$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: cJFrGBfEMkssDOSNgbMe40N7h1bAAo+JEVYnUHIQeho= Subject key identifier: A2:10:91:4B:B1:F8:57:5A:5D:1B:77:62:D3:44:56:C3:70:E2:34:D6 Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: DF Signing time: Mon 29 Apr 2024 05:48:35 +0000 Manifest this update: Mon 29 Apr 2024 05:48:34 +0000 Manifest next update: Mon 06 May 2024 05:48:34 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: nNMEb4iPVcHQcb4mUlfVb+BZbZpHG1HZEU7qZRy6gcw=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: Qh9Evt44K52q8IGRlGhsv9jAT7uZAcr8cL3AUfSoMAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: Apr 29 05:48:34 2024 GMT Not After : May 6 05:48:34 2024 GMT Subject: CN=662f34b2-feab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:c0:7d:2b:bd:45:e0:72:03:4a:65:b4:e7: 44:b1:e4:3a:6a:82:6c:e5:d4:f6:e6:f6:ce:8b:2c: 6f:67:0f:c3:9c:c6:55:3f:6f:b2:36:64:fc:01:55: 9f:c4:3b:2b:b9:17:fb:00:9f:9c:50:c1:dd:91:08: 9b:d4:c3:8f:1b:15:fc:dc:27:5c:9b:fa:6f:53:e0: aa:6c:8c:93:15:14:47:a9:7f:0d:5a:0d:00:67:7f: 56:5c:01:47:49:b4:a5:c9:4a:8c:2c:d5:1e:62:ce: 0c:9f:16:2f:85:ab:54:37:65:a6:c1:de:04:20:fc: 44:eb:6b:87:e9:1f:b8:29:4e:45:e6:f5:c0:53:62: c5:26:df:6f:1d:42:56:3d:61:44:aa:2e:c1:3d:40: 89:d7:92:20:a2:b2:62:da:7e:75:9c:14:79:f4:86: 1c:01:f9:c2:7d:8b:8d:82:b2:81:90:20:b9:2a:49: c3:f3:12:86:c1:83:6b:8e:28:3d:18:d6:48:fe:eb: 6e:be:59:25:5a:0a:32:74:46:83:6c:37:e4:ab:8a: fd:12:c4:20:3d:bf:f1:2a:fe:9d:7c:9e:1f:a8:7d: 29:a8:cd:4a:24:12:1d:5c:76:99:f0:90:9a:a8:34: 34:ca:ee:6f:81:c1:e0:17:e7:cd:bc:2d:0e:60:21: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:91:4B:B1:F8:57:5A:5D:1B:77:62:D3:44:56:C3:70:E2:34:D6 X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:83:ec:bf:84:cb:08:4a:59:15:bd:59:ee:70:c8:fd:ce:a9: d2:20:de:dc:ce:99:98:52:9a:f3:12:64:e8:a7:cb:cc:d1:2d: 14:84:75:80:b3:d8:74:03:cd:3b:27:2a:2a:b7:bc:06:ff:bb: 64:13:0f:b4:6d:fb:35:be:73:28:5b:9d:31:b8:ff:5d:b0:69: e1:2c:6e:a8:8b:a2:14:3b:43:c6:d5:72:15:ef:73:76:41:dd: 7a:18:7e:55:71:7e:32:9c:f1:19:39:5a:67:1f:14:98:88:44: 18:9e:e1:4a:14:8c:f3:2e:ae:a7:9b:a0:7c:68:24:12:6c:eb: 92:01:ca:8e:37:64:55:c4:cd:08:b9:85:1b:c9:e2:1a:3d:c5: a1:0e:90:83:22:36:d3:98:08:13:3d:1a:c8:64:85:c5:c2:91: e3:86:a6:40:06:8d:7b:a3:b7:f8:06:57:c2:dd:6f:6a:5d:ef: 37:a3:d8:73:a2:35:b3:f0:84:c7:6c:4c:f8:03:88:a2:8c:42: f0:77:4e:44:b1:fb:84:13:03:05:97:05:c1:56:0c:b9:d5:a7: 2d:3c:58:0e:30:bf:c4:ef:41:dd:25:11:d6:92:21:4b:94:9c: c4:29:b1:14:3a:10:8e:6f:bc:3b:ee:da:d6:80:1d:87:87:aa: 6d:07:f8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjQwNDI5MDU0ODM0WhcNMjQwNTA2MDU0ODM0WjAYMRYwFAYD VQQDEw02NjJmMzRiMi1mZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHXAfSu9ReByA0pltOdEseQ6aoJs5dT25vbOiyxvZw/DnMZVP2+yNmT8AVWf xDsruRf7AJ+cUMHdkQib1MOPGxX83Cdcm/pvU+CqbIyTFRRHqX8NWg0AZ39WXAFH SbSlyUqMLNUeYs4MnxYvhatUN2Wmwd4EIPxE62uH6R+4KU5F5vXAU2LFJt9vHUJW PWFEqi7BPUCJ15IgorJi2n51nBR59IYcAfnCfYuNgrKBkCC5KknD8xKGwYNrjig9 GNZI/utuvlklWgoydEaDbDfkq4r9EsQgPb/xKv6dfJ4fqH0pqM1KJBIdXHaZ8JCa qDQ0yu5vgcHgF+fNvC0OYCGQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIQkUux +FdaXRt3YtNEVsNw4jTWMB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqg+y/hMsISlkVvVnucMj9zqnSIN7czpmYUprzEmTop8vM0S0UhHWA s9h0A807Jyoqt7wG/7tkEw+0bfs1vnMoW50xuP9dsGnhLG6oi6IUO0PG1XIV73N2 Qd16GH5VcX4ynPEZOVpnHxSYiEQYnuFKFIzzLq6nm6B8aCQSbOuSAcqON2RVxM0I uYUbyeIaPcWhDpCDIjbTmAgTPRrIZIXFwpHjhqZABo17o7f4BlfC3W9qXe83o9hz ojWz8ITHbEz4A4iijELwd05EsfuEEwMFlwXBVgy51actPFgOML/E70HdJRHWkiFL lJzEKbEUOhCOb7w77trWgB2Hh6ptB/gJ -----END CERTIFICATE-----Generated at Mon Apr 29 06:21:35 2024 by rpki-client on console-fra.rpki-client.org