$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: s33EuVekLKpBsqnzC47Lg9pNRVsilhJAkJRtD8SEmGY= Subject key identifier: 61:3A:C1:6F:6D:35:31:BF:7B:3C:1F:9B:FF:24:54:15:68:78:63:B9 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: E4 Signing time: Wed 29 May 2024 07:18:36 +0000 Manifest this update: Wed 29 May 2024 07:18:36 +0000 Manifest next update: Wed 05 Jun 2024 07:18:36 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: I1uplditBByaNLVOde8B1mLh5+pnwCVai3gRexf24P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 07:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: May 29 07:18:36 2024 GMT Not After : Jun 5 07:18:36 2024 GMT Subject: CN=6656d6cc-7cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:c9:7b:a6:a9:95:86:ba:f4:2f:b9:f1:a2: 01:a1:23:26:ef:c6:2b:09:93:15:ed:68:2c:45:9a: 52:90:a7:ec:d7:40:8e:7c:ce:fc:31:75:87:55:54: f4:79:91:2d:5e:0f:9f:64:27:97:57:e3:d3:c5:8b: dd:b4:c2:53:6d:92:23:12:e3:81:26:22:13:23:fb: 27:98:94:50:60:f3:c5:62:7f:e4:dc:6c:68:a0:6f: 99:de:34:55:a2:fd:28:22:9e:6a:c5:e2:69:dd:58: 02:e3:26:9f:92:59:cd:5a:dc:d2:1d:3e:9b:30:3b: f8:55:23:98:10:93:cb:2f:d9:72:ee:d3:5d:52:af: 87:ae:b3:ea:b0:6a:37:c4:22:22:f2:36:1b:cd:9a: 21:95:1b:12:47:3e:59:bb:2e:10:f2:71:33:b1:c7: 8b:6c:d1:ea:df:eb:6d:4a:2b:33:01:b8:31:5e:b1: 45:77:ea:6f:90:3e:1e:7b:e9:ec:c3:74:6e:6f:a7: b0:82:0b:e5:44:c3:49:f9:a1:68:5e:f8:9a:da:a1: 09:d5:e7:de:41:3c:12:14:84:80:eb:6d:15:6c:09: cc:78:f4:80:43:9a:47:19:1d:0d:84:5c:59:1c:20: a4:33:fb:c6:77:fc:ab:7e:0f:45:89:b4:ce:f9:52: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3A:C1:6F:6D:35:31:BF:7B:3C:1F:9B:FF:24:54:15:68:78:63:B9 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:42:f0:ba:1e:b9:88:7e:7d:b2:03:84:7e:6f:ed:3b:34:cc: 4b:2d:a4:86:d6:d1:a1:b3:31:3c:57:27:74:76:c2:2a:62:58: 3c:7c:36:44:d7:dc:3f:bd:c5:48:e2:84:9e:a9:d7:33:0c:fc: 8c:48:0d:38:a0:6f:7c:0d:4a:14:cf:e3:ec:42:7b:c7:a6:e4: 22:bc:bd:76:1d:d4:b1:9c:29:22:11:6d:35:2d:3d:2c:50:99: e8:44:63:24:ac:7c:ed:b7:7f:51:f2:26:f0:3b:b1:9b:2d:50: d4:9d:6b:ac:31:6f:0c:eb:a1:06:75:c9:bc:55:d4:71:60:64: 6a:d4:d5:82:f3:07:39:10:88:72:1c:8f:77:99:3c:75:72:bf: 1c:ef:3e:22:ca:f6:82:c9:1c:8d:96:d6:2b:f8:40:9f:4b:b4: 3e:86:4a:de:39:3a:9b:28:f3:1e:d6:c9:be:1c:4b:7a:2c:ea: 11:38:1f:d9:38:83:58:fc:d3:f2:b3:05:40:86:c1:54:4d:5f: 93:83:bb:d3:9b:fc:c8:90:17:35:41:de:61:4b:03:bc:43:44: 50:0c:13:95:c3:94:f0:13:8e:71:32:9f:3b:7e:4e:6f:bf:51: dc:c2:44:1b:db:67:77:8a:03:16:21:93:cc:00:a7:11:5d:16: 27:9e:3d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjQwNTI5MDcxODM2WhcNMjQwNjA1MDcxODM2WjAYMRYwFAYD VQQDEw02NjU2ZDZjYy03Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPnJe6aplYa69C+58aIBoSMm78YrCZMV7WgsRZpSkKfs10COfM78MXWHVVT0 eZEtXg+fZCeXV+PTxYvdtMJTbZIjEuOBJiITI/snmJRQYPPFYn/k3GxooG+Z3jRV ov0oIp5qxeJp3VgC4yafklnNWtzSHT6bMDv4VSOYEJPLL9ly7tNdUq+HrrPqsGo3 xCIi8jYbzZohlRsSRz5Zuy4Q8nEzsceLbNHq3+ttSiszAbgxXrFFd+pvkD4ee+ns w3Rub6ewggvlRMNJ+aFoXvia2qEJ1efeQTwSFISA620VbAnMePSAQ5pHGR0NhFxZ HCCkM/vGd/yrfg9FibTO+VKaEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE6wW9t NTG/ezwfm/8kVBVoeGO5MB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFQvC6HrmIfn2yA4R+b+07NMxLLaSG1tGhszE8Vyd0dsIqYlg8fDZE 19w/vcVI4oSeqdczDPyMSA04oG98DUoUz+PsQnvHpuQivL12HdSxnCkiEW01LT0s UJnoRGMkrHztt39R8ibwO7GbLVDUnWusMW8M66EGdcm8VdRxYGRq1NWC8wc5EIhy HI93mTx1cr8c7z4iyvaCyRyNltYr+ECfS7Q+hkreOTqbKPMe1sm+HEt6LOoROB/Z OINY/NPyswVAhsFUTV+Tg7vTm/zIkBc1Qd5hSwO8Q0RQDBOVw5TwE45xMp87fk5v v1HcwkQb22d3igMWIZPMAKcRXRYnnj0Q -----END CERTIFICATE-----Generated at Wed May 29 10:43:07 2024 by rpki-client on console-ams.rpki-client.org