$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: ikNhkBN7j2ni+JnY81v8yg22SB94lUkVyG9Dw2n5uh4= Subject key identifier: 98:19:D9:5A:95:99:11:54:AB:EC:08:24:00:47:0C:C8:20:56:A8:18 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 33D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 33CB Signing time: Sat 18 May 2024 14:38:03 +0000 Manifest this update: Sat 18 May 2024 14:38:03 +0000 Manifest next update: Sat 25 May 2024 14:38:03 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: j0s2seKhWQMzGP7kPk0+FhSKcaxjKHAvEbfRBcC/7Ks=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: 3h774Pe1HYN4QG3xrWyvk1D9gE9ttAqrp4hVNxr3C08=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: 2tEUJiaqDG9CdCuxsLfmBMHtTb9F8qAopG5DCApxKao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13266 (0x33d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: May 18 14:38:03 2024 GMT Not After : May 25 14:38:03 2024 GMT Subject: CN=6648bd4b-d8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:9d:e1:2b:0b:a3:c6:7b:93:ec:d1:d3:db: a0:6f:73:50:62:f3:ab:d4:e1:e8:8d:6f:79:db:d7: 48:97:3b:ba:c4:a1:cf:ba:89:0f:7b:36:56:2c:ad: 52:ca:8b:1a:76:e3:ca:f7:05:ea:07:7f:9d:5c:a6: 8d:c5:14:4b:75:21:63:1a:72:00:39:39:3e:f5:ba: 15:84:64:68:fe:5b:eb:e6:15:4e:bc:b5:a3:6e:2b: 56:2b:1f:3b:99:b7:db:d6:a7:e7:b1:07:3d:49:7c: 61:47:57:10:3e:c7:9b:60:82:15:e8:53:ea:4a:de: 41:b5:ef:d3:86:51:9b:24:ad:06:63:1e:e9:23:74: 59:f0:09:bf:87:4c:73:2c:97:2b:d4:70:05:2f:e8: ad:fc:77:a8:15:cb:68:33:5a:72:fb:5f:b3:49:7b: 42:e3:84:18:9a:1a:7d:fe:a9:1b:d7:b0:f0:ae:c1: b4:75:12:d4:9c:37:10:b8:b2:5b:89:b0:84:c2:7e: aa:c5:e9:15:5a:d9:ca:cd:7d:db:45:5c:a3:f9:4e: 4b:ce:8d:e6:ca:0f:29:28:3c:1a:c5:70:30:1d:f8: 61:5f:0c:11:74:52:7b:9f:0c:b4:b6:2f:8e:b9:5d: 6f:d7:72:76:db:31:fe:56:42:fd:6e:83:e9:39:af: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:D9:5A:95:99:11:54:AB:EC:08:24:00:47:0C:C8:20:56:A8:18 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:53:25:1b:a8:85:a9:a3:d6:68:e4:2a:78:8a:58:b9:27:b1: fe:5d:30:84:48:ed:82:2d:2a:a8:e8:fd:ec:22:66:54:34:9c: 6a:0c:46:94:42:76:80:03:72:ca:c7:06:5a:7f:81:e2:f1:f0: 4e:04:a2:1b:f4:de:9f:85:cf:ef:7e:65:22:da:5b:12:5c:f0: ec:81:2c:2e:ef:a2:33:61:50:22:6b:6b:bb:22:e7:28:b5:53: 76:8a:93:75:3d:7d:0a:be:e2:d5:33:0c:bc:30:cb:f4:d2:07: ca:75:5b:62:00:e1:0d:e8:22:61:e6:b7:f4:a0:6f:af:83:83: 5c:00:0c:e2:cf:3c:bf:11:4f:97:c0:18:a7:d1:a3:42:08:8f: a2:ba:0a:8b:d9:26:d9:5b:bd:20:01:f7:5f:f6:d3:5a:38:c4: 84:70:29:e0:d5:28:53:7a:02:24:03:72:65:0e:6a:6f:b7:86: c2:ac:1d:f9:44:1b:88:19:24:98:b7:a6:ad:d1:1a:95:e9:0c: d3:8e:ae:98:4c:1e:ac:4d:b8:d7:68:2b:12:c8:d4:dd:73:ca: 82:e5:69:31:cf:c4:17:04:61:fc:b4:1b:cd:bd:1f:6d:a3:99: 29:68:c7:8f:70:e7:c7:6b:df:a5:fb:db:0a:31:93:19:d5:82: 7f:da:ae:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjQwNTE4MTQzODAzWhcNMjQwNTI1MTQzODAzWjAYMRYwFAYD VQQDEw02NjQ4YmQ0Yi1kOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p2d4SsLo8Z7k+zR09ugb3NQYvOr1OHojW9529dIlzu6xKHPuokPezZWLK1S yosaduPK9wXqB3+dXKaNxRRLdSFjGnIAOTk+9boVhGRo/lvr5hVOvLWjbitWKx87 mbfb1qfnsQc9SXxhR1cQPsebYIIV6FPqSt5Bte/ThlGbJK0GYx7pI3RZ8Am/h0xz LJcr1HAFL+it/HeoFctoM1py+1+zSXtC44QYmhp9/qkb17DwrsG0dRLUnDcQuLJb ibCEwn6qxekVWtnKzX3bRVyj+U5Lzo3myg8pKDwaxXAwHfhhXwwRdFJ7nwy0ti+O uV1v13J22zH+VkL9boPpOa+ZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgZ2VqV mRFUq+wIJABHDMggVqgYMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuUyUbqIWpo9Zo5Cp4ili5J7H+XTCESO2CLSqo6P3sImZUNJxqDEaU QnaAA3LKxwZaf4Hi8fBOBKIb9N6fhc/vfmUi2lsSXPDsgSwu76IzYVAia2u7Iuco tVN2ipN1PX0KvuLVMwy8MMv00gfKdVtiAOEN6CJh5rf0oG+vg4NcAAzizzy/EU+X wBin0aNCCI+iugqL2SbZW70gAfdf9tNaOMSEcCng1ShTegIkA3JlDmpvt4bCrB35 RBuIGSSYt6at0RqV6QzTjq6YTB6sTbjXaCsSyNTdc8qC5Wkxz8QXBGH8tBvNvR9t o5kpaMePcOfHa9+l+9sKMZMZ1YJ/2q4G -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org