$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: 2mpWF4WEltzIQAt/TsuIPmKv1J7DRO1EVCRSIUa+ya4= Subject key identifier: A6:52:E8:E4:FE:7C:F3:1E:3C:B5:40:9C:59:92:FB:A0:4E:EA:5D:0A Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 13F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 13DE Signing time: Fri 31 May 2024 17:44:31 +0000 Manifest this update: Fri 31 May 2024 17:44:31 +0000 Manifest next update: Fri 07 Jun 2024 17:44:31 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: rSHTXaV8WszZr2wO10Zr0oJEmF0+ibMqd0zYtEsN3KA=) 2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 8Chv2g/XLV0WVFsAUAJn4qrWtRsDgyBb3YJ5fOKl4mQ=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: RM/kuR3kUH6xoHDop24kz3tOy9hyEEyEmUSznVZDH9E=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 2DoJS0/sOSyXuvmbvAdYDPKa0WROftMt4MUWCdwfjwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5113 (0x13f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: May 31 17:44:31 2024 GMT Not After : Jun 7 17:44:31 2024 GMT Subject: CN=665a0c7f-33a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:28:98:cf:60:0e:3f:c1:2a:c5:e4:3a:28:bb: 10:48:db:b5:9b:5f:33:52:7b:dd:79:87:5c:ba:d8: b3:35:93:82:a0:84:f1:97:ee:30:21:29:04:92:d3: 02:16:38:ff:8d:a0:27:11:92:2a:08:ed:e6:31:f2: 74:cb:18:f3:a6:fb:f1:36:d7:2d:37:3d:bf:2f:3f: 28:6e:14:04:57:80:4c:f1:d0:af:62:00:94:54:68: ed:f0:80:af:fa:23:2e:ea:10:3f:bd:d6:8f:bf:43: f7:88:13:7b:45:cf:ca:92:54:36:52:c8:85:32:ba: db:1e:81:87:69:7e:5d:14:d1:a9:9e:bc:de:25:6b: d8:22:40:43:c3:a7:a2:b6:94:e6:94:10:2e:61:98: 51:9a:92:08:9c:e8:a4:50:19:4b:80:98:b4:ea:76: 96:ec:8d:d7:af:2d:44:70:8b:39:a6:30:4d:49:a3: 79:f9:94:2e:1d:5c:9e:52:49:62:cb:ab:24:47:0b: c1:03:f2:23:ac:23:3b:b4:50:58:07:3f:23:ed:92: 4a:e6:84:3e:11:28:ba:e2:eb:fa:1a:cd:b4:c0:ec: 5d:b5:a1:9d:83:af:de:47:33:8d:11:47:43:00:92: 23:7f:1d:6e:9c:14:25:6c:c5:95:f5:49:d9:2e:5b: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:52:E8:E4:FE:7C:F3:1E:3C:B5:40:9C:59:92:FB:A0:4E:EA:5D:0A X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:87:f8:54:1a:4d:e5:02:9b:1c:f6:d2:ff:1a:ed:8e:47:97: 4e:dc:b2:e4:2e:40:7e:99:bc:26:88:ff:47:96:b9:49:a9:b9: 19:65:36:00:1c:f4:57:ed:fd:0d:7f:e9:4d:a5:69:e7:4c:3c: 7c:d5:76:76:a0:cf:11:62:b4:8f:c8:03:a4:96:26:59:2f:09: b0:12:08:cd:f9:ff:e6:ac:4a:9e:0a:e0:2d:95:72:65:06:e3: 89:3c:ab:a7:c1:0d:82:9e:0e:12:5d:32:32:50:15:20:21:67: c6:d4:ba:46:95:fa:d1:c8:a7:ac:2e:7b:fd:57:77:11:16:8d: d3:2d:fd:11:7d:16:30:55:2a:fe:fb:11:e4:56:c5:da:52:07: 16:4f:93:18:01:9c:9c:74:b3:e8:9a:4b:25:90:d4:e6:2e:ed: 98:c3:73:ab:f8:78:3c:6e:14:ec:36:fd:29:e8:21:99:92:4e: 5e:d5:88:b5:7a:e7:76:23:12:ce:5d:85:b1:e8:9b:fb:7c:a8: af:f3:cb:6f:39:40:1f:92:ca:ec:81:b8:6b:df:d1:32:86:4d: 85:36:88:00:ac:67:d3:20:50:b3:58:8b:37:2f:52:b4:63:e8: d2:aa:d2:d8:f3:ca:a7:80:b7:b6:7b:a3:39:5a:07:52:49:cd: 6c:11:47:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjQwNTMxMTc0NDMxWhcNMjQwNjA3MTc0NDMxWjAYMRYwFAYD VQQDEw02NjVhMGM3Zi0zM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9iiYz2AOP8EqxeQ6KLsQSNu1m18zUnvdeYdcutizNZOCoITxl+4wISkEktMC Fjj/jaAnEZIqCO3mMfJ0yxjzpvvxNtctNz2/Lz8obhQEV4BM8dCvYgCUVGjt8ICv +iMu6hA/vdaPv0P3iBN7Rc/KklQ2UsiFMrrbHoGHaX5dFNGpnrzeJWvYIkBDw6ei tpTmlBAuYZhRmpIInOikUBlLgJi06naW7I3Xry1EcIs5pjBNSaN5+ZQuHVyeUkli y6skRwvBA/IjrCM7tFBYBz8j7ZJK5oQ+ESi64uv6Gs20wOxdtaGdg6/eRzONEUdD AJIjfx1unBQlbMWV9UnZLlsIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZS6OT+ fPMePLVAnFmS+6BO6l0KMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYh/hUGk3lApsc9tL/Gu2OR5dO3LLkLkB+mbwmiP9HlrlJqbkZZTYA HPRX7f0Nf+lNpWnnTDx81XZ2oM8RYrSPyAOkliZZLwmwEgjN+f/mrEqeCuAtlXJl BuOJPKunwQ2Cng4SXTIyUBUgIWfG1LpGlfrRyKesLnv9V3cRFo3TLf0RfRYwVSr+ +xHkVsXaUgcWT5MYAZycdLPomkslkNTmLu2Yw3Or+Hg8bhTsNv0p6CGZkk5e1Yi1 eud2IxLOXYWx6Jv7fKiv88tvOUAfksrsgbhr39Eyhk2FNogArGfTIFCzWIs3L1K0 Y+jSqtLY88qngLe2e6M5WgdSSc1sEUcx -----END CERTIFICATE-----Generated at Fri May 31 20:34:02 2024 by rpki-client on console-ams.rpki-client.org