9:df:c7:1a:7d:94:c5:0c: b9:fd:23:91:80:0c:79:cc:a6:60:3b:3a:35:44:3b: 26:b3:bc:e6:f1:5d:82:87:4d:14:45:37:42:6d:30: bb:81:43:87:39:4c:6d:6c:a0:47:3d:a3:f5:c2:d6: a4:cd:ea:7e:e2:a5:41:a5:6f:4f:53:d6:6b:77:7b: 2d:88:ab:c9:11:67:ae:0b:45:1c:73:52:32:e7:45: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0B:C5:EA:79:32:36:A5:17:E7:A6:8A:AC:93:F3:8D:13:A1:06:94 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:53:cc:23:bd:5c:fc:9b:f1:15:01:4e:8f:75:67:57:f0: e7:fd:77:61:f0:1c:2f:55:aa:87:a2:ca:d8:9c:be:83:5d:71: f5:d1:66:90:45:a5:77:ed:77:e6:ae:b9:ee:09:85:0a:3d:75: d7:78:14:c1:d7:0a:ba:03:fb:e8:58:12:09:e8:77:27:c9:27: f1:74:49:b9:fa:51:6e:3e:49:ef:bd:9f:ad:8b:ed:84:74:65: 38:65:36:92:4f:5e:9b:ac:d2:34:45:8f:bd:f7:06:a9:8e:98: df:3a:e8:d6:59:ac:95:5e:bf:22:7e:7e:de:8d:10:42:04:0a: a6:cf:43:8b:f3:b6:65:3d:49:e9:a4:dc:70:99:6e:5c:77:5f: 14:12:7e:73:fa:ba:c1:99:5e:87:f4:33:98:59:8d:15:b4:a7: 66:ae:b9:3e:bd:99:ab:ff:f2:b3:bc:cc:8a:b8:a6:a9:da:6c: 68:ce:59:c2:c4:54:9a:3e:24:9a:fc:1c:b5:9a:4a:f0:09:c7: ce:93:31:a5:96:64:dc:52:ec:82:fd:23:09:1c:78:59:45:14: 6b:b1:94:33:36:f9:b7:79:4f:78:56:d0:32:49:7f:32:0e:22: bd:9f:e6:9e:75:34:c0:4e:6a:d5:58:12:a6:e8:34:54:5d:e2: ae:9d:ac:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjQwNTE4MTkyMDU5WhcNMjQwNTI1MTkyMDU5WjAYMRYwFAYD VQQDEw02NjQ4ZmY5Yi03YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3PoRGeFkm1Aoy6MWPVV+fSuAmA7v9hY6jpzUSwgpaYnQoNS2n0MUrMig9pi zN1VCUzXaqkKrDK6bKGZi6yJ6HDIViBbMMsRCx6OhWXHUsEHzTMCnvhRie1yxXL9 3AD78E0paUph7KC1Y73uw+fbhXTFEMUscQr9fnlsEIaOOAm6PGogvZudJHuW9iCc cMczrjSgfWKHLfob87b1EG6cmwhUS3P6To82MTVBqd/HGn2UxQy5/SORgAx5zKZg Ozo1RDsms7zm8V2Ch00URTdCbTC7gUOHOUxtbKBHPaP1wtakzep+4qVBpW9PU9Zr d3stiKvJEWeuC0Ucc1Iy50XZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAELxep5 MjalF+emiqyT840ToQaUMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQWFPMI71c/JvxFQFOj3VnV/Dn/Xdh8BwvVaqHosrYnL6DXXH10WaQ RaV37XfmrrnuCYUKPXXXeBTB1wq6A/voWBIJ6HcnySfxdEm5+lFuPknvvZ+ti+2E dGU4ZTaST16brNI0RY+99wapjpjfOujWWayVXr8ifn7ejRBCBAqmz0OL87ZlPUnp pNxwmW5cd18UEn5z+rrBmV6H9DOYWY0VtKdmrrk+vZmr//KzvMyKuKap2mxozlnC xFSaPiSa/By1mkrwCcfOkzGllmTcUuyC/SMJHHhZRRRrsZQzNvm3eU94VtAySX8y DiK9n+aedTTATmrVWBKm6DRUXeKunaw4 -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org