$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json) Hash identifier: AQWcS6wWujXAhKG+99qzM+CqAljCj5KtGF+OIjKTHdU= Subject key identifier: 4D:DD:F4:48:C4:49:18:45:3F:96:FF:97:91:2F:79:7E:5A:4D:A1:2A Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Certificate serial: 13E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft Manifest number: 13CE Signing time: Tue 30 Apr 2024 17:40:58 +0000 Manifest this update: Tue 30 Apr 2024 17:40:57 +0000 Manifest next update: Tue 07 May 2024 17:40:57 +0000 Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: l51m53AfEuLiWYoOgFdIVkScPI2aLRHpm8a21fp/EAQ=) 2: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 8Chv2g/XLV0WVFsAUAJn4qrWtRsDgyBb3YJ5fOKl4mQ=) 3: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: RM/kuR3kUH6xoHDop24kz3tOy9hyEEyEmUSznVZDH9E=) 4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: 2DoJS0/sOSyXuvmbvAdYDPKa0WROftMt4MUWCdwfjwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5097 (0x13e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92 Validity Not Before: Apr 30 17:40:57 2024 GMT Not After : May 7 17:40:57 2024 GMT Subject: CN=66312d29-f21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:78:76:9f:47:b9:99:19:5b:e9:d7:bc:22: d3:60:cf:e0:6e:16:b1:f2:74:2a:55:90:24:44:4a: da:75:34:eb:62:41:e6:25:d7:a3:94:61:66:89:89: 67:c3:87:2f:c2:fe:5d:0d:f6:f8:e7:d9:0c:fd:9d: af:be:b4:e2:cf:bc:b2:65:76:4c:e4:48:17:4a:85: c0:d9:c0:08:a5:9b:f8:e8:22:41:9c:fe:4c:db:52: 72:c7:b9:90:8f:58:15:ef:d5:6d:80:13:8e:8d:b6: 0e:f6:f0:9f:7c:6b:d7:06:f9:c4:5d:d2:cf:41:67: 01:b4:7a:19:fb:29:a0:64:15:d4:6c:55:b1:05:77: 69:c1:7c:aa:1c:ff:8f:3c:eb:07:f0:84:55:27:da: 4d:a6:56:14:54:cc:f6:18:47:20:3a:43:ff:a4:69: 9d:a0:b2:7e:79:d6:cf:fd:ab:5d:04:2c:00:b0:3c: a0:0b:5e:44:11:78:d3:90:c6:97:1a:6f:d2:5e:d9: 07:6e:13:c5:96:46:19:9b:87:0f:5b:a0:e7:9f:c9: ae:6b:4a:50:d0:09:b8:1c:0c:97:f5:6c:0f:1f:a8: 0f:f9:8c:b7:37:9b:ba:f2:8c:dd:92:1b:87:24:6b: be:e7:cb:3c:21:ef:86:96:20:77:02:dc:fc:14:55: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:F4:48:C4:49:18:45:3F:96:FF:97:91:2F:79:7E:5A:4D:A1:2A X509v3 Authority Key Identifier: keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:96:72:14:6a:fa:a6:26:06:e0:dd:37:3e:c8:93:d4:ff:f3: 57:ae:f6:8d:d3:af:0d:98:c4:65:48:f7:53:ed:34:fa:97:21: 62:bc:42:c7:8e:41:11:b3:65:d8:5d:c5:94:99:c0:80:44:33: 72:88:50:36:07:ae:3d:3a:fa:67:80:20:18:f8:c5:07:5c:fe: c7:75:44:0f:86:d5:82:83:12:93:1d:f2:f4:36:2d:07:79:92: 17:f4:6e:40:22:f8:1d:cd:d3:73:61:f7:f0:51:ca:bb:ab:3b: 2c:55:e4:c9:60:a6:62:f0:47:8c:d1:71:1e:3f:39:fc:6d:a7: 49:87:79:60:1d:f0:8c:30:b2:4a:3e:df:a0:c7:05:1a:cc:a8: b0:c6:71:39:3b:da:7f:92:44:23:ab:e1:1a:8c:60:15:a6:0d: 6b:c0:a6:a2:ec:de:80:95:8b:24:9f:4c:b1:f8:b5:27:44:b5: 4b:90:0f:2c:cb:15:8a:70:5d:24:f9:f9:c7:24:5e:b1:0a:da: d8:73:d5:4b:59:c7:d3:db:db:3f:f9:dd:f9:af:e6:d8:ac:e3: 38:09:19:87:00:b1:c9:b8:db:7f:a1:d8:39:a8:00:8e:77:4c: ec:d7:4f:b6:76:f9:b8:e4:7f:48:d0:a3:07:cb:ba:a5:c0:26: 35:69:9b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF NDUyRDRCOTIwHhcNMjQwNDMwMTc0MDU3WhcNMjQwNTA3MTc0MDU3WjAYMRYwFAYD VQQDEw02NjMxMmQyOS1mMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK94dp9HuZkZW+nXvCLTYM/gbhax8nQqVZAkREradTTrYkHmJdejlGFmiYln w4cvwv5dDfb459kM/Z2vvrTiz7yyZXZM5EgXSoXA2cAIpZv46CJBnP5M21Jyx7mQ j1gV79VtgBOOjbYO9vCffGvXBvnEXdLPQWcBtHoZ+ymgZBXUbFWxBXdpwXyqHP+P POsH8IRVJ9pNplYUVMz2GEcgOkP/pGmdoLJ+edbP/atdBCwAsDygC15EEXjTkMaX Gm/SXtkHbhPFlkYZm4cPW6Dnn8mua0pQ0Am4HAyX9WwPH6gP+Yy3N5u68ozdkhuH JGu+58s8Ie+GliB3Atz8FFU5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3d9EjE SRhFP5b/l5EveX5aTaEqMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1 RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4 NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8lnIUavqmJgbg3Tc+yJPU//NXrvaN068NmMRlSPdT7TT6lyFivELH jkERs2XYXcWUmcCARDNyiFA2B649OvpngCAY+MUHXP7HdUQPhtWCgxKTHfL0Ni0H eZIX9G5AIvgdzdNzYffwUcq7qzssVeTJYKZi8EeM0XEePzn8badJh3lgHfCMMLJK Pt+gxwUazKiwxnE5O9p/kkQjq+EajGAVpg1rwKai7N6AlYskn0yx+LUnRLVLkA8s yxWKcF0k+fnHJF6xCtrYc9VLWcfT29s/+d35r+bYrOM4CRmHALHJuNt/odg5qACO d0zs10+2dvm45H9I0KMHy7qlwCY1aZvd -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:06 2024 by rpki-client on console-ams.rpki-client.org