$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft File: z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json) Hash identifier: 7N8B1EjoD/OFvj1XFrCfDFBUmKrnzWwuPUeR940oCmg= Subject key identifier: 2F:59:CC:7A:96:C3:C9:76:09:FA:75:16:37:F9:2C:9F:5B:B7:80:11 Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC Certificate issuer: /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft Manifest number: 96 Signing time: Sun 19 May 2024 06:52:52 +0000 Manifest this update: Sun 19 May 2024 06:52:52 +0000 Manifest next update: Sun 26 May 2024 06:52:52 +0000 Files and hashes: 1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: o5l9gY0uMqtjIQS+Sd2TxD44xumku+WN64bu0d1A/EA=) 2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: bFE0C6cY72P0B85UzFO6PyAXBD4kZvyKw41cMruk0XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC Validity Not Before: May 19 06:52:52 2024 GMT Not After : May 26 06:52:52 2024 GMT Subject: CN=6649a1c4-c7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:34:d7:bc:58:e1:36:9b:eb:b4:a8:a4:25: 6b:f3:aa:f9:e3:4a:3d:f7:8a:6f:0f:d3:98:b2:98: 9c:a9:98:b6:5e:cc:cd:2a:e0:91:15:92:01:01:a5: 4e:7f:da:3f:49:3f:ac:37:95:6a:5a:15:05:6b:b2: 54:ea:a4:d7:c7:9c:6c:ab:b3:0e:bd:2a:eb:0d:1e: 81:1e:37:4b:72:ad:14:fd:55:ab:c1:45:8c:43:82: 3a:e4:7a:ef:3d:88:f2:67:63:84:a8:1a:96:07:40: 4d:a8:7c:bc:46:81:c7:a3:24:ce:04:02:b9:33:03: 48:9c:a3:86:5c:c0:45:36:aa:42:87:a5:50:bf:b0: be:37:c8:84:eb:c2:0c:75:04:a6:c0:54:5d:cd:e4: a9:cc:a7:74:3a:d7:03:79:62:28:19:a3:f7:0e:fb: d4:d0:14:b5:47:ec:ce:10:2d:8d:7f:4c:b9:87:3d: 2d:bf:d3:0d:7e:e6:6c:b3:72:ec:87:09:a3:74:d7: 1d:70:53:4e:b7:72:91:21:1d:39:20:04:46:28:84: cc:7d:85:ba:31:7f:10:9a:7e:f0:af:22:88:5c:e4: 08:d7:ce:e1:95:6b:01:34:fa:b7:20:a1:64:72:44: 84:d3:24:42:3c:a2:ae:90:6a:e3:55:b6:06:25:e8: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:59:CC:7A:96:C3:C9:76:09:FA:75:16:37:F9:2C:9F:5B:B7:80:11 X509v3 Authority Key Identifier: keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:de:db:ae:b3:21:0d:73:02:2f:7b:8f:a0:d3:d8:dc:40:09: 90:55:82:55:88:69:f1:35:49:e3:1e:50:f4:b4:34:69:fd:42: f0:95:36:b8:8d:7b:7b:a6:27:1f:d7:42:4c:a8:d9:18:12:6f: 13:b2:c8:73:02:d7:bc:d5:ca:6d:66:0f:64:43:f1:e0:b7:2f: ca:8c:7b:b3:ca:3a:b3:76:26:08:48:c7:0b:d3:be:57:42:f8: 61:bd:86:aa:73:d4:10:41:13:01:2d:76:f2:5e:02:0a:3e:04: 98:c3:63:e5:64:e6:7a:9e:83:ce:81:77:62:b5:a0:30:d8:ff: 92:1b:ae:f6:5b:dd:82:cc:c8:79:94:02:2d:9e:91:3a:8a:a1: 5b:8f:e5:09:4b:a3:df:72:57:ee:f9:2d:75:18:35:a6:b9:d7: 7f:0e:ee:ab:ba:57:20:63:6b:ce:21:73:e8:07:d1:25:02:bb: b1:7f:f8:31:0b:31:64:79:75:a0:37:3a:46:2d:cb:78:78:74: 79:b7:bd:1c:8d:82:5b:f8:ba:66:fc:ec:b2:c1:36:3c:96:bf: 66:40:00:36:c3:1f:5b:16:a6:2f:c3:06:4a:9d:bf:31:7f:39: 8b:69:f1:47:63:58:e2:27:ec:28:95:74:aa:41:21:37:a2:f2: b6:01:ba:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKENGQUUyMzFBOTg5NzM3RjYxREFEOTU3Q0MyNEQyMTM1 ODU4MThFREMwHhcNMjQwNTE5MDY1MjUyWhcNMjQwNTI2MDY1MjUyWjAYMRYwFAYD VQQDEw02NjQ5YTFjNC1jN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NI017xY4Tab67SopCVr86r540o994pvD9OYspicqZi2XszNKuCRFZIBAaVO f9o/ST+sN5VqWhUFa7JU6qTXx5xsq7MOvSrrDR6BHjdLcq0U/VWrwUWMQ4I65Hrv PYjyZ2OEqBqWB0BNqHy8RoHHoyTOBAK5MwNInKOGXMBFNqpCh6VQv7C+N8iE68IM dQSmwFRdzeSpzKd0OtcDeWIoGaP3DvvU0BS1R+zOEC2Nf0y5hz0tv9MNfuZss3Ls hwmjdNcdcFNOt3KRIR05IARGKITMfYW6MX8Qmn7wryKIXOQI187hlWsBNPq3IKFk ckSE0yRCPKKukGrjVbYGJejqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9ZzHqW w8l2Cfp1Fjf5LJ9bt4ARMB8GA1UdIwQYMBaAFM+uIxqYlzf2Ha2VfMJNITWFgY7c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri80MEJCMTU3NDJG NjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5fWWRyWlY4d2swaE5ZV0Jq dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o2NGpHcGlYTl9ZZHJaVjh3azBoTllXQmp0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri80MEJCMTU3NDJGNjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5f WWRyWlY4d2swaE5ZV0JqdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC93tuusyENcwIve4+g09jcQAmQVYJViGnxNUnjHlD0tDRp/ULwlTa4 jXt7picf10JMqNkYEm8TsshzAte81cptZg9kQ/Hgty/KjHuzyjqzdiYISMcL075X QvhhvYaqc9QQQRMBLXbyXgIKPgSYw2PlZOZ6noPOgXditaAw2P+SG672W92CzMh5 lAItnpE6iqFbj+UJS6Pfclfu+S11GDWmudd/Du6rulcgY2vOIXPoB9ElAruxf/gx CzFkeXWgNzpGLct4eHR5t70cjYJb+Lpm/OyywTY8lr9mQAA2wx9bFqYvwwZKnb8x fzmLafFHY1jiJ+wolXSqQSE3ovK2Abrd -----END CERTIFICATE-----Generated at Sun May 19 08:25:01 2024 by rpki-client on console-ams.rpki-client.org