$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: hQ46K9/ZgmCMi/VnmClJCBdwXprV7ip3y72XF+fiMaQ= Subject key identifier: 95:F3:27:E9:69:FA:D9:50:36:50:51:CA:82:4D:E1:3A:AD:F2:7F:3D Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 32 Signing time: Wed 15 May 2024 08:29:55 +0000 Manifest this update: Wed 15 May 2024 08:29:54 +0000 Manifest next update: Wed 22 May 2024 08:29:54 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: 2mkt//oHYx5p/ZJhhK7oRCgpsU3ZJ5H03SSbzaLMz3Y=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: SeLt6mFkgIu65Se5hFS13pIWeuhuP6xILDqDA8hOIaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: May 15 08:29:54 2024 GMT Not After : May 22 08:29:54 2024 GMT Subject: CN=66447282-40be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:9e:58:d3:4e:7d:86:a6:1e:1a:a4:ce:0a: d9:c2:d8:f3:d7:ea:1a:29:cd:fc:da:99:2e:be:aa: 00:48:30:ae:82:13:25:82:d1:8b:d7:d9:73:ad:74: bf:0f:39:de:7b:95:ba:51:e6:dd:d5:46:be:9c:a1: 6d:0d:65:53:f4:d9:1e:b0:50:3a:f7:4c:fb:13:d3: 87:b0:9c:af:ac:58:53:43:b5:c3:e9:22:d5:af:10: f6:38:d9:73:06:56:41:15:32:cd:85:e5:4b:4e:13: df:9b:68:ce:7d:3e:b4:e8:1b:97:7e:4c:b3:67:a6: 01:ae:9f:2f:0f:a7:c5:7e:5e:a0:38:7c:5c:dd:03: c7:93:02:fb:eb:36:54:b1:c6:ac:d3:81:78:8f:ea: 25:87:bc:83:91:c3:12:37:be:f7:f7:54:2d:4c:47: e2:53:bd:97:31:2d:6c:52:83:7e:b1:be:7d:25:3e: c6:e8:d3:35:20:a6:c5:f9:22:ec:c6:07:70:b6:d1: 8e:45:10:28:a2:40:33:99:05:6b:33:8c:9f:a4:3a: 5a:8f:d5:64:4a:a2:de:6a:e1:7b:88:c2:74:ae:d9: 97:2d:72:4c:d3:39:6f:75:78:0b:a2:67:e0:73:a0: e8:92:6e:b4:6e:e6:18:18:b6:9b:01:28:10:29:8b: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:27:E9:69:FA:D9:50:36:50:51:CA:82:4D:E1:3A:AD:F2:7F:3D X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:57:ae:e0:34:f0:52:5c:cd:17:d8:12:35:28:93:d8:02:fc: 65:cc:98:1a:68:e4:54:25:01:43:30:aa:b4:a9:62:b5:1f:15: 13:5a:49:d6:8f:db:8e:1c:77:a4:ba:e2:8f:94:05:4d:ac:de: c3:86:e0:6c:ab:73:38:29:18:38:b7:88:c1:18:bb:36:5c:c8: c1:34:f1:f2:f7:04:21:19:a3:32:c4:b1:db:66:2f:22:e5:15: ce:26:5e:b9:91:79:6b:14:9a:d5:9e:52:2d:99:67:5d:e1:e8: cb:e8:e1:9a:70:05:fa:39:e5:39:96:65:37:d1:49:6a:2b:a7: ac:24:5c:5c:cf:57:f1:3c:af:8b:23:f8:7d:db:4b:e5:19:83: 31:cc:62:99:db:7d:ef:50:05:a2:e8:f8:b3:f5:09:b6:2f:cb: ae:a6:92:ef:8b:5a:2b:87:92:9c:c3:5c:20:3d:d3:27:f2:f0: 9e:9a:a9:bf:2b:23:0a:36:7b:6e:98:e4:46:95:d3:a1:4f:8f: 3a:12:34:a2:7a:1f:82:59:38:a3:26:44:9b:6b:5d:b8:68:75: 26:6d:c9:b8:7b:7a:da:bf:c8:9a:6b:48:f4:93:07:49:f4:95: b2:30:e0:72:6d:d0:a8:42:40:1d:e1:b5:76:d2:3d:95:dd:6a: bc:bb:45:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjAxODExMC8GA1UEBRMoQ0Y2QjU1MEEyRjBDNjQyQkRDRDREOEJFQTUwMzg0OUIy RDQ1MEY5ODAeFw0yNDA1MTUwODI5NTRaFw0yNDA1MjIwODI5NTRaMBgxFjAUBgNV BAMTDTY2NDQ3MjgyLTQwYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2FZ5Y0059hqYeGqTOCtnC2PPX6hopzfzamS6+qgBIMK6CEyWC0YvX2XOtdL8P Od57lbpR5t3VRr6coW0NZVP02R6wUDr3TPsT04ewnK+sWFNDtcPpItWvEPY42XMG VkEVMs2F5UtOE9+baM59PrToG5d+TLNnpgGuny8Pp8V+XqA4fFzdA8eTAvvrNlSx xqzTgXiP6iWHvIORwxI3vvf3VC1MR+JTvZcxLWxSg36xvn0lPsbo0zUgpsX5IuzG B3C20Y5FECiiQDOZBWszjJ+kOlqP1WRKot5q4XuIwnSu2ZctckzTOW91eAuiZ+Bz oOiSbrRu5hgYtpsBKBApi/wvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlfMn6Wn6 2VA2UFHKgk3hOq3yfz0wHwYDVR0jBBgwFoAUz2tVCi8MZCvc1Ni+pQOEmy1FD5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMDE4LzM5QjQ3RjRBQzVG NjExRUVCRTBCNzk2MEM0RjlBRTAyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejJ0VkNpOE1aQ3ZjMU5pLXBRT0VteTFGRDVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MDE4LzM5QjQ3RjRBQzVGNjExRUVCRTBCNzk2MEM0RjlBRTAyL3oydFZDaThNWkN2 YzFOaS1wUU9FbXkxRkQ1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdXruA08FJczRfYEjUok9gC/GXMmBpo5FQlAUMwqrSpYrUfFRNaSdaP 244cd6S64o+UBU2s3sOG4GyrczgpGDi3iMEYuzZcyME08fL3BCEZozLEsdtmLyLl Fc4mXrmReWsUmtWeUi2ZZ13h6Mvo4ZpwBfo55TmWZTfRSWorp6wkXFzPV/E8r4sj +H3bS+UZgzHMYpnbfe9QBaLo+LP1CbYvy66mku+LWiuHkpzDXCA90yfy8J6aqb8r Iwo2e26Y5EaV06FPjzoSNKJ6H4JZOKMmRJtrXbhodSZtybh7etq/yJprSPSTB0n0 lbIw4HJt0KhCQB3htXbSPZXdary7Rac= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org