$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: 0iOJ3AL+bjWPXAcqqM9ByvzC4yaMIrQodTxkVz6ivyQ= Subject key identifier: 1B:5C:CE:8D:B4:B1:12:3B:1A:C5:05:5C:BA:68:0F:1B:8C:24:FD:0F Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: CC Signing time: Sun 05 May 2024 06:22:02 +0000 Manifest this update: Sun 05 May 2024 06:22:01 +0000 Manifest next update: Sun 12 May 2024 06:22:01 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: TjbaJ/j+h+pFlRtAOjoJ8k1QGelwceM0XlzIeSjBs9M=) 2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: YZA05NbdXQqTTqp/56l0zqv1K93ANRNuBAfVzKzDIX8=) 3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: U4XP+q4YcB/6cfAS39rgiX5WO5DuizysSejbMFJaGr0=) 4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: U3r7gOdI0y7v58kpvuRKxIkw0qomkyuS/Mmv5pVcbGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: May 5 06:22:01 2024 GMT Not After : May 12 06:22:01 2024 GMT Subject: CN=6637258a-e0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:24:98:9f:ba:67:dd:36:d8:d8:d2:19:59: 61:a7:34:86:a4:30:70:cf:48:15:a5:fb:b4:96:8b: 50:48:78:46:29:db:b8:74:cf:31:7e:e9:8d:86:a1: 88:e4:ac:48:7e:c8:4d:93:4a:a1:22:ba:43:28:c8: a3:cb:47:4f:e4:cf:f4:8c:24:7e:3a:3b:d0:1a:29: 1e:70:15:af:ac:79:d8:4c:99:9a:d6:93:c8:5c:ae: 5a:e3:e8:74:58:48:14:ed:c7:3e:d1:96:2c:a8:eb: e9:da:b5:27:c8:ce:69:6d:70:59:47:51:42:bd:5e: 44:1d:df:e2:6a:7c:a3:a8:db:b6:62:77:3d:c3:71: 56:72:f1:aa:95:ce:b8:76:b6:26:3e:07:09:d9:c5: ef:c1:56:f5:1a:4d:8f:d4:c9:d0:42:7a:86:63:04: 10:c8:61:c9:97:d6:cf:ac:ef:14:46:ea:53:d0:96: 06:73:78:44:f5:0c:f0:ff:a9:b5:7e:e4:e0:e3:84: f7:49:ba:f9:1d:4d:e1:de:cf:70:fa:4e:1b:d0:8e: ec:05:ce:38:6a:1d:dd:9f:c6:2c:3b:e9:e8:ef:ff: 7c:fe:70:b9:4c:f5:41:18:80:b3:c3:3a:16:7b:2e: 08:17:62:b4:ab:72:7f:65:79:2a:c6:13:38:03:1d: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:CE:8D:B4:B1:12:3B:1A:C5:05:5C:BA:68:0F:1B:8C:24:FD:0F X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f1:0e:92:cb:c2:8e:e2:ee:87:96:45:5d:18:b4:e8:51:dc: f7:49:ed:47:5c:23:d2:fe:16:c3:67:9f:8f:87:64:be:57:15: c6:f4:9e:af:a8:6b:61:26:19:d3:e9:58:a4:4f:32:e9:ae:3a: b5:97:94:9e:73:2c:f6:d8:7e:ca:ea:6e:75:b0:e0:b3:6d:ef: a8:f2:66:cf:86:92:1c:80:79:24:18:31:ef:32:d7:57:04:07: 37:69:7b:6b:74:0b:ef:7d:03:3e:0d:b4:f4:f6:6a:5c:60:09: 3f:78:b4:b3:f4:fe:d1:20:09:49:ae:69:09:4c:89:d7:39:b9: ed:12:ec:5c:05:91:b7:8c:15:97:15:b4:08:47:78:06:70:68: 1a:9c:29:7a:00:5d:08:1f:8d:1a:a0:7d:97:4c:80:2d:97:ec: 3e:4a:09:61:54:11:5d:ae:37:e9:bc:d1:0f:91:a7:12:da:32: 17:46:91:be:3d:b0:a3:0f:1b:94:15:ac:79:e3:4e:de:d9:e5: ae:0d:8f:0b:0e:b4:c4:a2:1f:64:38:92:f0:83:78:7f:5b:53: 73:54:26:88:95:3e:b1:d4:f6:cf:d9:7b:77:01:83:ad:38:61: d8:db:e9:cf:60:5e:d1:2a:b6:4b:fc:d0:d1:24:e9:f3:84:9b: 53:68:1e:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjQwNTA1MDYyMjAxWhcNMjQwNTEyMDYyMjAxWjAYMRYwFAYD VQQDEw02NjM3MjU4YS1lMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr08kmJ+6Z9022NjSGVlhpzSGpDBwz0gVpfu0lotQSHhGKdu4dM8xfumNhqGI 5KxIfshNk0qhIrpDKMijy0dP5M/0jCR+OjvQGikecBWvrHnYTJma1pPIXK5a4+h0 WEgU7cc+0ZYsqOvp2rUnyM5pbXBZR1FCvV5EHd/ianyjqNu2Ync9w3FWcvGqlc64 drYmPgcJ2cXvwVb1Gk2P1MnQQnqGYwQQyGHJl9bPrO8URupT0JYGc3hE9Qzw/6m1 fuTg44T3Sbr5HU3h3s9w+k4b0I7sBc44ah3dn8YsO+no7/98/nC5TPVBGICzwzoW ey4IF2K0q3J/ZXkqxhM4Ax0VswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtczo20 sRI7GsUFXLpoDxuMJP0PMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm8Q6Sy8KO4u6HlkVdGLToUdz3Se1HXCPS/hbDZ5+Ph2S+VxXG9J6v qGthJhnT6VikTzLprjq1l5Secyz22H7K6m51sOCzbe+o8mbPhpIcgHkkGDHvMtdX BAc3aXtrdAvvfQM+DbT09mpcYAk/eLSz9P7RIAlJrmkJTInXObntEuxcBZG3jBWX FbQIR3gGcGganCl6AF0IH40aoH2XTIAtl+w+SglhVBFdrjfpvNEPkacS2jIXRpG+ PbCjDxuUFax5407e2eWuDY8LDrTEoh9kOJLwg3h/W1NzVCaIlT6x1PbP2Xt3AYOt OGHY2+nPYF7RKrZL/NDRJOnzhJtTaB5U -----END CERTIFICATE-----Generated at Sun May 5 08:21:04 2024 by rpki-client on console-ams.rpki-client.org