$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: 3hSG0TUOCr4zmRxnb/NM2i6DKTCIaspFqVarCdnFqYA= Subject key identifier: 54:0E:4D:D6:92:3B:C6:08:C6:69:25:D7:9A:56:A8:61:B2:08:1F:A0 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1A0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 19E0 Signing time: Sat 18 May 2024 16:47:52 +0000 Manifest this update: Sat 18 May 2024 16:47:52 +0000 Manifest next update: Sat 25 May 2024 16:47:52 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: ciZVzjsZ78Khs7dqcNHoMOtuW+lx+5r3kwVHRBQ6SaY=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: TYP/huNuTAqG/G6FQjpKpXFcHxdMm+HU7/X2YELiuD0=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6666 (0x1a0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: May 18 16:47:52 2024 GMT Not After : May 25 16:47:52 2024 GMT Subject: CN=6648dbb8-e907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:5f:56:cb:c8:b6:40:ec:9a:d7:48:9f:9e: 80:b1:bc:e8:2b:74:1e:85:fa:86:ba:11:26:63:4c: 23:5f:67:9b:3d:45:1d:0f:a7:e6:45:7e:45:92:bc: af:84:ba:17:4c:93:89:c6:2f:55:44:28:a4:55:31: 08:60:59:e2:5a:7c:ec:d1:6c:56:cf:59:8f:a3:cc: 7c:e9:8e:1a:d1:8c:78:69:8d:c3:f6:a5:38:32:7e: c2:62:39:69:dd:2c:02:a8:39:99:85:7b:6a:e2:b1: d3:30:3f:cd:1d:ad:57:e0:e2:6f:9c:09:30:ee:8b: 12:8f:db:a8:06:9c:fa:c4:a8:c2:73:f1:d3:1f:7a: 51:76:ae:01:e1:eb:d7:61:a6:41:08:49:12:c3:62: 2b:69:47:7a:5f:b1:70:35:23:a1:e6:7a:33:76:69: 63:ea:18:61:ec:9a:41:10:84:ea:ad:c4:b2:7a:ae: eb:8a:3d:dd:3b:cf:02:4a:83:f3:2a:a4:07:db:95: 32:80:ac:f2:04:89:01:ee:d5:fe:71:1c:9b:84:20: 52:fc:99:f5:4a:9f:09:5d:0c:5d:6c:19:2a:f6:ad: 7e:6f:c5:24:6b:a8:01:b0:7d:28:5e:69:84:f9:70: 7a:34:f8:d4:d5:1f:1c:f3:8c:4c:3f:bc:3d:f2:13: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0E:4D:D6:92:3B:C6:08:C6:69:25:D7:9A:56:A8:61:B2:08:1F:A0 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:77:61:01:7e:d1:97:1f:af:65:6d:65:fa:4d:00:a4:3b:1f: 04:bc:d2:0b:9a:45:45:81:c5:5f:fb:3c:29:ac:3f:fd:a3:ae: 50:39:94:a0:af:7d:e8:21:0e:7f:63:dc:45:8c:13:01:a9:e3: 19:01:ad:d6:98:eb:2d:6f:d1:9a:fa:d7:07:17:b3:d4:80:8c: 41:01:b7:6d:30:95:db:d9:ed:79:7d:ac:90:43:cc:7e:6b:9f: e1:28:50:5a:f2:c1:26:fd:c0:33:b0:5c:e2:99:34:fb:c6:26: a2:23:4e:98:fd:53:2c:e8:9b:73:95:c2:ca:e7:f1:4a:cd:dc: 1e:05:a9:d1:e1:c3:e8:91:09:fe:c1:83:fc:4e:c3:40:f7:91: e3:64:ce:28:a1:91:94:d6:06:80:67:85:33:07:c6:8e:d7:7d: 22:f4:b8:ea:16:0f:25:4a:24:e2:59:8a:26:d0:a5:c2:00:a2: 6a:f5:79:8c:40:15:de:a9:a5:e9:cf:da:22:18:03:a0:86:b0: 2a:23:53:34:e2:0c:11:c7:15:19:99:01:a1:06:53:32:9e:97: ca:36:94:57:ea:af:52:88:0f:04:b0:53:30:3b:be:82:39:da: 39:e6:90:96:fd:9b:56:6b:f4:5c:b0:af:d7:45:14:26:89:e9: b5:30:2e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjQwNTE4MTY0NzUyWhcNMjQwNTI1MTY0NzUyWjAYMRYwFAYD VQQDEw02NjQ4ZGJiOC1lOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQRfVsvItkDsmtdIn56AsbzoK3QehfqGuhEmY0wjX2ebPUUdD6fmRX5Fkryv hLoXTJOJxi9VRCikVTEIYFniWnzs0WxWz1mPo8x86Y4a0Yx4aY3D9qU4Mn7CYjlp 3SwCqDmZhXtq4rHTMD/NHa1X4OJvnAkw7osSj9uoBpz6xKjCc/HTH3pRdq4B4evX YaZBCEkSw2IraUd6X7FwNSOh5nozdmlj6hhh7JpBEITqrcSyeq7rij3dO88CSoPz KqQH25UygKzyBIkB7tX+cRybhCBS/Jn1Sp8JXQxdbBkq9q1+b8Uka6gBsH0oXmmE +XB6NPjU1R8c84xMP7w98hM6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQOTdaS O8YIxmkl15pWqGGyCB+gMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5d2EBftGXH69lbWX6TQCkOx8EvNILmkVFgcVf+zwprD/9o65QOZSg r33oIQ5/Y9xFjBMBqeMZAa3WmOstb9Ga+tcHF7PUgIxBAbdtMJXb2e15fayQQ8x+ a5/hKFBa8sEm/cAzsFzimTT7xiaiI06Y/VMs6JtzlcLK5/FKzdweBanR4cPokQn+ wYP8TsNA95HjZM4ooZGU1gaAZ4UzB8aO130i9LjqFg8lSiTiWYom0KXCAKJq9XmM QBXeqaXpz9oiGAOghrAqI1M04gwRxxUZmQGhBlMynpfKNpRX6q9SiA8EsFMwO76C Odo55pCW/ZtWa/RcsK/XRRQmiem1MC7Y -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org