$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft File: z8AnvWbwidNpy1leBgJeLd0Z44I.mft (raw, json) Hash identifier: KG1MZQMdj9W9h/Ptsnl267I9/65LPjiGtO5Lx6ZRTv8= Subject key identifier: 8A:0E:E6:C3:2C:6A:68:FC:93:E8:E9:37:12:01:C5:6E:99:7E:7E:BF Authority key identifier: CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82 Certificate issuer: /CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft Manifest number: 01DF Signing time: Tue 07 May 2024 04:25:49 +0000 Manifest this update: Tue 07 May 2024 04:25:49 +0000 Manifest next update: Tue 14 May 2024 04:25:49 +0000 Files and hashes: 1: z8AnvWbwidNpy1leBgJeLd0Z44I.crl (hash: qq6VHXF85zG6QeJw+KguRImLwuOloh1OA2Km0xIKBK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.crl rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382 Validity Not Before: May 7 04:25:49 2024 GMT Not After : May 14 04:25:49 2024 GMT Subject: CN=6639ad4d-ff96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:bd:75:53:76:fd:68:e0:8f:17:ba:f4:5b: 33:da:67:f9:6b:aa:d1:39:2e:ab:1f:77:cf:4f:9c: b6:60:0d:8d:45:54:75:ca:73:f4:eb:be:57:97:74: db:da:aa:41:15:c1:0e:24:e7:74:da:77:e3:dd:2c: d9:15:0f:5a:0b:47:9d:a8:df:54:68:55:bc:d7:8b: 2d:05:6d:76:14:06:e6:02:a1:4a:1a:37:80:5e:bc: a5:1f:da:a7:67:70:f0:68:d4:bb:7c:87:03:7f:0c: c2:8a:87:f7:b4:95:be:4c:7b:4b:12:bb:57:f7:65: bc:ef:f9:8e:ff:2a:7a:bd:8d:bf:72:6f:ad:1b:ea: dc:64:42:79:98:25:8c:7c:46:72:2a:ea:53:c5:d5: d1:51:4b:3d:ff:13:c4:cc:ba:af:d1:b4:e4:0d:de: 94:ca:19:6e:54:5b:b0:97:84:fd:ca:d5:8f:d1:b9: bb:ba:bf:d5:30:48:37:b5:ca:ba:d7:c5:68:ec:32: 31:87:4c:1f:cf:9a:a8:67:11:bc:1a:f2:c1:66:6a: 66:24:57:55:06:d7:da:52:b4:63:28:b3:92:5b:c7: 6a:55:e4:1c:2f:b1:d6:b3:7a:6a:31:58:49:bd:0a: 19:a7:21:2d:39:ae:0e:93:83:4a:6e:ed:55:a7:7b: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0E:E6:C3:2C:6A:68:FC:93:E8:E9:37:12:01:C5:6E:99:7E:7E:BF X509v3 Authority Key Identifier: keyid:CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fc:c6:40:a7:bb:e3:1e:3f:4f:c8:2a:d4:bb:8a:20:57:a7: 3a:6b:7e:49:db:69:5e:08:26:0d:1f:03:1e:42:96:7f:76:aa: 45:04:c7:81:8b:dd:b8:0e:6c:45:39:68:b4:29:50:6e:06:63: d8:03:b5:c7:f7:f8:82:b6:f0:40:7d:b8:76:22:2b:ce:2e:04: c9:6a:72:75:00:0d:63:28:27:39:96:ed:e5:9d:d0:c0:cd:72: 32:fc:43:87:56:48:e2:78:7c:4a:fb:0f:d8:ab:9d:c2:b6:98: 76:bd:58:ad:56:c9:21:d5:e8:05:29:fe:fe:c4:09:a7:32:97: 6b:b1:1d:68:66:4c:95:98:2e:dd:7f:55:0f:ea:83:d3:c1:e9: e4:aa:75:37:ed:4c:ce:c2:78:a1:9d:86:12:8d:39:a3:26:5b: 0d:3e:2b:67:73:43:8a:f5:0c:66:a7:82:62:07:3d:54:16:0b: 4c:26:fc:ed:a2:53:70:94:9c:e6:07:ec:05:41:15:1a:d9:b9: e6:38:63:fb:45:9d:de:1e:d6:84:ee:2f:69:c8:72:90:fe:54: df:14:d7:02:4d:85:ca:de:ff:ed:55:31:15:21:c8:5f:72:f0: c8:b7:b8:94:16:d7:7d:ef:65:2f:de:dd:df:da:4d:4b:1a:9c: fa:f0:fc:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKENGQzAyN0JENjZGMDg5RDM2OUNCNTk1RTA2MDI1RTJE REQxOUUzODIwHhcNMjQwNTA3MDQyNTQ5WhcNMjQwNTE0MDQyNTQ5WjAYMRYwFAYD VQQDEw02NjM5YWQ0ZC1mZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Eu9dVN2/Wjgjxe69Fsz2mf5a6rROS6rH3fPT5y2YA2NRVR1ynP0675Xl3Tb 2qpBFcEOJOd02nfj3SzZFQ9aC0edqN9UaFW814stBW12FAbmAqFKGjeAXrylH9qn Z3DwaNS7fIcDfwzCiof3tJW+THtLErtX92W87/mO/yp6vY2/cm+tG+rcZEJ5mCWM fEZyKupTxdXRUUs9/xPEzLqv0bTkDd6UyhluVFuwl4T9ytWP0bm7ur/VMEg3tcq6 18Vo7DIxh0wfz5qoZxG8GvLBZmpmJFdVBtfaUrRjKLOSW8dqVeQcL7HWs3pqMVhJ vQoZpyEtOa4Ok4NKbu1Vp3vg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoO5sMs amj8k+jpNxIBxW6Zfn6/MB8GA1UdIwQYMBaAFM/AJ71m8InTactZXgYCXi3dGeOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9EQkVFNDMxODA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi96OEFudldid2lkTnB5MWxlQmdKZUxkMFo0 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o4QW52V2J3aWROcHkxbGVCZ0plTGQwWjQ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9EQkVFNDMxODA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi96OEFudldid2lk TnB5MWxlQmdKZUxkMFo0NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/MZAp7vjHj9PyCrUu4ogV6c6a35J22leCCYNHwMeQpZ/dqpFBMeB i924DmxFOWi0KVBuBmPYA7XH9/iCtvBAfbh2IivOLgTJanJ1AA1jKCc5lu3lndDA zXIy/EOHVkjieHxK+w/Yq53Ctph2vVitVskh1egFKf7+xAmnMpdrsR1oZkyVmC7d f1UP6oPTwenkqnU37UzOwnihnYYSjTmjJlsNPitnc0OK9Qxmp4JiBz1UFgtMJvzt olNwlJzmB+wFQRUa2bnmOGP7RZ3eHtaE7i9pyHKQ/lTfFNcCTYXK3v/tVTEVIchf cvDIt7iUFtd972Uv3t3f2k1LGpz68PyP -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org