$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: cE43sXHsjf1D+JA8N9/0cUraCV9FnOMnTtfYtz2AW+M= Subject key identifier: 64:8C:B6:3B:50:65:12:30:8D:BB:33:59:05:6A:30:66:3C:02:5F:3D Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 55 Signing time: Wed 15 May 2024 07:57:49 +0000 Manifest this update: Wed 15 May 2024 07:57:49 +0000 Manifest next update: Wed 22 May 2024 07:57:49 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: 8jwrZgwSWTPqs9ehSKjnhXUE+y7CiUfzlUyibED3gDY=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: V1ySiLSwkc7NI48rQG5CjSEDZq1Hxidnyr7XPs25edc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: May 15 07:57:49 2024 GMT Not After : May 22 07:57:49 2024 GMT Subject: CN=66446afd-58de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:cf:93:90:d2:98:43:38:8e:c6:25:2a:6e: 38:2e:6e:39:48:72:8d:a1:28:e8:6f:00:1b:6a:6a: e7:da:11:45:63:fe:7a:d2:06:a7:ce:c1:50:97:81: d4:b0:83:69:71:3f:9b:2d:d3:49:ff:31:db:f6:64: f2:1b:4a:63:28:a9:13:5f:f3:c6:2d:76:85:cb:06: 26:92:af:02:6c:b7:72:f9:58:73:fd:a5:b2:59:5a: 07:a5:42:ea:47:a0:fa:fb:2b:6c:66:19:55:89:a0: ff:d5:b8:d0:1a:c7:f7:62:78:d2:e1:57:d1:ed:1b: 8c:3a:8e:ff:23:74:64:ba:ba:8f:39:b5:73:6b:e6: 30:b2:01:44:4f:d4:c8:19:9f:4e:33:80:f5:2d:b4: e2:bb:59:fb:e2:17:d2:94:a6:7e:a4:f3:0b:47:c5: b6:92:7b:f1:1b:26:e3:a2:f5:59:26:1a:73:eb:7d: 30:a7:a1:f1:42:46:10:52:ce:22:d9:46:87:8b:36: 9a:36:86:af:61:c6:37:fc:fa:ef:9c:18:be:46:2c: 6d:db:f6:af:42:44:1b:18:97:31:79:88:5b:39:ce: 60:76:01:5a:95:67:6d:6a:cb:52:dc:0b:7e:60:6a: a7:6a:de:09:4f:0a:db:e5:fc:96:47:dd:d9:05:36: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:B6:3B:50:65:12:30:8D:BB:33:59:05:6A:30:66:3C:02:5F:3D X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:62:d2:d9:c0:b3:e7:7d:cc:14:c8:5d:57:8a:fe:79:45: 81:c9:7c:aa:83:ce:9e:d1:f4:09:53:ca:36:4f:f7:f3:f2:33: 96:a0:18:ae:93:1c:f9:83:8d:37:92:d4:cd:9f:3f:74:17:10: 90:e7:dd:d3:9d:37:9b:aa:fd:a3:ef:e1:36:a3:5c:ae:68:0b: 94:f7:09:68:ab:b4:89:3d:2f:61:1b:75:d8:11:ce:f9:5e:32: ab:2e:08:61:f1:59:73:e1:b5:41:fb:c9:5d:63:65:40:d9:c2: 41:81:f2:52:cb:91:b7:18:3b:1c:0d:23:b6:ca:e4:4f:6c:6e: 8d:66:65:64:ec:4f:8e:b3:2f:e8:44:7a:66:2e:7f:ac:2a:03: 7f:35:28:86:a0:14:9b:41:27:29:53:b5:6f:13:08:27:de:54: f2:13:a5:ad:45:71:38:99:50:0b:f0:3d:6d:52:5b:23:c3:a6: fa:f4:0c:2b:d1:a4:87:12:7a:7c:46:a8:7a:cf:65:92:13:5c: 49:ed:67:27:7c:94:be:26:38:51:7e:71:42:b8:f2:a8:3d:5b: 9b:60:b2:05:3d:3c:cb:17:27:76:2d:b6:18:fb:69:4d:a3:4d: cd:3f:bf:82:3f:46:27:a7:cb:23:ab:7b:32:46:56:05:3c:0f: f5:e0:a8:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Mjk2QTExMC8GA1UEBRMoRjE5MzYwNDY5NTE0NkVCRTFEQkY3M0ZERTBFQjY2MjFG RDlGQjhGOTAeFw0yNDA1MTUwNzU3NDlaFw0yNDA1MjIwNzU3NDlaMBgxFjAUBgNV BAMTDTY2NDQ2YWZkLTU4ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv8c+TkNKYQziOxiUqbjgubjlIco2hKOhvABtqaufaEUVj/nrSBqfOwVCXgdSw g2lxP5st00n/Mdv2ZPIbSmMoqRNf88YtdoXLBiaSrwJst3L5WHP9pbJZWgelQupH oPr7K2xmGVWJoP/VuNAax/dieNLhV9HtG4w6jv8jdGS6uo85tXNr5jCyAURP1MgZ n04zgPUttOK7WfviF9KUpn6k8wtHxbaSe/EbJuOi9VkmGnPrfTCnofFCRhBSziLZ RoeLNpo2hq9hxjf8+u+cGL5GLG3b9q9CRBsYlzF5iFs5zmB2AVqVZ21qy1LcC35g aqdq3glPCtvl/JZH3dkFNnglAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZIy2O1Bl EjCNuzNZBWowZjwCXz0wHwYDVR0jBBgwFoAU8ZNgRpUUbr4dv3P94OtmIf2fuPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyOTZBL0M1OTY1OUIwOTM2 QjExRUU5RTRDMzg4NUM0RjlBRTAyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFpOZ1JwVVVicjRkdjNQOTRPdG1JZjJmdVBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy OTZBL0M1OTY1OUIwOTM2QjExRUU5RTRDMzg4NUM0RjlBRTAyLzhaTmdScFVVYnI0 ZHYzUDk0T3RtSWYyZnVQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAiYtLZwLPnfcwUyF1Xiv55RYHJfKqDzp7R9AlTyjZP9/PyM5agGK6T HPmDjTeS1M2fP3QXEJDn3dOdN5uq/aPv4TajXK5oC5T3CWirtIk9L2EbddgRzvle MqsuCGHxWXPhtUH7yV1jZUDZwkGB8lLLkbcYOxwNI7bK5E9sbo1mZWTsT46zL+hE emYuf6wqA381KIagFJtBJylTtW8TCCfeVPITpa1FcTiZUAvwPW1SWyPDpvr0DCvR pIcSenxGqHrPZZITXEntZyd8lL4mOFF+cUK48qg9W5tgsgU9PMsXJ3Ytthj7aU2j Tc0/v4I/RienyyOrezJGVgU8D/XgqHc= -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org