$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: XEEPt8JvTpHYSe9S8RXTtPknIh1qi67BQEEwjSq6cpI= Subject key identifier: C3:86:FD:F5:25:B0:1A:90:3D:30:BD:45:E3:BB:83:B4:1B:ED:D0:C4 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0491 Signing time: Sat 01 Jun 2024 02:34:57 +0000 Manifest this update: Sat 01 Jun 2024 02:34:57 +0000 Manifest next update: Sat 08 Jun 2024 02:34:57 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: bknIuw7y7tLVRtpJ9H8njvg4h4F0HgTeLtKm/VUEgGQ=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: y5d/MB7V3ZsodcPGCmEEvKKpo4wB2e5f62HRyhb73ZU=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: MyHmiwwY24R3d4+DAEzEEtmCaqIzuusdXM6O63ht/lY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Jun 1 02:34:57 2024 GMT Not After : Jun 8 02:34:57 2024 GMT Subject: CN=665a88d1-f931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:a4:d6:1b:9b:96:3e:1d:2c:3c:4a:27:b3: e1:ff:c8:7c:36:a3:25:10:1a:2f:e7:d5:3c:fd:a5: 1e:83:25:c4:83:09:bd:9a:2f:4c:33:55:10:c1:a9: 13:4e:b6:dc:99:ac:ca:2b:95:50:7c:47:f1:b4:9e: d6:05:26:8d:f4:8c:5e:b1:6f:91:82:8e:ac:4b:97: 2b:84:19:84:3b:05:cb:d1:67:94:f7:88:c7:36:4b: 1d:86:bf:2f:9f:64:92:5a:37:ed:36:6a:c0:cc:3b: 68:1d:31:5f:8a:9d:e6:e2:44:0d:90:d5:43:83:b2: 2d:c9:26:49:2e:37:b4:2b:cb:5e:34:b1:4d:08:62: 29:2e:fa:d1:15:f6:92:d8:3d:5a:ba:a4:c7:ad:8e: d2:23:ca:f7:1b:e0:97:57:d8:bd:3d:13:39:17:88: 35:0d:4a:ee:de:29:3b:dd:17:b4:66:57:92:b6:62: b5:d8:89:be:f4:14:ce:e6:16:db:b9:b5:22:71:49: 54:38:7c:45:7e:be:05:fb:06:26:2c:f0:92:48:56: 65:69:35:54:58:d5:31:cb:1f:6d:46:28:ec:f6:a1: 78:f6:a7:39:b1:bd:ca:00:ab:36:d4:fb:ab:e8:30: 70:03:8f:57:c6:b4:23:2a:8c:ce:93:7d:d9:f9:32: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:86:FD:F5:25:B0:1A:90:3D:30:BD:45:E3:BB:83:B4:1B:ED:D0:C4 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:48:13:04:37:61:a3:34:69:75:10:27:fb:cc:ed:72:4f:d6: 41:2b:21:1a:e1:4f:48:8b:4d:0a:5d:84:80:38:56:79:4f:b9: 5f:eb:24:6a:3f:21:16:36:90:46:4c:63:d5:75:29:a1:e7:60: 99:54:e8:84:ec:db:1f:2a:e7:74:4b:08:f8:c0:4a:af:19:d7: a3:b6:98:1f:30:e1:1b:3c:75:87:cc:0b:27:8f:ae:e1:a1:03: 06:d2:7a:b6:65:df:8c:7f:2a:fb:7c:fe:65:9f:90:6e:73:4e: 45:56:97:e1:40:b4:20:67:0d:ec:31:93:55:7e:24:78:bd:04: ef:74:6c:5a:b1:58:ea:79:d2:0c:32:8a:8f:99:92:c3:1d:89: 7b:7d:3b:82:59:91:77:be:b2:7a:9f:1c:42:87:84:7a:18:b1: 0c:f0:1f:82:38:ca:00:5a:bf:2f:8e:9f:e2:6e:47:3d:ae:68: cb:0b:66:fa:61:4b:63:68:47:da:79:eb:46:e9:b8:3d:ba:42: 18:5a:ff:00:c1:ad:3d:ff:c5:9d:33:df:52:c0:04:35:9c:b6: 8f:0c:2f:a1:43:d1:e3:a8:d9:82:62:0d:8c:ac:b1:72:fb:15: 5b:85:27:d6:96:63:0d:01:2b:53:40:14:fb:36:b0:af:64:12: d0:6d:f2:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjQwNjAxMDIzNDU3WhcNMjQwNjA4MDIzNDU3WjAYMRYwFAYD VQQDEw02NjVhODhkMS1mOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOKk1hublj4dLDxKJ7Ph/8h8NqMlEBov59U8/aUegyXEgwm9mi9MM1UQwakT TrbcmazKK5VQfEfxtJ7WBSaN9IxesW+Rgo6sS5crhBmEOwXL0WeU94jHNksdhr8v n2SSWjftNmrAzDtoHTFfip3m4kQNkNVDg7ItySZJLje0K8teNLFNCGIpLvrRFfaS 2D1auqTHrY7SI8r3G+CXV9i9PRM5F4g1DUru3ik73Re0ZleStmK12Im+9BTO5hbb ubUicUlUOHxFfr4F+wYmLPCSSFZlaTVUWNUxyx9tRijs9qF49qc5sb3KAKs21Pur 6DBwA49XxrQjKozOk33Z+TJ03wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOG/fUl sBqQPTC9ReO7g7Qb7dDEMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTSBMEN2GjNGl1ECf7zO1yT9ZBKyEa4U9Ii00KXYSAOFZ5T7lf6yRq PyEWNpBGTGPVdSmh52CZVOiE7NsfKud0Swj4wEqvGdejtpgfMOEbPHWHzAsnj67h oQMG0nq2Zd+Mfyr7fP5ln5Buc05FVpfhQLQgZw3sMZNVfiR4vQTvdGxasVjqedIM MoqPmZLDHYl7fTuCWZF3vrJ6nxxCh4R6GLEM8B+COMoAWr8vjp/ibkc9rmjLC2b6 YUtjaEfaeetG6bg9ukIYWv8Awa09/8WdM99SwAQ1nLaPDC+hQ9HjqNmCYg2MrLFy +xVbhSfWlmMNAStTQBT7NrCvZBLQbfJ2 -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:29 2024 by rpki-client on console-ams.rpki-client.org