$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json) Hash identifier: N4jLLPZ7CvEAwgEt6fAyzNoJCmplOM9im8ISq3+tXCA= Subject key identifier: 67:FF:42:DD:88:53:FE:46:73:33:1B:E4:6C:87:BC:B0:56:C3:2D:30 Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft Manifest number: 0B19 Signing time: Sat 18 May 2024 19:51:00 +0000 Manifest this update: Sat 18 May 2024 19:51:00 +0000 Manifest next update: Sat 25 May 2024 19:51:00 +0000 Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: 9D3AfVWsgyczt/9oqkzm/tTq8RG43dBUfzIuGVzZMZE=) 2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: wfQGJALYuSjZW88DDOeRHpYfVf4I2R7gOW04F4tJgxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4 Validity Not Before: May 18 19:51:00 2024 GMT Not After : May 25 19:51:00 2024 GMT Subject: CN=664906a4-826b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:68:a9:f5:c4:0a:ac:87:e7:9a:24:78:43: 42:ba:c8:b3:87:cd:5e:b5:9d:ad:69:7b:c3:5a:c1: e3:19:8f:38:70:b8:53:a5:b7:08:8d:f3:6a:31:ba: 4b:6c:0d:3e:ba:a0:6c:32:13:0b:b6:2c:1f:39:50: 73:c4:2a:23:74:f2:7d:c4:ad:a5:22:7e:ef:4e:76: 21:08:5b:13:81:5e:29:81:ff:a1:82:b9:1c:8d:0a: 5c:19:3d:e1:78:4a:d3:46:74:22:90:de:3d:92:50: c7:1e:d9:e5:aa:de:76:f2:19:7e:8e:dc:cf:aa:1d: f0:9a:a8:4e:e1:f9:18:86:6c:3b:8c:1f:e9:dc:7a: 58:e6:4d:2b:fc:81:75:9b:1c:35:8b:91:ef:4f:ac: d5:6d:4a:08:dd:4d:41:95:c3:e8:fd:5a:7d:70:d1: 29:cc:e2:13:10:33:0a:a7:38:2a:63:2d:84:d2:14: 5e:35:1b:b8:dc:17:de:32:39:53:c5:bb:0a:ff:ad: de:7a:5b:26:a6:65:61:bc:7e:cb:27:7b:45:89:22: c8:f0:9e:d4:4b:c5:b9:7a:ac:7e:a0:81:35:57:95: b9:7d:ab:5a:9c:75:1c:a4:27:82:7c:c2:44:13:97: 04:58:af:a2:1e:fa:51:b1:6f:f7:3f:72:d1:36:fa: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:42:DD:88:53:FE:46:73:33:1B:E4:6C:87:BC:B0:56:C3:2D:30 X509v3 Authority Key Identifier: keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0e:d4:19:4c:32:a8:48:51:4a:7f:f9:43:ba:a9:be:6f:03: b3:51:26:f4:73:17:37:a9:88:2d:22:c0:4c:f3:3e:6a:28:9b: d0:8a:d9:81:3d:24:04:27:08:f6:84:0a:32:ad:79:e0:03:b2: df:8f:7d:75:d7:58:e2:eb:92:9a:8d:84:92:79:f1:55:9d:f2: c9:de:37:87:37:31:a5:0d:85:2e:29:e3:00:a7:89:63:6c:e9: 5b:77:9c:c8:bf:5a:6a:45:15:d8:7a:be:55:57:18:58:ec:b6: c5:6e:05:38:75:15:cb:27:37:07:31:24:7b:93:96:7f:1f:d3: 20:5c:6a:b1:5a:08:b8:94:b7:e7:35:ed:c1:5b:81:e4:d9:25: e0:94:79:4e:d9:61:20:84:3c:bc:30:99:52:da:ed:99:d1:f8: d1:e1:c5:04:f0:cb:79:fa:26:b6:6b:38:a6:4c:37:36:4a:63: d8:33:2d:9a:89:08:d6:f5:36:e6:cd:92:77:ed:24:f6:dd:4a: 86:8c:38:15:47:33:0a:35:43:50:c4:8c:08:b5:4a:10:d7:98: bf:a0:c8:7a:36:c8:c0:5f:94:04:26:c4:47:a8:f2:d1:1e:51: 58:41:a2:23:5c:57:20:fa:45:5f:0b:2a:61:8d:61:65:b9:73: ff:93:b3:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCQ0IxMTAvBgNVBAUTKENDMzY5MEY4OTZFRjU2NzMxMTUzNUJDNDQ0REYxRUI3 NDFGRDhCQjQwHhcNMjQwNTE4MTk1MTAwWhcNMjQwNTI1MTk1MTAwWjAYMRYwFAYD VQQDEw02NjQ5MDZhNC04MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymtoqfXECqyH55okeENCusizh81etZ2taXvDWsHjGY84cLhTpbcIjfNqMbpL bA0+uqBsMhMLtiwfOVBzxCojdPJ9xK2lIn7vTnYhCFsTgV4pgf+hgrkcjQpcGT3h eErTRnQikN49klDHHtnlqt528hl+jtzPqh3wmqhO4fkYhmw7jB/p3HpY5k0r/IF1 mxw1i5HvT6zVbUoI3U1BlcPo/Vp9cNEpzOITEDMKpzgqYy2E0hReNRu43BfeMjlT xbsK/63eelsmpmVhvH7LJ3tFiSLI8J7US8W5eqx+oIE1V5W5fatanHUcpCeCfMJE E5cEWK+iHvpRsW/3P3LRNvqXuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf/Qt2I U/5GczMb5GyHvLBWwy0wMB8GA1UdIwQYMBaAFMw2kPiW71ZzEVNbxETfHrdB/Yu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJDQi9FOEQ2OTVBQzE5 MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZuTVJVMXZFUk44ZXQwSDlp N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pEYVEtSmJ2Vm5NUlUxdkVSTjhldDBIOWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUJDQi9FOEQ2OTVBQzE5MjYxMUVBQTMzNjFDN0JDNEY5QUUwMi96RGFRLUpidlZu TVJVMXZFUk44ZXQwSDlpN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8DtQZTDKoSFFKf/lDuqm+bwOzUSb0cxc3qYgtIsBM8z5qKJvQitmB PSQEJwj2hAoyrXngA7Lfj31111ji65KajYSSefFVnfLJ3jeHNzGlDYUuKeMAp4lj bOlbd5zIv1pqRRXYer5VVxhY7LbFbgU4dRXLJzcHMSR7k5Z/H9MgXGqxWgi4lLfn Ne3BW4Hk2SXglHlO2WEghDy8MJlS2u2Z0fjR4cUE8Mt5+ia2azimTDc2SmPYMy2a iQjW9TbmzZJ37ST23UqGjDgVRzMKNUNQxIwItUoQ15i/oMh6NsjAX5QEJsRHqPLR HlFYQaIjXFcg+kVfCyphjWFluXP/k7Mu -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org