$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: x0Vw+Pp1EeTqqqd9P8ns1pjnn8giWLMruQnUF2Kk+mQ= Subject key identifier: 50:06:F3:6D:08:EE:20:2A:B3:8B:A6:44:05:CA:07:91:FA:EC:4B:05 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0D0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0D08 Signing time: Sat 04 May 2024 18:54:00 +0000 Manifest this update: Sat 04 May 2024 18:54:00 +0000 Manifest next update: Sat 11 May 2024 18:54:00 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: 5TzNAH2N7CNUN/RA684cuFs7Okt7Z5AhPJazG3NJRyE=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: xnN0CT8s/dW/Qwxi/mFt4AV3bS33AK/f1C8b6IGc9s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3341 (0xd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: May 4 18:54:00 2024 GMT Not After : May 11 18:54:00 2024 GMT Subject: CN=66368448-6093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:97:d7:81:77:6e:22:c0:25:2f:92:4a:c7: 3b:e9:65:24:09:7b:99:6d:e8:f0:14:71:17:82:8b: dd:95:d8:21:37:25:e3:e1:19:9d:6e:11:c3:10:c2: 89:c7:97:da:23:2e:bd:f9:af:42:4b:c8:a7:70:91: aa:cb:82:9b:67:74:14:f2:c5:5a:9a:66:d0:b4:5a: 7c:b5:8f:c6:f9:b2:34:fd:a7:fa:50:24:c4:fb:d1: 6d:ed:dd:95:1c:08:fe:fa:5e:7a:dd:b2:bd:0b:da: 34:09:c2:50:f3:f3:f4:90:7f:c2:94:3d:13:f6:bd: c1:96:43:d3:8f:0c:fc:89:8c:63:d0:5d:b6:75:b2: f8:c6:ea:ca:95:01:be:b4:d4:c1:6c:c8:30:eb:15: d4:ca:1c:2c:e0:2e:dd:c9:86:90:47:c7:e0:96:10: 23:e8:4b:0b:01:5c:9d:d5:cd:01:50:42:86:31:a9: 8f:2e:90:40:ee:8f:1c:c5:80:27:db:00:3c:fb:37: fb:aa:ca:2c:b0:23:7a:92:51:2d:45:72:3b:59:ce: 85:b0:fd:9c:a7:05:33:05:77:a5:21:e5:8f:a3:ee: 4d:20:a4:96:bc:7b:d4:f7:5f:bf:c8:95:ab:25:f5: 31:90:e8:cb:ad:3c:89:16:f9:f0:41:6a:00:ca:f4: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:06:F3:6D:08:EE:20:2A:B3:8B:A6:44:05:CA:07:91:FA:EC:4B:05 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d1:03:45:74:32:d2:d1:d1:6e:d0:ac:b0:37:0c:c2:58:d6: 0c:97:73:41:22:29:be:b1:bd:f8:4e:f4:7f:e5:94:5f:e7:20: c4:15:b5:98:75:59:f9:ac:19:73:7e:7b:e9:a3:d0:5d:23:92: 30:fd:da:41:de:0f:1b:c2:3e:8e:80:9d:ce:87:42:59:5a:c2: eb:d7:a7:5c:d7:16:aa:d8:cd:3a:19:3b:1e:cf:8a:09:2e:b9: 22:5e:90:01:92:ef:c7:af:23:df:6c:9c:97:0b:bf:35:6c:bb: b4:3a:bd:92:fe:a5:f5:91:16:d5:eb:cd:3c:75:ee:34:b3:3a: 68:c8:b9:88:58:ba:a5:b6:51:40:00:f0:7a:81:22:ad:a5:88: ca:86:e4:d2:f3:aa:af:b3:77:95:6f:42:39:c5:6f:88:ce:dc: f2:61:26:74:1a:70:8a:7a:2c:9c:5a:fb:81:f1:8f:a2:88:b8: 34:95:e9:70:a7:f1:85:17:1b:66:b9:9f:fa:63:a4:d7:02:95: 36:b8:58:3b:a1:80:c5:22:04:b0:dc:d8:c7:fd:a2:9a:2c:03: d5:2b:3b:ae:55:36:b1:61:4c:42:97:8c:2c:0b:c6:8d:a0:a5: 30:69:61:43:e2:a3:74:f4:74:de:f0:d0:64:21:3d:bf:ff:36: bf:d1:e4:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjQwNTA0MTg1NDAwWhcNMjQwNTExMTg1NDAwWjAYMRYwFAYD VQQDEw02NjM2ODQ0OC02MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTuX14F3biLAJS+SSsc76WUkCXuZbejwFHEXgovdldghNyXj4RmdbhHDEMKJ x5faIy69+a9CS8incJGqy4KbZ3QU8sVammbQtFp8tY/G+bI0/af6UCTE+9Ft7d2V HAj++l563bK9C9o0CcJQ8/P0kH/ClD0T9r3BlkPTjwz8iYxj0F22dbL4xurKlQG+ tNTBbMgw6xXUyhws4C7dyYaQR8fglhAj6EsLAVyd1c0BUEKGMamPLpBA7o8cxYAn 2wA8+zf7qsossCN6klEtRXI7Wc6FsP2cpwUzBXelIeWPo+5NIKSWvHvU91+/yJWr JfUxkOjLrTyJFvnwQWoAyvQo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAG820I 7iAqs4umRAXKB5H67EsFMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD0QNFdDLS0dFu0KywNwzCWNYMl3NBIim+sb34TvR/5ZRf5yDEFbWY dVn5rBlzfnvpo9BdI5Iw/dpB3g8bwj6OgJ3Oh0JZWsLr16dc1xaq2M06GTsez4oJ LrkiXpABku/HryPfbJyXC781bLu0Or2S/qX1kRbV6808de40szpoyLmIWLqltlFA APB6gSKtpYjKhuTS86qvs3eVb0I5xW+IztzyYSZ0GnCKeiycWvuB8Y+iiLg0lelw p/GFFxtmuZ/6Y6TXApU2uFg7oYDFIgSw3NjH/aKaLAPVKzuuVTaxYUxCl4wsC8aN oKUwaWFD4qN09HTe8NBkIT2//za/0eTU -----END CERTIFICATE-----Generated at Sat May 4 19:58:38 2024 by rpki-client on console-ams.rpki-client.org