$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: SSIUJqZh4Wqm5qUnBWKmTMR295fFpi6MTfLcHiXz45E= Subject key identifier: 5F:1C:18:44:DB:71:BB:C1:0B:A9:E7:11:9F:6A:96:B8:F1:73:01:33 Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 084E Signing time: Sat 18 May 2024 21:40:44 +0000 Manifest this update: Sat 18 May 2024 21:40:43 +0000 Manifest next update: Sat 25 May 2024 21:40:43 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: /DTXEINBbcnb563LW4mgiYQ5g6IMDeNuwD6CnTx+z0k=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: JY9PljOJiuoXt4fdQZ9u2Z8dMlV1c1/9Hn7YKdisOU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: May 18 21:40:43 2024 GMT Not After : May 25 21:40:43 2024 GMT Subject: CN=6649205b-e349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:66:fe:d4:be:9a:3d:3a:5b:d8:b9:d1:ad: 5e:bb:fe:ff:77:12:2e:a5:7e:b9:db:5a:cd:8a:35: ba:26:d3:28:17:70:70:44:7f:02:35:ec:7a:c9:2b: 34:9b:f0:8b:cc:bd:fd:06:45:3a:72:17:00:e9:ee: a8:77:cb:77:ad:a1:57:5a:39:93:11:9d:2d:74:82: 91:43:06:a2:37:e3:d7:45:de:bc:37:1d:7a:cb:72: d8:94:ad:94:41:c4:2a:c7:c4:37:63:50:34:43:78: 89:60:be:6b:fd:1a:1c:89:5f:8a:d8:a9:44:34:26: a4:e9:91:1b:0b:96:41:5b:ba:fb:8b:89:54:bd:8a: 53:24:ec:cb:b5:3b:31:fd:24:a0:e2:6a:1d:34:b3: 3c:ad:f7:d2:76:05:eb:81:93:aa:2c:9e:61:dc:f9: dd:3b:39:5c:eb:08:81:97:0e:de:c4:70:2d:2b:d7: 62:c9:1c:fe:0c:e6:ab:01:c5:8e:9e:3a:8b:50:75: a0:ce:c1:64:3b:1f:b0:b4:3d:94:78:fd:07:cf:b9: 71:a5:6d:99:b5:f9:4c:13:2b:d1:a6:fa:35:e0:b2: 24:a3:d7:21:df:db:2b:2e:cc:68:5c:77:ca:3b:32: b8:e2:85:49:0c:48:94:4a:96:50:72:93:15:a7:5f: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1C:18:44:DB:71:BB:C1:0B:A9:E7:11:9F:6A:96:B8:F1:73:01:33 X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:61:d5:22:5c:9d:8d:7c:45:d2:ac:d8:5a:d2:43:f8:42:58: 86:15:5a:8b:cc:de:3e:0a:f7:b9:d4:7b:29:cc:88:3d:a4:71: 4c:7a:a1:8f:94:a3:85:51:3f:7d:0d:44:71:c3:b7:6c:bb:b1: f9:27:8f:13:6f:cb:70:d7:a1:42:c0:78:f9:24:ad:5f:a1:73: ef:19:86:9a:d3:63:e0:fc:04:0c:9a:18:9f:36:56:74:3a:b4: 9a:79:b4:75:cb:12:df:56:4c:44:e7:75:dc:58:a5:77:c5:16: 05:e6:ff:d2:2a:6b:ed:4c:a8:98:c0:f2:3a:56:46:bd:82:1d: eb:d1:98:49:44:0c:04:d8:e5:2f:1d:14:d7:9a:71:94:c8:0d: f2:bb:41:37:f0:e2:b3:c4:83:07:5b:db:a6:f7:a5:b7:04:7f: c9:0f:63:49:d9:f8:a7:62:29:66:66:2d:14:51:d5:8b:24:fa: b0:88:7f:ff:3c:82:46:1e:c3:0d:36:3f:d7:99:c7:52:18:1d: ab:d3:7e:c1:f7:51:ad:5e:8d:c4:74:1e:07:7c:08:d4:0a:bc: ee:bd:b8:6a:63:03:95:eb:bd:19:8f:5d:69:98:32:58:59:45: b8:4b:b2:5e:bd:01:04:4f:41:ae:48:89:8d:31:11:37:ad:9d: 10:2d:54:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjQwNTE4MjE0MDQzWhcNMjQwNTI1MjE0MDQzWjAYMRYwFAYD VQQDEw02NjQ5MjA1Yi1lMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qxm/tS+mj06W9i50a1eu/7/dxIupX6521rNijW6JtMoF3BwRH8CNex6ySs0 m/CLzL39BkU6chcA6e6od8t3raFXWjmTEZ0tdIKRQwaiN+PXRd68Nx16y3LYlK2U QcQqx8Q3Y1A0Q3iJYL5r/RociV+K2KlENCak6ZEbC5ZBW7r7i4lUvYpTJOzLtTsx /SSg4modNLM8rffSdgXrgZOqLJ5h3PndOzlc6wiBlw7exHAtK9diyRz+DOarAcWO njqLUHWgzsFkOx+wtD2UeP0Hz7lxpW2ZtflMEyvRpvo14LIko9ch39srLsxoXHfK OzK44oVJDEiUSpZQcpMVp18wkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8cGETb cbvBC6nnEZ9qlrjxcwEzMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3YdUiXJ2NfEXSrNha0kP4QliGFVqLzN4+Cve51HspzIg9pHFMeqGP lKOFUT99DURxw7dsu7H5J48Tb8tw16FCwHj5JK1foXPvGYaa02Pg/AQMmhifNlZ0 OrSaebR1yxLfVkxE53XcWKV3xRYF5v/SKmvtTKiYwPI6Vka9gh3r0ZhJRAwE2OUv HRTXmnGUyA3yu0E38OKzxIMHW9um96W3BH/JD2NJ2finYilmZi0UUdWLJPqwiH// PIJGHsMNNj/XmcdSGB2r037B91GtXo3EdB4HfAjUCrzuvbhqYwOV670Zj11pmDJY WUW4S7JevQEET0GuSImNMRE3rZ0QLVR2 -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org