$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json) Hash identifier: ENHV8JMNtmm0QlLfT8W9idSEztfC9StjAX0+GLRqMFk= Subject key identifier: 9A:C6:08:C4:56:90:70:F1:2F:82:27:2B:71:E6:78:3F:CF:B5:96:84 Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft Manifest number: 0522 Signing time: Fri 31 May 2024 01:34:05 +0000 Manifest this update: Fri 31 May 2024 01:34:05 +0000 Manifest next update: Fri 07 Jun 2024 01:34:05 +0000 Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: 15A04Zj/BflsHAeTdT9o9Y+BzaG3SXCYgklpMCd0VZA=) 2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: aIPT+3E9MecwnTP7AnpZA0lHLwuU0A0AxowKwKv8NOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Validity Not Before: May 31 01:34:05 2024 GMT Not After : Jun 7 01:34:05 2024 GMT Subject: CN=6659290d-aa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:95:ca:3a:af:77:3d:f2:91:16:30:e0:bd: e9:08:fb:03:ea:a9:4d:1d:59:5c:c2:dc:26:04:a3: b7:0b:d2:ea:32:e1:54:75:b0:ee:d8:6a:1e:64:34: a1:f2:a6:c5:4e:24:e1:a0:04:a8:a1:39:95:a8:f9: 16:c6:b5:e3:7a:9c:13:af:60:69:31:c9:93:eb:40: 71:15:a4:cf:01:70:50:28:87:ff:dd:61:99:da:4c: 59:82:af:9c:1e:1e:83:de:fa:f4:e0:90:c8:7a:3e: 04:ce:7e:68:41:65:f5:3f:f9:3f:95:d2:55:08:5e: c2:ab:2b:bf:ff:80:08:8b:9e:8f:ae:dd:00:d1:dc: 74:40:8d:43:be:52:3c:71:7b:23:54:23:50:b9:30: 27:e7:ce:e5:76:36:ea:84:7f:e0:05:ec:04:b6:08: 6f:83:4f:a7:55:99:7d:42:71:c5:60:d9:32:1b:5b: ec:a1:af:25:c1:10:cb:d4:57:eb:16:7d:56:bc:b1: a2:97:5b:77:13:fd:5c:db:7a:d6:da:33:a3:8d:ea: b5:8c:b3:3d:e0:76:fe:2c:bf:4a:6b:77:81:9c:60: 06:07:76:f8:97:36:fb:f0:e9:c8:ff:32:b6:ef:05: 39:f9:4b:34:22:ef:b8:05:a1:6a:36:97:c7:72:32: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:08:C4:56:90:70:F1:2F:82:27:2B:71:E6:78:3F:CF:B5:96:84 X509v3 Authority Key Identifier: keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:73:b5:8e:2b:e4:77:5f:5a:90:29:2e:12:d9:ed:35:22:bb: 29:65:b6:6e:52:38:7c:c4:7f:74:15:ad:ec:f0:27:51:6f:c6: e3:7f:a0:0b:f4:a2:ec:32:e7:5c:ce:73:d5:07:24:47:59:be: 48:51:82:9a:de:28:4a:30:13:0f:32:f3:58:2c:b1:5c:e6:a7: 9f:5e:00:d9:37:c8:a3:f7:b9:3a:80:96:12:2c:ee:75:55:20: 53:45:98:00:4f:ad:e4:6d:d4:b7:6f:3e:17:93:c1:db:74:68: a2:3d:de:36:0b:71:ad:c2:6b:99:0a:6d:d4:23:aa:b5:e2:09: 91:b1:e1:8f:2a:da:73:7d:a6:aa:09:e9:2b:87:d2:2f:a0:e2: da:a3:b2:f0:32:b9:a8:1c:7b:df:78:c2:ac:e7:bc:7d:35:4a: 88:b1:b0:4b:03:f5:35:90:49:a3:4a:b6:2b:46:d4:f3:c8:35: 89:f1:e3:d3:98:44:43:e3:7e:fc:30:b2:77:fe:d0:12:c4:45: 82:5d:b9:5c:15:7a:d0:9e:61:86:e2:ba:3c:12:5f:0b:06:6c: ef:96:18:6b:10:5b:d7:fe:4b:14:e3:38:bf:1e:fc:06:57:38: a9:7d:d7:cb:c8:07:4b:6c:10:68:fb:bb:1f:f9:cc:2b:e9:b2: 3e:2d:c8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF RjBFNjlBODYwHhcNMjQwNTMxMDEzNDA1WhcNMjQwNjA3MDEzNDA1WjAYMRYwFAYD VQQDEw02NjU5MjkwZC1hYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sOVyjqvdz3ykRYw4L3pCPsD6qlNHVlcwtwmBKO3C9LqMuFUdbDu2GoeZDSh 8qbFTiThoASooTmVqPkWxrXjepwTr2BpMcmT60BxFaTPAXBQKIf/3WGZ2kxZgq+c Hh6D3vr04JDIej4Ezn5oQWX1P/k/ldJVCF7Cqyu//4AIi56Prt0A0dx0QI1DvlI8 cXsjVCNQuTAn587ldjbqhH/gBewEtghvg0+nVZl9QnHFYNkyG1vsoa8lwRDL1Ffr Fn1WvLGil1t3E/1c23rW2jOjjeq1jLM94Hb+LL9Ka3eBnGAGB3b4lzb78OnI/zK2 7wU5+Us0Iu+4BaFqNpfHcjLbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrGCMRW kHDxL4InK3HmeD/PtZaEMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2 MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT TlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKc7WOK+R3X1qQKS4S2e01IrspZbZuUjh8xH90Fa3s8CdRb8bjf6AL 9KLsMudcznPVByRHWb5IUYKa3ihKMBMPMvNYLLFc5qefXgDZN8ij97k6gJYSLO51 VSBTRZgAT63kbdS3bz4Xk8HbdGiiPd42C3GtwmuZCm3UI6q14gmRseGPKtpzfaaq Cekrh9IvoOLao7LwMrmoHHvfeMKs57x9NUqIsbBLA/U1kEmjSrYrRtTzyDWJ8ePT mERD4378MLJ3/tASxEWCXblcFXrQnmGG4ro8El8LBmzvlhhrEFvX/ksU4zi/HvwG VzipfdfLyAdLbBBo+7sf+cwr6bI+Lcgb -----END CERTIFICATE-----Generated at Fri May 31 03:14:59 2024 by rpki-client on console-ams.rpki-client.org