$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft File: sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json) Hash identifier: F3AcZ1+6w81wfVBTacipQa0ONYvNPoR7S0OjvDmdfGg= Subject key identifier: 18:7A:72:0E:2C:87:0F:2C:C2:39:93:FB:5B:A3:B0:70:48:3B:BD:B0 Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC Certificate issuer: /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft Manifest number: 9A Signing time: Fri 17 May 2024 06:56:24 +0000 Manifest this update: Fri 17 May 2024 06:56:23 +0000 Manifest next update: Fri 24 May 2024 06:56:23 +0000 Files and hashes: 1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: RRM8XQviE4fNaFuqaChezKTKfpm0pMzr4ZKF7W7J4i8=) 2: 26D3006C2BBF11EE929D0D30C4F9AE02.roa (hash: SKZ/nxRfbR8iQlRgyalR7EWE5ysRXQunYxWOu0F2dCs=) 3: 3CDE30F22BBF11EEBCFC8037C4F9AE02.roa (hash: cwX2D6tNIduYrrk37WQdt7ixYBMknrCu5ZXjJobCwQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC Validity Not Before: May 17 06:56:23 2024 GMT Not After : May 24 06:56:23 2024 GMT Subject: CN=6646ff98-010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:07:a4:b0:46:33:62:a5:17:88:ef:7e:59: 1f:61:c6:2a:70:ca:4a:1c:79:72:88:75:e7:fa:3c: 85:ee:a2:28:7d:ac:69:37:7b:65:90:87:d0:dd:c8: 1e:9d:d3:85:99:b4:1f:81:87:d7:92:32:50:a6:73: 10:91:f3:5f:d1:35:de:50:52:3b:68:e3:28:b0:9e: a7:f3:33:5e:43:31:fa:56:8f:dc:69:56:f1:71:69: 95:4d:3f:28:83:6a:9e:ec:39:57:d7:4d:66:d8:09: 14:98:17:a7:10:37:35:a7:97:9c:a4:e5:b4:e0:c7: e3:08:62:87:df:f5:ea:d2:6b:2b:6d:bf:f8:f9:44: 22:e8:80:f0:2d:26:97:f3:2f:41:b0:cf:7f:8e:ef: 51:8b:42:97:88:df:8c:0d:da:f7:93:b5:bd:5d:4e: a8:41:52:0b:a9:fe:8d:67:93:9e:a6:fc:86:ab:5f: 24:4e:cb:10:ee:28:ce:ab:80:ae:4a:3f:34:24:a5: 7b:6e:92:6a:c2:b4:12:01:3d:cb:4e:08:d4:5d:32: 4c:86:61:ad:e1:20:17:19:5a:88:70:d2:33:63:90: 79:39:0b:b8:8f:5e:5c:c0:74:1a:a2:52:11:0c:fb: e0:75:00:31:26:98:a0:6a:90:c0:5c:bc:34:60:90: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7A:72:0E:2C:87:0F:2C:C2:39:93:FB:5B:A3:B0:70:48:3B:BD:B0 X509v3 Authority Key Identifier: keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:df:69:11:ac:64:3b:c1:65:1e:29:66:73:98:eb:42:89:ce: 05:66:a4:23:dc:85:54:48:82:4b:04:d8:57:59:bf:bd:fe:3d: bd:6f:ed:42:1b:1a:7a:1e:37:86:25:3e:2e:d9:24:22:ee:88: af:48:11:df:1b:f4:64:9a:e1:ea:2e:ef:83:ba:c5:77:83:98: 44:f5:c3:cf:88:ce:45:56:76:31:2c:df:25:d6:c7:27:98:ed: 6b:13:e5:57:f1:fd:3c:2e:34:43:bb:9f:67:4d:a2:54:e6:fc: d5:ed:22:65:96:ef:b7:f9:c2:31:78:33:18:4a:c5:03:b5:76: af:bc:bb:21:67:89:20:a9:06:b7:c3:e7:d3:e8:bf:fb:a3:e8: 04:44:f6:e2:57:98:20:b9:88:47:75:59:72:af:b6:1c:71:7f: af:42:9f:70:a4:f6:29:36:77:4f:9c:66:6a:e8:2b:a8:47:7f: 7e:92:87:4a:f4:ae:bf:a7:f7:76:2b:28:41:ac:9d:d6:55:6b: c9:6b:63:b2:41:9d:41:07:8c:64:ad:3d:87:6b:e4:47:03:a9: 3f:7c:22:ce:5a:63:0d:b7:ae:ec:74:c5:a1:4f:0d:83:df:6c: 20:2b:34:23:ca:a6:5e:2c:2d:ec:60:0c:01:d5:a2:54:b9:cf: ea:1e:ba:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RFREYxMTAvBgNVBAUTKEIxOTJBRDQ0NERFMUYyREU3NUJFQkExRUVGRDEyMkVF Q0Y3RDc3Q0MwHhcNMjQwNTE3MDY1NjIzWhcNMjQwNTI0MDY1NjIzWjAYMRYwFAYD VQQDEw02NjQ2ZmY5OC0wMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MMHpLBGM2KlF4jvflkfYcYqcMpKHHlyiHXn+jyF7qIofaxpN3tlkIfQ3cge ndOFmbQfgYfXkjJQpnMQkfNf0TXeUFI7aOMosJ6n8zNeQzH6Vo/caVbxcWmVTT8o g2qe7DlX101m2AkUmBenEDc1p5ecpOW04MfjCGKH3/Xq0msrbb/4+UQi6IDwLSaX 8y9BsM9/ju9Ri0KXiN+MDdr3k7W9XU6oQVILqf6NZ5OepvyGq18kTssQ7ijOq4Cu Sj80JKV7bpJqwrQSAT3LTgjUXTJMhmGt4SAXGVqIcNIzY5B5OQu4j15cwHQaolIR DPvgdQAxJpigapDAXLw0YJAtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh6cg4s hw8swjmT+1ujsHBIO72wMB8GA1UdIwQYMBaAFLGSrURN4fLedb66Hu/RIu7PfXfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREVERi9CMkQ2MDk5RTJC MjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0NTF2cm9lNzlFaTdzOTlk OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaS3RSRTNoOHQ1MXZyb2U3OUVpN3M5OWQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REVERi9CMkQ2MDk5RTJCMjcxMUVFOTQyRUQyNDBDNEY5QUUwMi9zWkt0UkUzaDh0 NTF2cm9lNzlFaTdzOTlkOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi32kRrGQ7wWUeKWZzmOtCic4FZqQj3IVUSIJLBNhXWb+9/j29b+1C Gxp6HjeGJT4u2SQi7oivSBHfG/RkmuHqLu+DusV3g5hE9cPPiM5FVnYxLN8l1scn mO1rE+VX8f08LjRDu59nTaJU5vzV7SJllu+3+cIxeDMYSsUDtXavvLshZ4kgqQa3 w+fT6L/7o+gERPbiV5gguYhHdVlyr7YccX+vQp9wpPYpNndPnGZq6CuoR39+kodK 9K6/p/d2KyhBrJ3WVWvJa2OyQZ1BB4xkrT2Ha+RHA6k/fCLOWmMNt67sdMWhTw2D 32wgKzQjyqZeLC3sYAwB1aJUuc/qHrpH -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org