$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: ddB6ByCkVjbNVKUVkclQKogViuWI2jiwOSTEJ5NJEfY= Subject key identifier: 8B:78:2B:1C:0C:A8:B4:38:89:7F:9D:29:C9:08:63:97:D6:0F:C7:FB Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: DC Signing time: Sat 27 Apr 2024 05:53:10 +0000 Manifest this update: Sat 27 Apr 2024 05:53:10 +0000 Manifest next update: Sat 04 May 2024 05:53:10 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: KqCKCp3WaqSk/9pxFUO4CTa8h5SVDtU7VW/dcPdXLog=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Apr 27 05:53:10 2024 GMT Not After : May 4 05:53:10 2024 GMT Subject: CN=662c92c6-50cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:7f:b4:86:65:d0:70:96:5f:42:77:29:2a: 39:3b:c7:f0:16:b5:27:c0:1d:18:b8:39:aa:3a:61: 20:2b:ba:ea:98:61:ba:db:a6:9f:db:6e:58:f7:c6: 1e:a3:d6:2e:be:23:fd:81:a9:c4:8f:b4:ce:43:bd: 56:7f:52:8f:66:23:f4:b3:71:39:1f:e3:81:6a:7a: 2d:04:8f:aa:69:d1:55:7f:ad:a5:a2:1e:d3:26:65: 3c:fa:72:f1:a1:b4:3f:d4:e0:a3:0a:0e:75:0e:f7: fb:28:c2:fe:ff:cc:5d:07:84:15:2f:5f:3f:a5:2b: e2:9c:ce:97:b9:d8:9e:e5:82:05:a8:33:f3:6e:8f: a1:0e:51:8b:ba:6e:1b:2a:9b:2f:af:6c:c7:98:be: 7d:ae:c3:70:8d:31:5b:47:6d:12:93:3c:35:87:88: 3b:b3:6a:5b:31:a0:4e:63:13:4f:23:a5:75:c2:7b: c8:7c:cf:df:98:da:ff:ae:64:cb:78:d9:07:07:f9: 04:52:f9:a0:e4:f3:dd:c2:65:80:7c:6c:d4:dc:a5: f5:26:36:e0:21:0c:60:94:81:64:04:23:f3:bc:3a: b2:83:cb:b6:98:a0:ae:79:90:e2:9f:a7:af:47:15: 65:3c:78:65:f3:e6:75:0a:a0:44:09:36:a4:e0:ab: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:78:2B:1C:0C:A8:B4:38:89:7F:9D:29:C9:08:63:97:D6:0F:C7:FB X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:de:3e:cd:6d:31:7c:ae:a9:ba:0e:0f:07:0c:eb:3d:f3:f8: cd:8f:36:cd:d1:54:f8:00:d5:60:81:fa:b8:c4:cf:7e:af:42: a9:65:ca:67:0f:8d:d5:00:be:1b:fe:fb:7c:1c:07:78:ae:fe: 70:d1:59:ff:4c:0e:6c:f7:a8:12:b7:d3:3d:7a:86:19:c5:16: 15:d7:39:88:b9:e4:22:60:a3:ee:7f:91:56:10:e9:ec:ad:54: e7:44:2e:a9:7a:43:28:46:1a:c8:be:19:40:e4:59:fb:f0:58: 10:1c:c2:17:fc:e7:f8:28:66:83:fd:13:65:42:90:89:d7:0c: 17:1c:a2:84:cd:f1:9f:e3:0f:df:99:d7:c9:91:2a:43:4c:49: 68:c2:8b:8d:d4:29:a3:94:c4:5e:b3:4c:39:14:6c:a8:22:67: a3:7b:55:e4:49:e4:29:5e:10:1d:76:6c:46:3c:e8:97:4b:f1: b0:de:65:df:f8:03:31:48:ca:83:6b:cb:02:a3:37:93:30:7e: 58:4b:8e:c6:a2:f4:a1:22:76:d0:70:d0:40:c1:20:4e:76:3a: 65:76:43:f1:18:d3:bb:7a:28:30:6f:0a:8a:44:b3:6b:cc:61: e6:b0:24:75:3c:32:f8:3f:95:a9:f5:d1:e0:b3:4f:9c:3c:a9: d1:73:27:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjQwNDI3MDU1MzEwWhcNMjQwNTA0MDU1MzEwWjAYMRYwFAYD VQQDEw02NjJjOTJjNi01MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlB/tIZl0HCWX0J3KSo5O8fwFrUnwB0YuDmqOmEgK7rqmGG626af225Y98Ye o9YuviP9ganEj7TOQ71Wf1KPZiP0s3E5H+OBanotBI+qadFVf62loh7TJmU8+nLx obQ/1OCjCg51Dvf7KML+/8xdB4QVL18/pSvinM6Xudie5YIFqDPzbo+hDlGLum4b Kpsvr2zHmL59rsNwjTFbR20Skzw1h4g7s2pbMaBOYxNPI6V1wnvIfM/fmNr/rmTL eNkHB/kEUvmg5PPdwmWAfGzU3KX1JjbgIQxglIFkBCPzvDqyg8u2mKCueZDin6ev RxVlPHhl8+Z1CqBECTak4Kv+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt4KxwM qLQ4iX+dKckIY5fWD8f7MB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB3j7NbTF8rqm6Dg8HDOs98/jNjzbN0VT4ANVggfq4xM9+r0KpZcpn D43VAL4b/vt8HAd4rv5w0Vn/TA5s96gSt9M9eoYZxRYV1zmIueQiYKPuf5FWEOns rVTnRC6pekMoRhrIvhlA5Fn78FgQHMIX/Of4KGaD/RNlQpCJ1wwXHKKEzfGf4w/f mdfJkSpDTElowouN1CmjlMRes0w5FGyoImeje1XkSeQpXhAddmxGPOiXS/Gw3mXf +AMxSMqDa8sCozeTMH5YS47GovShInbQcNBAwSBOdjpldkPxGNO7eigwbwqKRLNr zGHmsCR1PDL4P5Wp9dHgs0+cPKnRcyc5 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:40 2024 by rpki-client on console-ams.rpki-client.org