$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json) Hash identifier: Ph8mGecpHYGMhBz8tseQmZ0bY7W+e1VDo52g04SlRrs= Subject key identifier: 82:BA:E8:16:9B:1E:1B:F9:F0:4A:AD:75:06:75:9C:94:58:B0:1D:42 Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft Manifest number: 06A4 Signing time: Fri 26 Apr 2024 23:12:52 +0000 Manifest this update: Fri 26 Apr 2024 23:12:51 +0000 Manifest next update: Fri 03 May 2024 23:12:51 +0000 Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: omybeH+6Rtrsb0X0NCkz7Z1Qhd/0g5OH2+eYDSrOwAo=) 2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: I43X2ILlK/K7dyC3ecsmVCkpRUOCvWwwGDCuc74JdYs=) 3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: xN2Zmmo32TF/vM0qywttRWMqyAyLYMDfWpGxhYW5bdU=) 4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: Y9+NByiMbC9ptSkq2x4xGob8Ju6FYekkoEtclUJbd3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168 Validity Not Before: Apr 26 23:12:51 2024 GMT Not After : May 3 23:12:51 2024 GMT Subject: CN=662c34f3-6ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:19:3a:46:45:9b:4b:1a:a9:87:48:c7:43:38: 5b:77:4b:29:64:c4:48:c6:90:d7:bf:4c:af:69:90: dd:1d:8a:31:3d:53:6b:95:c1:64:53:aa:a5:02:94: c3:82:07:5a:d5:36:8d:5e:d2:8f:9b:87:21:11:9c: 7d:60:36:c6:a5:36:b1:53:98:ad:c2:3b:54:5e:af: fb:c6:1e:57:cf:95:de:65:3e:34:0c:0c:9c:0d:ab: 9d:5f:8a:07:cc:e0:ab:60:0f:9f:c6:72:32:ab:25: e3:26:ff:be:24:4d:f8:79:4b:a1:45:12:e5:74:1d: 13:d6:c9:48:a1:1c:24:7b:9c:1a:36:31:51:0a:b0: 40:b3:a5:d9:79:3c:00:7f:35:e5:d3:1e:30:9f:43: 44:41:c6:aa:c6:ae:18:40:c8:79:13:96:ec:c5:c3: b5:04:bb:6a:6f:17:d1:35:98:41:4c:00:4f:fa:8c: da:68:3d:72:87:7a:ef:d7:9d:34:35:8b:82:27:0a: 84:e2:cc:8a:34:ee:b6:c7:cc:9d:25:92:54:70:8e: 4e:0f:f0:31:c5:a9:b1:7d:20:9d:bb:ff:be:0a:f3: 08:92:f5:46:bd:79:0a:04:16:b2:a6:8d:5e:99:69: 75:a2:fa:3f:fe:9d:5d:e1:82:55:b5:39:0c:9e:03: 59:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BA:E8:16:9B:1E:1B:F9:F0:4A:AD:75:06:75:9C:94:58:B0:1D:42 X509v3 Authority Key Identifier: keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4c:e5:e3:fc:3b:2e:ff:ad:2e:a6:67:57:09:aa:9f:90:b5: 0d:a9:59:0f:45:85:5d:a3:49:51:d0:d9:3c:2a:06:c1:0f:2e: b3:42:9a:1d:fe:e2:51:05:a3:4c:27:15:21:47:8c:4c:88:8b: c0:06:c1:24:3b:45:76:c8:1a:c7:6e:9e:34:f1:e0:37:33:f9: a3:07:fc:9e:b4:01:02:6f:d2:f4:ce:2e:56:c7:66:eb:1e:cd: b6:41:d0:80:eb:44:ea:12:1e:16:15:e8:f6:51:0d:ea:6a:33: 4b:2d:0a:2b:52:46:cd:41:92:fd:e4:3b:ca:8f:52:5e:5a:c7: 9a:50:d3:a6:45:52:ad:57:ae:19:fd:f5:da:9f:82:37:49:a1: 20:fe:ed:67:9f:88:f6:5b:7d:53:b6:fc:16:77:b1:9c:3e:fb: a8:a0:e2:d4:d1:a1:b2:cf:9b:d5:3c:d6:86:32:f9:5e:33:30: 96:9c:c7:64:b5:d0:89:95:a7:ea:ed:93:29:10:7b:eb:0c:5d: 2f:15:c2:63:c1:f9:4a:ac:02:77:1a:84:af:42:fe:dd:e2:16: b0:75:1a:e0:84:a6:06:6a:cb:58:a1:46:6f:a3:75:95:dd:98: 25:bb:9d:a1:60:c3:7b:62:9c:07:ec:78:64:83:1e:d1:ff:35: 54:8c:a0:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3 RUFFRkExNjgwHhcNMjQwNDI2MjMxMjUxWhcNMjQwNTAzMjMxMjUxWjAYMRYwFAYD VQQDEw02NjJjMzRmMy02ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xk6RkWbSxqph0jHQzhbd0spZMRIxpDXv0yvaZDdHYoxPVNrlcFkU6qlApTD ggda1TaNXtKPm4chEZx9YDbGpTaxU5itwjtUXq/7xh5Xz5XeZT40DAycDaudX4oH zOCrYA+fxnIyqyXjJv++JE34eUuhRRLldB0T1slIoRwke5waNjFRCrBAs6XZeTwA fzXl0x4wn0NEQcaqxq4YQMh5E5bsxcO1BLtqbxfRNZhBTABP+ozaaD1yh3rv1500 NYuCJwqE4syKNO62x8ydJZJUcI5OD/AxxamxfSCdu/++CvMIkvVGvXkKBBaypo1e mWl1ovo//p1d4YJVtTkMngNZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK66Bab Hhv58EqtdQZ1nJRYsB1CMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5 OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTTOXj/Dsu/60upmdXCaqfkLUNqVkPRYVdo0lR0Nk8KgbBDy6zQpod /uJRBaNMJxUhR4xMiIvABsEkO0V2yBrHbp408eA3M/mjB/yetAECb9L0zi5Wx2br Hs22QdCA60TqEh4WFej2UQ3qajNLLQorUkbNQZL95DvKj1JeWseaUNOmRVKtV64Z /fXan4I3SaEg/u1nn4j2W31TtvwWd7GcPvuooOLU0aGyz5vVPNaGMvleMzCWnMdk tdCJlafq7ZMpEHvrDF0vFcJjwflKrAJ3GoSvQv7d4hawdRrghKYGastYoUZvo3WV 3Zglu52hYMN7YpwH7Hhkgx7R/zVUjKD7 -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:17 2024 by rpki-client on console-ams.rpki-client.org