$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json) Hash identifier: 6NjddZb6vm/2hCcVxZR//ACdU4jdtAUko5wABAQoBJ0= Subject key identifier: 1D:66:4E:B0:6E:82:43:8E:63:B0:9E:9C:9C:EB:B5:D7:4A:F7:6F:78 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft Manifest number: 025B Signing time: Sun 19 May 2024 03:51:12 +0000 Manifest this update: Sun 19 May 2024 03:51:11 +0000 Manifest next update: Sun 26 May 2024 03:51:11 +0000 Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: EMAZl8C/QKah7wYfpEDGbLtZXyv5y4FK6vEPpHP5VFI=) 2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: t6zPiOXrYpQBTTfoOaOWofrWUQ0zj6TBf6ZlrFtkWA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: May 19 03:51:11 2024 GMT Not After : May 26 03:51:11 2024 GMT Subject: CN=66497730-c934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:83:1f:93:5e:a8:4f:31:d6:41:81:1d:d1: 5e:22:28:58:b1:c8:72:57:e2:d3:de:87:5f:af:c5: 53:17:f5:be:e1:0a:b7:51:e6:c8:14:60:47:b3:8f: 7d:ad:7f:6f:15:d8:93:44:fa:08:44:ad:d4:41:13: 06:b6:be:09:b4:48:7d:51:f2:36:7c:d7:8f:a5:27: ed:1f:dd:6e:df:a5:41:b7:79:b1:47:57:48:db:47: a6:8e:1e:87:dd:e5:df:dc:59:d6:c7:d7:b8:d1:39: 73:97:2f:cb:ab:ff:fd:5e:8a:fc:0d:d5:70:d2:58: 62:94:1b:65:4f:0d:b3:fe:ea:2c:49:7b:c7:4b:c1: 48:a9:84:36:dd:cd:9d:42:60:9b:ee:07:bb:26:81: 33:12:18:29:d9:56:8d:b4:ca:d8:67:7f:02:3e:41: a1:ad:02:07:85:18:4c:b8:58:34:28:50:86:33:81: 36:79:0d:bb:46:5b:d5:a4:e3:b7:16:db:30:e3:69: da:df:af:db:62:df:59:69:b3:df:55:0d:61:34:71: 10:54:67:03:99:63:ff:9e:9d:e8:ec:e2:78:95:7e: e9:9d:bc:91:f8:0d:2a:3f:21:74:5f:93:ee:a6:95: 70:c0:cb:93:56:e2:ca:d8:17:c5:ba:2f:9a:ff:25: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:66:4E:B0:6E:82:43:8E:63:B0:9E:9C:9C:EB:B5:D7:4A:F7:6F:78 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:da:d8:ec:5e:67:df:6d:b1:01:f3:df:9e:72:5e:52:86:8b: 1a:40:dc:44:52:c9:80:74:17:a9:07:17:93:2c:c1:f3:90:87: 7c:59:58:a1:e4:6b:34:e5:eb:89:ad:bd:29:2d:2d:60:18:ee: 1d:86:be:83:59:28:9f:2c:45:7f:88:2f:dc:60:5a:a5:93:34: c8:3c:a5:be:68:50:f0:cf:06:09:69:a8:cd:8c:77:55:3e:1f: b3:fa:d7:77:bb:56:ad:9d:62:0b:f0:e1:b0:62:09:8f:37:ee: 91:bb:72:72:44:a9:85:b4:de:f4:64:b5:23:3f:cb:4c:ba:ce: 20:ba:66:11:fe:22:ac:22:3d:7e:c8:e7:05:10:aa:95:10:a9: 53:57:18:62:f6:46:0d:ec:9d:06:0d:60:2b:39:75:76:1c:81: 02:44:44:67:ca:03:7a:b3:31:65:46:e0:b2:7c:e9:b9:ef:7c: 85:49:7e:90:b2:7f:d7:70:3f:b9:02:3a:3a:c8:8a:3d:83:05: c7:b2:b5:87:d3:91:46:7c:b0:2f:a7:7d:0e:d5:11:54:80:73: 3a:a1:b7:b9:10:f7:44:1e:cd:30:85:b5:8c:17:1b:fe:bd:51: 98:40:d7:08:2e:4f:8b:f7:34:f3:02:d7:61:ff:6a:a2:b3:0d: f7:69:c8:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjQwNTE5MDM1MTExWhcNMjQwNTI2MDM1MTExWjAYMRYwFAYD VQQDEw02NjQ5NzczMC1jOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qCDH5NeqE8x1kGBHdFeIihYschyV+LT3odfr8VTF/W+4Qq3UebIFGBHs499 rX9vFdiTRPoIRK3UQRMGtr4JtEh9UfI2fNePpSftH91u36VBt3mxR1dI20emjh6H 3eXf3FnWx9e40Tlzly/Lq//9Xor8DdVw0lhilBtlTw2z/uosSXvHS8FIqYQ23c2d QmCb7ge7JoEzEhgp2VaNtMrYZ38CPkGhrQIHhRhMuFg0KFCGM4E2eQ27RlvVpOO3 Ftsw42na36/bYt9ZabPfVQ1hNHEQVGcDmWP/np3o7OJ4lX7pnbyR+A0qPyF0X5Pu ppVwwMuTVuLK2BfFui+a/yXxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1mTrBu gkOOY7CenJzrtddK9294MB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxRC9DNkI2MTJCMkNEMDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlB QTBGVGN6VTF0S3FMT2dBYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm2tjsXmffbbEB89+ecl5ShosaQNxEUsmAdBepBxeTLMHzkId8WVih 5Gs05euJrb0pLS1gGO4dhr6DWSifLEV/iC/cYFqlkzTIPKW+aFDwzwYJaajNjHdV Ph+z+td3u1atnWIL8OGwYgmPN+6Ru3JyRKmFtN70ZLUjP8tMus4gumYR/iKsIj1+ yOcFEKqVEKlTVxhi9kYN7J0GDWArOXV2HIECRERnygN6szFlRuCyfOm573yFSX6Q sn/XcD+5Ajo6yIo9gwXHsrWH05FGfLAvp30O1RFUgHM6obe5EPdEHs0whbWMFxv+ vVGYQNcILk+L9zTzAtdh/2qisw33aciA -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org