$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: zBfLm8yJPUI9qgx9YQbGvZyyPPiy/hJppUi0GK11cvs= Subject key identifier: F9:78:96:43:29:C8:A9:AC:50:A3:E8:13:AB:11:41:38:B6:40:56:1A Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: 2E Signing time: Sun 19 May 2024 08:25:46 +0000 Manifest this update: Sun 19 May 2024 08:25:46 +0000 Manifest next update: Sun 26 May 2024 08:25:46 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: mp0e7UBTH7Iez1gaRtCgCC4gJmIkFomOToUVeCV8aFw=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: jsPnxeM/1ccjB+l/UFdQlnJ1k8qZgj2xXeNtEyTuulI=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: Du13DHYQS04+G+C/2tJR42Y1wTjwagQP4rv6d0IIooA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: May 19 08:25:46 2024 GMT Not After : May 26 08:25:46 2024 GMT Subject: CN=6649b78a-7e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:db:82:62:5d:a4:5c:fd:a3:6f:05:70:51: 50:93:6d:fc:38:49:3a:32:25:e2:19:ab:5e:c2:fa: 15:2f:ba:4d:5e:03:68:81:bd:78:e9:93:87:f8:c8: bc:54:53:32:2e:1e:c6:f9:62:ad:e9:b9:3f:e4:72: 7e:63:f8:3f:29:06:3e:bf:28:55:2b:ce:69:cb:ec: c4:2a:f8:8e:e7:2b:89:4e:cc:a7:77:e4:ca:43:83: b5:d3:40:92:60:63:2a:87:78:53:91:82:e2:4e:3f: d3:99:7d:22:31:4c:54:e1:91:14:fd:c3:41:29:2f: ea:9a:78:bc:6c:0e:a6:1a:ca:7c:d2:75:d5:0b:1f: 6b:e1:1a:ef:88:ae:ea:ef:8c:1a:6a:4a:7c:de:3d: 92:c8:f6:18:ac:e7:ec:92:1a:3b:0a:ea:c8:6b:5b: b2:61:9c:43:f7:31:fc:63:4b:13:8b:7f:11:ea:6a: 5b:d7:04:d9:07:88:98:e2:9d:47:48:04:af:b9:e8: 38:10:48:98:e6:96:8c:cc:74:b7:0d:4b:b5:2d:df: 71:f2:3f:ab:28:9d:70:b0:68:1a:3d:10:60:e8:f8: 20:dc:43:6c:e5:de:ff:fc:54:fb:79:05:82:5a:70: 4a:4e:5f:97:88:69:ab:ca:86:66:29:bc:76:c7:57: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:78:96:43:29:C8:A9:AC:50:A3:E8:13:AB:11:41:38:B6:40:56:1A X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:04:e0:2c:5f:33:d3:57:9c:f5:9e:5e:3a:55:c9:5a:21:e0: 51:b2:c2:c6:2f:de:de:38:d3:2d:3f:b6:fb:08:c3:5e:d5:0c: bf:8d:73:ad:ff:5c:65:b9:4a:a6:24:2e:15:71:f4:ab:c3:05: 3f:5b:3e:e0:89:85:71:80:78:27:5e:3d:f7:af:e9:54:f5:5b: 6c:48:86:f4:be:7a:18:ca:00:6a:7f:f5:ed:9f:5f:69:14:8c: 08:d4:e9:88:8c:db:64:e4:0e:c6:19:c3:a5:69:24:e7:47:7f: 06:15:7f:15:74:cb:14:d8:49:56:b4:de:ae:c4:c7:7d:04:32: d2:ce:08:70:df:d9:a6:e1:15:d4:1a:f4:26:6c:ec:f6:cb:67: ec:c6:58:a4:95:38:a7:30:39:21:01:e0:08:6f:04:aa:4d:5c: d1:3d:da:cb:2a:6e:7c:18:43:5d:79:5d:7e:04:dc:93:f4:bf: ed:3a:f7:50:2b:ad:83:b3:4c:e4:94:d6:8d:a6:c2:72:99:6f: d2:d0:59:79:43:b9:bd:2c:32:b2:73:1f:8f:f9:e5:47:d5:4d: 7e:c1:30:a4:c0:a2:e0:f7:1c:a4:89:58:4e:3c:01:a5:86:ab: 58:19:95:ea:dc:6b:12:04:40:a3:1c:ba:cb:81:d1:cc:f6:ee: 8f:3a:4f:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTUwRjExMC8GA1UEBRMoNjYzRjRENUZDODI3MEE0NDIwRkUxRTYxRjkxQURGQTgz N0ZGMUVFNDAeFw0yNDA1MTkwODI1NDZaFw0yNDA1MjYwODI1NDZaMBgxFjAUBgNV BAMTDTY2NDliNzhhLTdlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKaNuCYl2kXP2jbwVwUVCTbfw4SToyJeIZq17C+hUvuk1eA2iBvXjpk4f4yLxU UzIuHsb5Yq3puT/kcn5j+D8pBj6/KFUrzmnL7MQq+I7nK4lOzKd35MpDg7XTQJJg YyqHeFORguJOP9OZfSIxTFThkRT9w0EpL+qaeLxsDqYaynzSddULH2vhGu+Irurv jBpqSnzePZLI9his5+ySGjsK6shrW7JhnEP3MfxjSxOLfxHqalvXBNkHiJjinUdI BK+56DgQSJjmlozMdLcNS7Ut33HyP6sonXCwaBo9EGDo+CDcQ2zl3v/8VPt5BYJa cEpOX5eIaavKhmYpvHbHV973AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+XiWQynI qaxQo+gTqxFBOLZAVhowHwYDVR0jBBgwFoAUZj9NX8gnCkQg/h5h+RrfqDf/HuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNTBGLzU3NzE5ODU0RDEz MzExRUVBQTIwREM4NEM0RjlBRTAyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmo5Tlg4Z25Da1FnX2g1aC1ScmZxRGZfSHVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx NTBGLzU3NzE5ODU0RDEzMzExRUVBQTIwREM4NEM0RjlBRTAyL1pqOU5YOGduQ2tR Z19oNWgtUnJmcURmX0h1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcE4CxfM9NXnPWeXjpVyVoh4FGywsYv3t440y0/tvsIw17VDL+Nc63/ XGW5SqYkLhVx9KvDBT9bPuCJhXGAeCdePfev6VT1W2xIhvS+ehjKAGp/9e2fX2kU jAjU6YiM22TkDsYZw6VpJOdHfwYVfxV0yxTYSVa03q7Ex30EMtLOCHDf2abhFdQa 9CZs7PbLZ+zGWKSVOKcwOSEB4AhvBKpNXNE92ssqbnwYQ115XX4E3JP0v+0691Ar rYOzTOSU1o2mwnKZb9LQWXlDub0sMrJzH4/55UfVTX7BMKTAouD3HKSJWE48AaWG q1gZlercaxIEQKMcusuB0cz27o86T4Q= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org