$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: +oq9yAVgzz9OrJGSfRFusLqep1MYR1BvU8vcCy7xmE8= Subject key identifier: A4:06:8E:93:62:5D:00:88:F1:26:B3:13:6D:04:9F:69:F7:B8:7B:63 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 074B Signing time: Sat 18 May 2024 22:21:35 +0000 Manifest this update: Sat 18 May 2024 22:21:34 +0000 Manifest next update: Sat 25 May 2024 22:21:34 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: WdsGa7iO/SJY2OeXIwoUlIKFdw9NWrMCWb4MzoD5sGM=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 15zFPVo2UCRlQU2iKbG369RG8kW7thCKoADpnFjU/KE=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: UbVO7og+RySUDN5yUenSxf+UciTbT5gAo26UXJMY/YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: May 18 22:21:34 2024 GMT Not After : May 25 22:21:34 2024 GMT Subject: CN=664929ee-9671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:76:9f:e8:59:99:20:a5:40:7e:2e:6c:8a: cf:71:a5:2c:e6:fe:84:4e:f0:1e:0c:de:4f:eb:d1: 42:00:5e:49:89:19:a1:02:f6:08:2f:8b:fe:b2:85: 20:76:d7:cc:be:b8:0c:3a:f9:f6:36:cb:66:1d:5c: fb:51:90:6d:af:e1:d0:cd:6d:a9:7f:49:e4:bb:f8: 47:4e:35:21:dd:f6:c8:98:9a:dd:b0:0b:30:7d:3c: 5d:34:c3:f2:05:76:a7:14:bc:18:91:87:b1:95:ce: 88:0e:99:95:3f:72:79:2e:5f:a3:51:d4:a5:5c:2c: 9a:54:24:e5:a7:7b:48:5d:9e:3d:a2:79:d1:79:58: e4:86:85:a2:1b:ca:b6:33:a8:85:a6:1f:c0:8a:32: 8c:9f:8f:61:f0:4d:22:7c:00:a0:2a:82:65:f9:aa: c9:21:c8:93:eb:69:ad:25:b9:20:cf:6c:f4:80:88: 42:15:26:d9:83:5e:67:33:f7:b5:1b:3a:1a:11:53: 90:65:ad:4c:0e:00:0f:f2:eb:2a:15:9a:c8:84:c7: 91:79:4b:6a:58:a3:3e:39:c9:06:d7:77:96:36:39: 05:85:47:af:40:be:bf:8b:46:a7:92:84:0c:92:b8: f7:84:34:b9:b3:37:4b:0d:95:22:e6:61:35:77:f0: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:06:8E:93:62:5D:00:88:F1:26:B3:13:6D:04:9F:69:F7:B8:7B:63 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:3d:23:74:d5:c5:91:cb:f8:4b:d0:3e:3b:03:1a:9b:f6:f7: 1a:9d:f5:dd:04:3a:42:e9:83:51:de:d6:7a:28:4d:fa:e2:a2: cc:f2:de:dd:ef:f7:1c:c1:3e:27:d1:1f:b4:fa:9c:72:0d:03: f3:cd:f8:46:91:b9:70:44:b2:3f:d3:00:f5:9c:ba:dd:16:ac: 4d:f4:de:c5:02:d8:e9:70:c2:b4:50:2a:9e:b5:9f:db:95:eb: d3:10:06:24:b1:72:33:29:f4:63:28:bc:24:0b:fd:36:91:82: 6e:63:e4:69:f9:f9:ec:e9:f3:f3:7d:b5:ff:d8:4c:f5:fb:44: 77:26:11:4d:65:70:af:b8:5a:c8:e2:6c:c9:39:73:c4:17:29: 72:58:4a:f2:35:f6:b7:34:c8:b9:52:86:68:5e:46:dc:79:89: a2:a8:2b:2d:7b:33:0a:0b:80:89:b7:ce:a2:e6:ba:ae:bd:ae: 10:a4:45:14:6e:f7:04:88:50:e4:9c:cb:aa:85:b1:ae:6a:03: 58:10:96:00:dc:7a:73:81:dd:03:4c:dd:a1:cf:fb:b7:22:98: e3:de:0b:ba:d8:05:16:54:67:85:68:e0:b8:81:85:f9:72:f0: 7b:e4:ef:02:5d:15:5d:fb:58:c3:38:71:ed:3c:b6:2d:3d:7e: f7:02:4d:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjQwNTE4MjIyMTM0WhcNMjQwNTI1MjIyMTM0WjAYMRYwFAYD VQQDEw02NjQ5MjllZS05NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6l2n+hZmSClQH4ubIrPcaUs5v6ETvAeDN5P69FCAF5JiRmhAvYIL4v+soUg dtfMvrgMOvn2NstmHVz7UZBtr+HQzW2pf0nku/hHTjUh3fbImJrdsAswfTxdNMPy BXanFLwYkYexlc6IDpmVP3J5Ll+jUdSlXCyaVCTlp3tIXZ49onnReVjkhoWiG8q2 M6iFph/AijKMn49h8E0ifACgKoJl+arJIciT62mtJbkgz2z0gIhCFSbZg15nM/e1 GzoaEVOQZa1MDgAP8usqFZrIhMeReUtqWKM+OckG13eWNjkFhUevQL6/i0ankoQM krj3hDS5szdLDZUi5mE1d/D9vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQGjpNi XQCI8SazE20En2n3uHtjMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVPSN01cWRy/hL0D47Axqb9vcanfXdBDpC6YNR3tZ6KE364qLM8t7d 7/ccwT4n0R+0+pxyDQPzzfhGkblwRLI/0wD1nLrdFqxN9N7FAtjpcMK0UCqetZ/b levTEAYksXIzKfRjKLwkC/02kYJuY+Rp+fns6fPzfbX/2Ez1+0R3JhFNZXCvuFrI 4mzJOXPEFylyWEryNfa3NMi5UoZoXkbceYmiqCstezMKC4CJt86i5rquva4QpEUU bvcEiFDknMuqhbGuagNYEJYA3Hpzgd0DTN2hz/u3Ipjj3gu62AUWVGeFaOC4gYX5 cvB75O8CXRVd+1jDOHHtPLYtPX73Ak37 -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org