$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: 5FJcnG/092x/y6kXZuFvKQienfbv1AbcVSxpvzrA/yE= Subject key identifier: 25:3F:02:AF:AB:14:B4:00:35:34:57:A6:7B:E2:9F:26:2D:D7:3E:92 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0A4A Signing time: Sat 18 May 2024 20:24:20 +0000 Manifest this update: Sat 18 May 2024 20:24:19 +0000 Manifest next update: Sat 25 May 2024 20:24:19 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: UQZsREX7jHL/v+QNbkgqNgIJZV/5moPR/rZ1+sHI4v0=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: aZFk/jeAKBRQ9pX8ov3nhu9S2K8GPr033EG+y/UBeE8=) 3: F3AFC1DE417011EA951D4669C4F9AE02.roa (hash: f2ZdUvCW7NMjhFBjgaI5+riea8AbuENSUk1KSW/65Iw=) 4: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: X2hY9dLSEi0KLChyX6EN8ewtqBNd6x6WyrUR2WYRH4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2648 (0xa58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: May 18 20:24:19 2024 GMT Not After : May 25 20:24:19 2024 GMT Subject: CN=66490e74-07ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:44:3d:96:9c:58:a5:11:31:d9:0e:77:33: 43:6c:44:77:91:2c:11:97:4c:51:21:46:ff:12:6c: 19:c8:8f:b9:2b:4b:e0:da:4c:de:26:17:ff:61:9a: c2:f7:0c:38:42:55:09:60:0a:0a:84:cf:25:bd:6f: 01:80:e1:36:b1:69:bb:85:99:89:8d:85:02:46:f0: 6f:7c:33:d9:45:df:01:3e:5d:14:a9:e2:dc:21:6d: 8f:aa:06:19:7b:cc:d0:57:58:a0:32:71:76:e7:77: 78:91:d8:03:20:67:2f:0a:a3:22:70:74:e2:95:c5: 12:88:d6:5f:3c:41:93:7a:3a:15:e1:35:4f:d0:34: de:48:85:05:6f:b0:e4:8c:f1:92:f1:cd:dc:78:a7: 6c:d3:b4:aa:fa:bf:af:b1:88:4f:a6:53:e1:60:54: 2e:88:ad:b9:c8:62:88:96:61:26:9a:fe:48:8c:38: 30:e7:43:3c:3e:94:15:97:95:d0:62:06:6e:73:01: be:ad:3f:83:d2:b8:6b:21:ab:ed:2a:34:22:6b:e6: 5c:e4:25:4a:f5:29:9d:5c:a7:3c:7b:85:60:df:93: b1:d0:de:7b:d3:e9:84:eb:7b:f4:c9:04:13:c9:2d: a8:b7:0e:32:80:86:da:90:af:72:11:7e:95:de:e2: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:02:AF:AB:14:B4:00:35:34:57:A6:7B:E2:9F:26:2D:D7:3E:92 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:7c:45:88:d2:c8:1c:16:ad:08:5c:dc:3c:59:d5:67:af:44: 1e:3c:17:44:20:48:f0:d2:ca:0b:d6:0f:f5:b5:fd:5e:87:00: eb:a9:4d:15:5d:c1:2b:cf:66:e7:90:30:e4:48:76:90:41:20: 72:b0:09:a7:33:36:29:af:ac:30:f7:50:86:29:c9:ef:3f:db: c6:0b:10:c8:0e:49:cd:41:e3:75:d5:67:37:72:8c:65:1b:76: f3:2f:12:aa:0c:35:ca:3c:97:a1:1d:7c:38:31:5e:5e:97:d3: 6b:37:88:f2:29:f7:55:6b:04:ec:66:8a:3a:aa:93:12:ae:aa: 66:59:8e:be:f0:36:bd:12:fe:e5:d4:00:e5:d8:fc:f7:a6:96: 7d:e5:43:3e:4f:8b:f8:eb:96:cf:b7:e3:e6:b2:e1:a0:02:d7: 57:48:b7:20:85:72:f3:2f:68:ce:73:19:dd:5c:c6:b9:56:f8: 8f:79:47:55:71:37:46:0d:2f:57:73:d2:5b:81:f3:1e:11:70: 22:40:8e:0c:a3:5e:ef:f3:ef:f4:dc:da:8a:bc:a8:09:a3:8c: 81:a0:f6:86:5a:5d:29:3e:3b:de:63:5f:64:15:34:cc:28:b7: 46:b5:cf:45:d6:b1:9d:e1:24:2d:4f:b5:b0:5b:f6:a8:b4:83: 66:9f:43:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjQwNTE4MjAyNDE5WhcNMjQwNTI1MjAyNDE5WjAYMRYwFAYD VQQDEw02NjQ5MGU3NC0wN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa9EPZacWKURMdkOdzNDbER3kSwRl0xRIUb/EmwZyI+5K0vg2kzeJhf/YZrC 9ww4QlUJYAoKhM8lvW8BgOE2sWm7hZmJjYUCRvBvfDPZRd8BPl0UqeLcIW2PqgYZ e8zQV1igMnF253d4kdgDIGcvCqMicHTilcUSiNZfPEGTejoV4TVP0DTeSIUFb7Dk jPGS8c3ceKds07Sq+r+vsYhPplPhYFQuiK25yGKIlmEmmv5IjDgw50M8PpQVl5XQ YgZucwG+rT+D0rhrIavtKjQia+Zc5CVK9SmdXKc8e4Vg35Ox0N570+mE63v0yQQT yS2otw4ygIbakK9yEX6V3uLFmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU/Aq+r FLQANTRXpnvinyYt1z6SMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpfEWI0sgcFq0IXNw8WdVnr0QePBdEIEjw0soL1g/1tf1ehwDrqU0V XcErz2bnkDDkSHaQQSBysAmnMzYpr6ww91CGKcnvP9vGCxDIDknNQeN11Wc3coxl G3bzLxKqDDXKPJehHXw4MV5el9NrN4jyKfdVawTsZoo6qpMSrqpmWY6+8Da9Ev7l 1ADl2Pz3ppZ95UM+T4v465bPt+PmsuGgAtdXSLcghXLzL2jOcxndXMa5VviPeUdV cTdGDS9Xc9JbgfMeEXAiQI4Mo17v8+/03NqKvKgJo4yBoPaGWl0pPjveY19kFTTM KLdGtc9F1rGd4SQtT7WwW/aotINmn0Os -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org