$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft File: Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json) Hash identifier: j3FaWhlSIbXhhENmIEVUFdyfFuouhhZFdth3MTSr+nY= Subject key identifier: 7C:3F:73:E5:63:C1:8B:EE:DF:A0:CA:41:1C:1B:01:CD:D5:E8:BA:CD Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 0832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft Manifest number: 082A Signing time: Sat 04 May 2024 21:57:42 +0000 Manifest this update: Sat 04 May 2024 21:57:41 +0000 Manifest next update: Sat 11 May 2024 21:57:41 +0000 Files and hashes: 1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: fdKACkQEFvVWBaQnlu9P1mfYZa8OG9iodbamTQJ13XY=) 2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: qDzGWb5iAzXTrquFfas7IFpCBV3IzuaiszdzanC0KF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: May 4 21:57:41 2024 GMT Not After : May 11 21:57:41 2024 GMT Subject: CN=6636af55-e1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:a2:45:ed:78:e5:72:15:f3:c4:d7:e5:e8: a4:01:2e:51:1c:72:68:ab:2d:f8:56:f5:10:b6:95: 08:e8:cf:96:57:57:64:fc:75:33:4c:3f:c9:1b:e3: fa:54:da:e1:16:05:9c:ee:10:64:67:21:73:59:12: 03:06:c8:20:57:1a:a1:00:db:86:ed:6e:e2:ee:a3: 98:c8:25:c9:0f:e5:af:c2:f3:f8:94:02:c4:80:6d: 8e:7e:46:92:f6:a2:c4:a0:ce:14:b7:8d:f0:eb:43: 41:67:11:1a:76:38:c1:28:b6:00:e6:e8:2b:d2:a1: bb:ce:41:f5:7d:15:62:9a:92:c9:08:af:52:1e:c4: 79:29:24:a5:68:9d:2a:97:b4:c9:d6:cc:ee:4f:61: f1:40:97:d9:6e:2d:4d:9a:68:6d:c6:d8:54:49:f9: 79:5b:8e:74:db:b4:8e:f1:ab:a6:2f:e7:ae:65:2b: 99:06:5d:fb:3f:78:d9:d8:39:6f:72:84:fb:2d:09: ee:7d:3f:92:64:5a:a7:c0:15:17:ef:09:63:21:0a: 6f:a7:d0:41:08:f3:e4:bd:59:ae:ce:59:5d:a1:6f: 9b:a8:37:a4:15:c6:8e:dc:f0:8e:d1:db:84:fc:5f: 4c:b1:45:8f:2a:43:c5:cc:a1:68:d0:af:0e:6b:61: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:73:E5:63:C1:8B:EE:DF:A0:CA:41:1C:1B:01:CD:D5:E8:BA:CD X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:45:01:99:a0:0a:13:90:66:37:3e:2e:84:a6:85:1a:c5: d6:e6:8d:60:65:24:f1:5f:2b:f7:49:00:42:7f:51:7c:65:c2: be:2d:2d:fc:33:96:78:b8:a5:61:06:07:6b:cc:ff:b9:8c:8b: c4:40:2d:5c:29:e8:99:39:1f:4b:49:3d:a3:e7:cd:07:bb:76: da:07:87:60:f8:de:13:f1:eb:00:ee:ed:9f:ac:7a:65:ef:ca: d6:f8:b8:22:dc:9a:bb:5f:26:07:d6:38:ce:ff:3b:28:d7:92: 85:18:bd:15:e7:35:30:68:19:1a:e2:a2:7f:43:d1:78:2e:af: 7b:90:de:02:ef:cf:9b:ac:33:2d:68:d2:81:4b:03:2d:8c:49: 0b:c8:f0:1a:2c:e9:fb:f6:07:6e:b8:74:db:39:c8:22:d4:38: 06:dd:2a:74:70:da:a6:52:82:df:f7:d3:52:e6:10:d2:d8:d7: ac:bf:dc:6b:14:ea:86:52:99:eb:3c:90:a3:3e:65:f1:b5:73: c8:32:ff:a6:25:dc:f6:2d:d7:16:bd:bf:d8:6f:5a:a6:ff:43: 4d:81:02:d0:95:78:1a:d6:45:27:fb:f4:7d:68:b1:eb:d2:87: db:07:26:d6:30:86:96:0f:c5:5b:e7:79:d6:2b:40:74:fd:f0: 18:14:f2:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjQwNTA0MjE1NzQxWhcNMjQwNTExMjE1NzQxWjAYMRYwFAYD VQQDEw02NjM2YWY1NS1lMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAaiRe145XIV88TX5eikAS5RHHJoqy34VvUQtpUI6M+WV1dk/HUzTD/JG+P6 VNrhFgWc7hBkZyFzWRIDBsggVxqhANuG7W7i7qOYyCXJD+WvwvP4lALEgG2OfkaS 9qLEoM4Ut43w60NBZxEadjjBKLYA5ugr0qG7zkH1fRVimpLJCK9SHsR5KSSlaJ0q l7TJ1szuT2HxQJfZbi1NmmhtxthUSfl5W45027SO8aumL+euZSuZBl37P3jZ2Dlv coT7LQnufT+SZFqnwBUX7wljIQpvp9BBCPPkvVmuzlldoW+bqDekFcaO3PCO0duE /F9MsUWPKkPFzKFo0K8Oa2EkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw/c+Vj wYvu36DKQRwbAc3V6LrNMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4 amw4SEowa0FYSVFWSlMyNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHGEUBmaAKE5BmNz4uhKaFGsXW5o1gZSTxXyv3SQBCf1F8ZcK+LS38 M5Z4uKVhBgdrzP+5jIvEQC1cKeiZOR9LST2j580Hu3baB4dg+N4T8esA7u2frHpl 78rW+Lgi3Jq7XyYH1jjO/zso15KFGL0V5zUwaBka4qJ/Q9F4Lq97kN4C78+brDMt aNKBSwMtjEkLyPAaLOn79gduuHTbOcgi1DgG3Sp0cNqmUoLf99NS5hDS2Nesv9xr FOqGUpnrPJCjPmXxtXPIMv+mJdz2LdcWvb/Yb1qm/0NNgQLQlXga1kUn+/R9aLHr 0ofbBybWMIaWD8Vb53nWK0B0/fAYFPJA -----END CERTIFICATE-----Generated at Sun May 5 00:12:19 2024 by rpki-client on console-fra.rpki-client.org