$ rpki-client -vvf rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft File: ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft (raw, json) Hash identifier: lVlnEVa0i2yGBRhXbBFRiCrC/Br2RtpPX9bqmDwc9Tc= Subject key identifier: F3:62:74:63:02:5A:1A:AF:B6:92:CA:0F:48:AF:5F:08:17:0A:AA:52 Authority key identifier: 65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 Certificate issuer: /CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft Manifest number: 0251 Signing time: Sat 27 Apr 2024 03:48:53 +0000 Manifest this update: Sat 27 Apr 2024 03:48:53 +0000 Manifest next update: Sat 04 May 2024 03:48:53 +0000 Files and hashes: 1: ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl (hash: NkAuXa/WAId7OfIuKyS7y67ojoihwukISVC+A/uVrEI=) 2: 8DD1A3B8CD0611EC9D520C1DC4F9AE02.roa (hash: t6zPiOXrYpQBTTfoOaOWofrWUQ0zj6TBf6ZlrFtkWA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913791D/serialNumber=655B65624636C80034153733535B4AA8B3A001B7 Validity Not Before: Apr 27 03:48:53 2024 GMT Not After : May 4 03:48:53 2024 GMT Subject: CN=662c75a5-796a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:58:57:33:77:07:17:b7:9e:13:cd:71:45: ad:29:9a:62:03:66:d4:9a:11:0c:7d:92:d5:88:d3: fb:a3:2c:e5:91:39:64:e7:52:32:e3:34:3c:9e:be: fd:d4:28:05:59:ff:64:be:8b:59:0f:ab:39:3d:85: e2:f5:f8:12:92:e0:d2:42:5d:72:87:80:64:23:55: f4:aa:92:e7:a5:06:ed:01:56:85:8b:a4:ca:99:43: e0:71:91:cf:8b:97:da:cf:5b:9c:15:ef:e4:e9:82: 5e:3c:2b:3d:d6:60:2c:fe:53:5b:06:fc:15:31:af: a9:8d:79:2b:8d:a8:04:2b:bf:d0:2a:38:15:25:ed: 76:62:ec:26:e1:ac:33:c7:ef:26:af:57:ac:3c:cc: 2f:4b:77:24:a8:02:45:46:42:ba:20:35:a0:36:a0: cf:1b:6f:c0:15:81:13:0c:d3:e2:78:d2:21:b5:6c: ee:13:79:5b:c6:c7:77:92:b1:da:f1:0d:44:ce:ff: 1a:b8:9f:e0:2f:7c:34:96:8e:19:9a:3d:59:90:c3: d0:8e:83:ef:30:45:db:fe:42:97:d5:6d:f0:fe:1e: 08:61:7a:68:32:7f:99:52:22:22:d2:48:0f:e0:ec: 93:4f:54:43:00:34:0e:93:53:64:e5:79:a8:e7:cb: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:62:74:63:02:5A:1A:AF:B6:92:CA:0F:48:AF:5F:08:17:0A:AA:52 X509v3 Authority Key Identifier: keyid:65:5B:65:62:46:36:C8:00:34:15:37:33:53:5B:4A:A8:B3:A0:01:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVtlYkY2yAA0FTczU1tKqLOgAbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913791D/C6B612B2CD0211EC86E2756FC4F9AE02/ZVtlYkY2yAA0FTczU1tKqLOgAbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:87:2d:28:80:7d:a1:03:21:73:f8:3a:df:53:e0:65:5f:05: 80:07:31:a4:cd:d7:0d:7f:e7:33:81:fd:72:16:b3:35:8d:d1: e0:9e:72:ba:5f:53:81:6d:a9:d7:d2:ea:8e:09:24:59:a3:03: 1e:48:c9:51:af:85:82:ff:4d:53:92:40:4f:48:48:d3:89:ff: 59:66:5b:ee:69:bd:83:aa:9b:fb:9c:e3:cc:20:56:12:0e:71: 71:0b:6e:f0:bf:be:0f:aa:75:f9:fc:7f:07:f4:dd:89:be:50: f7:4f:e4:6c:85:89:9d:ea:c9:71:b8:1d:a9:bf:5c:bf:4b:cb: 9a:a8:54:13:5a:d9:05:fc:88:08:53:96:36:e2:57:84:17:a7: 77:3e:02:e6:6d:bc:85:1f:10:6f:ef:b9:01:d4:18:61:ae:1f: cd:ca:15:b2:87:ee:bf:9f:d2:d0:1c:12:7a:a1:09:c1:03:e1: 46:7a:09:d9:79:8a:e6:fd:29:17:c2:22:6a:87:9d:ad:bf:55: 21:ca:90:02:7e:98:64:92:52:e8:2e:04:7e:2e:6b:d5:6e:5a: c9:d5:29:4f:70:42:47:60:f3:76:b1:7c:db:24:af:bc:46:97: 19:b1:49:68:6c:62:64:1b:c1:2a:f3:68:91:95:37:2e:88:9f: 50:94:2f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5MUQxMTAvBgNVBAUTKDY1NUI2NTYyNDYzNkM4MDAzNDE1MzczMzUzNUI0QUE4 QjNBMDAxQjcwHhcNMjQwNDI3MDM0ODUzWhcNMjQwNTA0MDM0ODUzWjAYMRYwFAYD VQQDEw02NjJjNzVhNS03OTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/hYVzN3Bxe3nhPNcUWtKZpiA2bUmhEMfZLViNP7oyzlkTlk51Iy4zQ8nr79 1CgFWf9kvotZD6s5PYXi9fgSkuDSQl1yh4BkI1X0qpLnpQbtAVaFi6TKmUPgcZHP i5faz1ucFe/k6YJePCs91mAs/lNbBvwVMa+pjXkrjagEK7/QKjgVJe12Yuwm4awz x+8mr1esPMwvS3ckqAJFRkK6IDWgNqDPG2/AFYETDNPieNIhtWzuE3lbxsd3krHa 8Q1Ezv8auJ/gL3w0lo4Zmj1ZkMPQjoPvMEXb/kKX1W3w/h4IYXpoMn+ZUiIi0kgP 4OyTT1RDADQOk1Nk5Xmo58takQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNidGMC WhqvtpLKD0ivXwgXCqpSMB8GA1UdIwQYMBaAFGVbZWJGNsgANBU3M1NbSqizoAG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxRC9DNkI2MTJCMkNE MDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlBQTBGVGN6VTF0S3FMT2dB YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWdGxZa1kyeUFBMEZUY3pVMXRLcUxPZ0FiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzkxRC9DNkI2MTJCMkNEMDIxMUVDODZFMjc1NkZDNEY5QUUwMi9aVnRsWWtZMnlB QTBGVGN6VTF0S3FMT2dBYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhhy0ogH2hAyFz+DrfU+BlXwWABzGkzdcNf+czgf1yFrM1jdHgnnK6 X1OBbanX0uqOCSRZowMeSMlRr4WC/01TkkBPSEjTif9ZZlvuab2Dqpv7nOPMIFYS DnFxC27wv74PqnX5/H8H9N2JvlD3T+RshYmd6slxuB2pv1y/S8uaqFQTWtkF/IgI U5Y24leEF6d3PgLmbbyFHxBv77kB1Bhhrh/NyhWyh+6/n9LQHBJ6oQnBA+FGegnZ eYrm/SkXwiJqh52tv1UhypACfphkklLoLgR+LmvVblrJ1SlPcEJHYPN2sXzbJK+8 RpcZsUlobGJkG8Eq82iRlTcuiJ9QlC8l -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:41 2024 by rpki-client on console-ams.rpki-client.org