$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: gl5uR2X/+67OBAVOWyDda70ULSFqskk1uyJisAdWr3c= Subject key identifier: 22:43:56:1C:99:12:4E:B3:EA:C8:41:0D:D6:69:5E:FB:50:41:53:D1 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 024C Signing time: Wed 01 May 2024 04:14:46 +0000 Manifest this update: Wed 01 May 2024 04:14:46 +0000 Manifest next update: Wed 08 May 2024 04:14:46 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: 0HrvL3xO5vSWE6jY4wY5aV3wACQadOpWa7ZC0wccAhE=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: FFZhO7+zoHshR/RjOvXtom/0MyVEmhHyk48EA2oY0UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: May 1 04:14:46 2024 GMT Not After : May 8 04:14:46 2024 GMT Subject: CN=6631c1b6-e502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:10:da:13:18:8c:fc:f0:c9:fd:9d:cd:85: 33:dd:52:a7:45:5b:f6:16:b3:09:62:5c:cc:50:a1: 64:68:a8:3c:94:10:4d:46:36:f7:13:a5:98:c0:38: 5d:83:29:51:5f:87:6c:9f:7c:ee:de:55:a4:b3:df: c4:db:93:87:11:39:02:cb:97:88:5c:74:77:bd:95: f3:52:fa:ef:c2:1e:bb:5a:dc:86:d3:54:0c:71:fe: 70:0b:f5:e5:f3:c9:e8:8f:03:41:e0:5d:03:a6:2a: 6e:5a:fd:35:bb:a4:b9:8b:1e:90:3b:17:c7:93:05: 3a:bd:86:48:d4:e3:fe:4b:11:d3:32:26:0c:9f:40: e3:38:5d:d9:37:78:bf:5e:9b:4d:31:19:31:f6:73: c8:49:63:80:4c:e3:72:5e:a7:ec:95:6c:f3:1e:ac: 10:89:4d:a4:06:27:94:bd:30:72:1d:1e:6d:e0:76: 1c:f3:3e:d4:a7:0f:2e:8a:55:e6:ac:f7:07:71:7e: fa:13:13:78:8d:12:37:77:f3:fd:bb:c8:bc:b2:8a: be:93:7c:62:de:ac:5a:ce:d4:ef:fc:d7:84:44:2b: a7:2f:e4:9a:45:fd:b8:f4:36:0b:b3:a0:f2:b3:7e: 3c:2b:70:6e:ed:c0:1b:c4:91:db:bc:ed:19:95:e1: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:43:56:1C:99:12:4E:B3:EA:C8:41:0D:D6:69:5E:FB:50:41:53:D1 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9c:34:3b:1f:9f:6e:b4:74:43:66:d6:34:0a:6d:a3:50:d9: e0:46:d6:ad:e3:14:ca:87:3a:4c:f3:59:a4:08:4d:ac:9b:41: 25:e9:25:c6:55:d8:1f:37:93:00:91:38:cd:c2:82:b6:fc:a3: b2:0a:e6:43:3c:52:52:de:d9:25:b7:d3:57:c5:b3:a1:97:85: ae:10:a9:9f:7d:48:74:bf:b2:43:df:e6:79:6d:17:ca:f8:c2: e0:e7:3f:b7:a3:b8:06:b1:7c:67:29:74:d8:a3:e6:bc:a7:aa: d2:a4:9c:cb:60:49:b4:2a:8d:2d:ff:5e:05:d1:c4:3c:34:fb: c5:f1:a6:1a:8b:eb:f0:ae:88:d3:25:27:a8:d7:f6:62:c0:8d: 87:08:1d:64:b6:86:5a:ac:37:0a:3d:26:d5:37:09:c1:59:4b: 84:76:bc:ac:64:5f:7c:1a:f8:71:d1:61:e4:e6:8d:8a:17:8d: ba:e6:e6:34:30:94:f3:36:68:9e:76:2e:e8:33:54:d4:f4:0f: ef:f5:ec:2b:6a:a8:d5:2e:64:57:fd:95:97:68:2e:5b:ff:3e: b4:63:87:15:63:ed:a3:e1:d2:87:9a:a1:09:64:19:87:91:4b: 13:a1:9c:9e:ee:18:34:ab:57:d4:0e:ca:55:10:8c:a6:f4:34: 96:15:15:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjQwNTAxMDQxNDQ2WhcNMjQwNTA4MDQxNDQ2WjAYMRYwFAYD VQQDEw02NjMxYzFiNi1lNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUIQ2hMYjPzwyf2dzYUz3VKnRVv2FrMJYlzMUKFkaKg8lBBNRjb3E6WYwDhd gylRX4dsn3zu3lWks9/E25OHETkCy5eIXHR3vZXzUvrvwh67WtyG01QMcf5wC/Xl 88nojwNB4F0DpipuWv01u6S5ix6QOxfHkwU6vYZI1OP+SxHTMiYMn0DjOF3ZN3i/ XptNMRkx9nPISWOATONyXqfslWzzHqwQiU2kBieUvTByHR5t4HYc8z7Upw8uilXm rPcHcX76ExN4jRI3d/P9u8i8soq+k3xi3qxaztTv/NeERCunL+SaRf249DYLs6Dy s348K3Bu7cAbxJHbvO0ZleG8swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJDVhyZ Ek6z6shBDdZpXvtQQVPRMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnnDQ7H59utHRDZtY0Cm2jUNngRtat4xTKhzpM81mkCE2sm0El6SXG VdgfN5MAkTjNwoK2/KOyCuZDPFJS3tklt9NXxbOhl4WuEKmffUh0v7JD3+Z5bRfK +MLg5z+3o7gGsXxnKXTYo+a8p6rSpJzLYEm0Ko0t/14F0cQ8NPvF8aYai+vwrojT JSeo1/ZiwI2HCB1ktoZarDcKPSbVNwnBWUuEdrysZF98Gvhx0WHk5o2KF4265uY0 MJTzNmiedi7oM1TU9A/v9ewraqjVLmRX/ZWXaC5b/z60Y4cVY+2j4dKHmqEJZBmH kUsToZye7hg0q1fUDspVEIym9DSWFRUX -----END CERTIFICATE-----Generated at Wed May 1 04:49:20 2024 by rpki-client on console-ams.rpki-client.org