$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json) Hash identifier: 6yaCblLoUZVqZ01UOp7eO9jamE+JJbJOuuWWPE1erzU= Subject key identifier: 73:60:EA:6D:2C:FB:A8:16:17:2B:53:88:80:7D:8F:3C:9F:1F:85:B0 Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft Manifest number: 0167 Signing time: Tue 25 Jun 2024 03:46:38 +0000 Manifest this update: Tue 25 Jun 2024 03:46:37 +0000 Manifest next update: Tue 02 Jul 2024 03:46:37 +0000 Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: /HZ9itFVH74FKNjkYEjdHB/0AMZrR5OVEqEgISyh+CI=) 2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: K66E2OjMNQ4DObx8A9qLvG2DwJwzcn3km54gG0lAGG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 03:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Validity Not Before: Jun 25 03:46:37 2024 GMT Not After : Jul 2 03:46:37 2024 GMT Subject: CN=667a3d9d-3f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:a9:71:fe:35:b4:c1:07:be:6b:2e:fd:68: b3:ed:67:92:01:4a:c1:e1:6f:7b:59:38:51:90:67: 8b:d8:c2:ff:c2:a9:b8:6e:83:6f:8b:71:d2:2f:bc: 36:ac:2f:e0:19:a1:9c:aa:b5:01:ad:0d:0a:42:8a: e5:19:a0:99:cb:2c:a4:33:ae:af:33:a9:78:0c:11: 79:ff:38:0a:4d:3f:77:bd:cc:4c:e5:5e:93:22:99: f7:f1:53:e4:fe:39:40:a1:18:e6:71:db:b1:0f:d4: 04:a8:61:a7:f3:4b:78:27:0a:d1:2d:3b:12:88:1a: 09:73:29:f1:2c:00:ea:6a:42:0d:09:de:e2:9a:5d: db:90:9f:b7:e5:ff:7c:ef:df:ea:78:b3:17:99:38: d4:0f:6f:65:17:9b:67:6e:fa:35:ae:7e:1c:05:cc: b3:f2:bf:58:17:2d:46:04:9e:e3:0b:3c:19:55:8e: 8d:a3:ce:87:da:de:de:85:e6:7b:e8:5e:df:58:9f: c7:7a:32:c3:a9:6c:07:c8:b2:d0:27:d3:3c:9a:97: 49:74:80:04:ef:c6:61:ed:db:83:75:af:06:53:bc: 7b:94:b7:92:4a:f6:1c:6b:a7:1b:c5:00:41:38:0b: 16:35:98:ff:45:7a:d0:97:f0:54:f6:f8:58:43:01: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:EA:6D:2C:FB:A8:16:17:2B:53:88:80:7D:8F:3C:9F:1F:85:B0 X509v3 Authority Key Identifier: keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a2:9f:30:0b:c6:37:19:44:95:41:e6:ac:ea:a8:18:3c:1c: 76:bb:e9:3e:cc:49:fe:82:0a:c6:ff:f4:8c:78:f7:78:62:2c: ff:bf:9d:58:1f:8f:b0:e2:d6:27:4c:af:95:18:fd:18:86:bf: 67:9c:e7:2f:6a:cd:cf:4c:e8:04:47:77:6e:f2:f3:9a:e6:a7: 9c:3f:e0:a2:66:b5:16:21:ab:c9:55:b4:c3:4a:71:45:93:7b: cc:0e:44:8e:75:34:fb:c3:23:d4:df:c8:76:59:84:47:ae:0c: c0:0c:fd:c3:82:ef:ef:72:77:27:26:d6:8f:29:c4:9c:06:e8: 43:46:1c:86:f1:cd:07:9e:34:eb:e2:f7:e5:ab:4a:66:2f:6a: 70:1d:0f:ba:ed:82:13:66:17:b9:08:8c:06:60:67:1f:11:07: 6b:5c:58:d6:0d:f9:70:a5:e7:67:91:2c:66:7e:26:9f:5f:89: b3:ab:7f:df:c1:5c:b7:17:a6:ad:b3:e1:fc:a1:42:47:4e:2b: 9d:75:6a:3f:78:af:be:91:c6:1c:89:ec:35:40:02:f6:d9:c5: 0b:0e:c2:7e:53:45:58:43:6a:2a:2c:cb:e3:be:d1:5a:5d:7a: ad:48:a1:ee:df:1e:1a:2d:0a:a6:56:b1:fa:28:80:1d:b9:23: 77:f0:f5:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE OEE0OUQ4NEUwHhcNMjQwNjI1MDM0NjM3WhcNMjQwNzAyMDM0NjM3WjAYMRYwFAYD VQQDEw02NjdhM2Q5ZC0zZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoepcf41tMEHvmsu/Wiz7WeSAUrB4W97WThRkGeL2ML/wqm4boNvi3HSL7w2 rC/gGaGcqrUBrQ0KQorlGaCZyyykM66vM6l4DBF5/zgKTT93vcxM5V6TIpn38VPk /jlAoRjmcduxD9QEqGGn80t4JwrRLTsSiBoJcynxLADqakINCd7iml3bkJ+35f98 79/qeLMXmTjUD29lF5tnbvo1rn4cBcyz8r9YFy1GBJ7jCzwZVY6No86H2t7eheZ7 6F7fWJ/HejLDqWwHyLLQJ9M8mpdJdIAE78Zh7duDda8GU7x7lLeSSvYca6cbxQBB OAsWNZj/RXrQl/BU9vhYQwFcIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNg6m0s +6gWFytTiIB9jzyfH4WwMB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY MjlodVlyRXBxWlRZcEoyRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBop8wC8Y3GUSVQeas6qgYPBx2u+k+zEn+ggrG//SMePd4Yiz/v51Y H4+w4tYnTK+VGP0Yhr9nnOcvas3PTOgER3du8vOa5qecP+CiZrUWIavJVbTDSnFF k3vMDkSOdTT7wyPU38h2WYRHrgzADP3Dgu/vcncnJtaPKcScBuhDRhyG8c0HnjTr 4vflq0pmL2pwHQ+67YITZhe5CIwGYGcfEQdrXFjWDflwpednkSxmfiafX4mzq3/f wVy3F6ats+H8oUJHTiuddWo/eK++kcYciew1QAL22cULDsJ+U0VYQ2oqLMvjvtFa XXqtSKHu3x4aLQqmVrH6KIAduSN38PXD -----END CERTIFICATE-----Generated at Tue Jun 25 07:41:38 2024 by rpki-client on console-ams.rpki-client.org