$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: TacVB9dtS2hcMYA52rVAdRAaFyuKdx4TpvC798Up/hI= Subject key identifier: 30:BC:DF:45:15:FA:BE:9D:D9:67:4D:50:92:A3:A5:6D:04:74:D6:AA Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0B80 Signing time: Sat 18 May 2024 19:21:50 +0000 Manifest this update: Sat 18 May 2024 19:21:49 +0000 Manifest next update: Sat 25 May 2024 19:21:49 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: TgkSsRUT8v3YX5sKItJUNZUPZPAvO/Sk1yVZYjpT23Q=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: +1u0IgA0Wz54K7p0snw6xhCKFuGQKYMbw5LuhhxFO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: May 18 19:21:49 2024 GMT Not After : May 25 19:21:49 2024 GMT Subject: CN=6648ffce-d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a7:72:63:cd:21:e2:c7:48:bd:d2:f2:d3:88: b9:a3:de:29:33:25:6e:ee:29:8f:02:82:78:13:79: a1:f3:cf:6c:cd:98:a2:b1:a4:34:42:31:5c:2a:50: e0:ca:04:82:fa:10:9c:bd:b7:31:b7:b9:be:72:3c: 14:2d:0c:72:71:be:11:19:4f:f6:43:f8:12:57:77: b1:fe:c4:ed:d8:94:57:f7:c1:31:15:63:62:27:3c: ed:1b:df:15:b9:d3:8c:97:71:e9:cf:b3:17:e4:11: 90:0f:31:91:3b:83:d5:90:d5:45:38:86:90:f8:70: 4b:97:57:a6:cb:6d:bc:d5:7c:77:22:28:fb:97:09: 70:20:0c:23:45:f7:68:d6:32:61:65:fa:88:9a:90: f7:f8:db:2e:1a:b4:40:26:10:91:b6:a3:41:20:3d: 9a:5b:eb:f4:99:7a:73:8c:7f:05:9b:d9:b6:b7:db: 49:59:4d:76:8b:ba:02:23:18:80:0a:e4:79:1f:f9: 1d:77:55:70:f9:9d:f1:68:e5:3d:ce:75:bd:49:6e: 1e:99:c9:f9:75:c5:3c:ab:cd:ef:b2:9c:16:75:28: 3d:1e:6e:b0:a3:54:60:df:83:05:be:21:80:82:1d: 72:00:c1:5a:aa:9e:20:2b:7f:7b:c2:00:37:0a:63: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BC:DF:45:15:FA:BE:9D:D9:67:4D:50:92:A3:A5:6D:04:74:D6:AA X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e5:dd:43:70:44:2e:a6:94:a4:c8:07:8c:aa:16:6f:15:ba: 84:8c:0d:32:7a:55:a9:af:78:f2:43:48:0c:4e:73:e4:35:94: 2c:4d:28:a1:cf:ea:b1:14:1b:62:82:9d:01:f2:01:f8:88:07: 27:4e:70:84:d8:d5:2d:73:b1:23:50:0b:92:85:53:5b:5a:f4: fd:7f:3d:b8:88:4a:9b:e2:76:9b:63:94:6f:b8:9e:3a:d6:4f: e6:71:2b:c6:0c:f4:cb:e9:7c:75:af:30:b9:98:5b:dc:b0:16: bf:4a:03:f0:99:1e:33:fd:d6:9a:e0:96:23:63:8b:4e:39:c2: eb:fe:26:26:dc:d9:59:b1:c4:a2:57:9a:fd:aa:a3:7b:4b:59: ef:75:7d:fd:43:29:9c:f6:ee:40:43:95:b3:f1:bc:31:40:5c: fc:40:33:15:21:cc:f5:43:66:9e:11:13:63:3d:3d:45:ed:c4: 4a:08:99:c1:69:ef:7e:cf:0f:3a:0f:e4:c3:bd:d4:3b:8e:f9: a0:78:8f:c9:18:0e:14:89:eb:7f:27:22:6c:4c:e4:f6:8d:d0: 2c:90:c2:71:9e:01:14:34:2b:bb:19:23:b2:32:5c:37:44:73: 97:f6:4d:38:60:6d:58:f7:cf:8c:9c:0b:73:51:29:98:46:ec: 03:c9:0b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjQwNTE4MTkyMTQ5WhcNMjQwNTI1MTkyMTQ5WjAYMRYwFAYD VQQDEw02NjQ4ZmZjZS1kMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KdyY80h4sdIvdLy04i5o94pMyVu7imPAoJ4E3mh889szZiisaQ0QjFcKlDg ygSC+hCcvbcxt7m+cjwULQxycb4RGU/2Q/gSV3ex/sTt2JRX98ExFWNiJzztG98V udOMl3Hpz7MX5BGQDzGRO4PVkNVFOIaQ+HBLl1emy2281Xx3Iij7lwlwIAwjRfdo 1jJhZfqImpD3+NsuGrRAJhCRtqNBID2aW+v0mXpzjH8Fm9m2t9tJWU12i7oCIxiA CuR5H/kdd1Vw+Z3xaOU9znW9SW4emcn5dcU8q83vspwWdSg9Hm6wo1Rg34MFviGA gh1yAMFaqp4gK397wgA3CmMRrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC830UV +r6d2WdNUJKjpW0EdNaqMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD5d1DcEQuppSkyAeMqhZvFbqEjA0yelWpr3jyQ0gMTnPkNZQsTSih z+qxFBtigp0B8gH4iAcnTnCE2NUtc7EjUAuShVNbWvT9fz24iEqb4nabY5RvuJ46 1k/mcSvGDPTL6Xx1rzC5mFvcsBa/SgPwmR4z/daa4JYjY4tOOcLr/iYm3NlZscSi V5r9qqN7S1nvdX39Qymc9u5AQ5Wz8bwxQFz8QDMVIcz1Q2aeERNjPT1F7cRKCJnB ae9+zw86D+TDvdQ7jvmgeI/JGA4Uiet/JyJsTOT2jdAskMJxngEUNCu7GSOyMlw3 RHOX9k04YG1Y98+MnAtzUSmYRuwDyQso -----END CERTIFICATE-----Generated at Sat May 18 20:15:59 2024 by rpki-client on console-ams.rpki-client.org