$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft File: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json) Hash identifier: 0URT0gaU0FAdxEHxUHzcLAqKy27bhOZpIL4Xp2H9dfU= Subject key identifier: 17:B5:FD:06:43:8C:3B:01:7D:F2:D1:99:3E:CA:E7:91:3F:17:56:45 Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft Manifest number: 06C2 Signing time: Thu 02 May 2024 23:11:27 +0000 Manifest this update: Thu 02 May 2024 23:11:27 +0000 Manifest next update: Thu 09 May 2024 23:11:27 +0000 Files and hashes: 1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: 9tyC0/QgUcn2Cqu21+/+t5pEJkr5kvgHV39AxEETm2o=) 2: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: 6nxKafYdj1IxkqAddkuXLlfnawEoLq0CjaH/xzITLAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4 Validity Not Before: May 2 23:11:27 2024 GMT Not After : May 9 23:11:27 2024 GMT Subject: CN=66341d9f-c0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:6d:3e:2b:76:f7:5b:e0:89:df:b9:07:40: c6:a8:13:c1:cd:a0:82:55:79:a3:0f:02:5e:92:9e: 33:4e:5f:57:9e:0e:f1:8c:13:24:03:63:e4:a0:d7: 05:dd:de:70:50:a0:df:d1:13:e4:37:34:f0:a8:0e: 27:b3:5c:c1:37:f7:bb:62:c8:d9:60:0b:e6:ad:7e: 22:be:2f:9d:e7:d4:f4:6f:8a:cf:89:58:2d:9b:6c: db:cc:ad:9e:9d:b5:14:09:c6:d9:b3:63:56:23:8b: 96:d1:02:7a:52:09:95:f7:a7:e6:a7:b1:e6:ab:2e: c8:a5:1e:9b:14:81:17:f3:02:32:95:49:0b:e0:38: b0:24:62:f2:e5:93:9c:18:b9:1d:7d:1f:05:40:85: 3d:61:ad:f7:44:e4:26:c5:37:e8:2d:f1:f5:4b:5e: 01:6a:3a:87:41:f5:7e:b5:52:08:cf:b7:c7:17:ed: b3:85:ad:34:33:44:0b:56:f1:13:b6:f6:8b:07:08: da:4b:71:26:e6:97:21:58:45:58:1b:12:d4:ce:e0: 62:7f:cf:a1:de:0f:cd:99:9a:fc:f6:6e:c2:56:0b: 90:7e:f4:35:19:5c:e4:6f:99:ae:51:b5:01:9a:ff: 39:f3:96:ef:25:cc:5d:54:88:2f:df:41:07:9e:00: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:FD:06:43:8C:3B:01:7D:F2:D1:99:3E:CA:E7:91:3F:17:56:45 X509v3 Authority Key Identifier: keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:47:86:f3:6d:e1:ef:50:22:0d:18:a4:f7:bb:79:8f:56:cf: c8:0f:16:07:70:cb:0c:36:61:46:39:63:df:6c:67:f5:12:d8: 50:3e:89:66:cf:8e:f3:93:00:77:94:68:e3:0b:17:1b:31:78: b9:ab:fc:13:14:b9:4a:ec:55:12:77:8d:06:d3:e9:0c:84:a0: 0f:30:50:04:77:bb:6e:e9:8d:55:9f:ad:48:ca:cf:26:26:84: 48:14:b8:f2:ce:82:90:36:e4:bc:ea:98:42:7b:67:4a:3b:f1: 0f:de:ea:6c:d8:89:e1:53:14:3f:b9:90:c2:d8:ce:23:32:5c: 23:51:49:29:0c:01:c0:79:74:4f:64:77:18:3c:5e:10:89:8a: b4:0e:78:a0:36:58:f2:a9:bd:e4:f1:1d:05:37:6b:59:f7:22: b3:0d:8e:9e:9c:d5:66:33:32:97:e9:cb:a0:bc:ac:fe:e3:ef: 46:3a:03:5c:6a:ba:53:3e:9b:71:20:f0:de:a7:d3:b8:bf:03: 2d:7d:55:26:a3:b0:d5:0f:b4:03:a3:8a:bb:95:0e:c4:37:36: 9e:0d:75:76:82:e9:ab:2d:e0:aa:79:ea:a1:94:04:e6:2b:ee: 5b:18:e5:73:f0:bf:ac:72:c4:f4:2d:25:24:5b:2e:bf:94:5b: b5:8b:ec:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEOTYxMTAvBgNVBAUTKENEOEJCRTcwNkNDRDlCNTUzMkNGM0VCMUQ1RkJCRDdE M0UzRUJFQTQwHhcNMjQwNTAyMjMxMTI3WhcNMjQwNTA5MjMxMTI3WjAYMRYwFAYD VQQDEw02NjM0MWQ5Zi1jMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN1tPit291vgid+5B0DGqBPBzaCCVXmjDwJekp4zTl9Xng7xjBMkA2PkoNcF 3d5wUKDf0RPkNzTwqA4ns1zBN/e7YsjZYAvmrX4ivi+d59T0b4rPiVgtm2zbzK2e nbUUCcbZs2NWI4uW0QJ6UgmV96fmp7Hmqy7IpR6bFIEX8wIylUkL4DiwJGLy5ZOc GLkdfR8FQIU9Ya33ROQmxTfoLfH1S14BajqHQfV+tVIIz7fHF+2zha00M0QLVvET tvaLBwjaS3Em5pchWEVYGxLUzuBif8+h3g/NmZr89m7CVguQfvQ1GVzkb5muUbUB mv8585bvJcxdVIgv30EHngAL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe1/QZD jDsBffLRmT7K55E/F1ZFMB8GA1UdIwQYMBaAFM2LvnBszZtVMs8+sdX7vX0+Pr6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQ5Ni83NTY2RjUyNjBE REIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0xVXl6ejZ4MWZ1OWZUNC12 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pZdS1jR3pObTFVeXp6NngxZnU5ZlQ0LXZxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQ5Ni83NTY2RjUyNjBEREIxMUVCQUY3QjEwN0NDNEY5QUUwMi96WXUtY0d6Tm0x VXl6ejZ4MWZ1OWZUNC12cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHR4bzbeHvUCINGKT3u3mPVs/IDxYHcMsMNmFGOWPfbGf1EthQPolm z47zkwB3lGjjCxcbMXi5q/wTFLlK7FUSd40G0+kMhKAPMFAEd7tu6Y1Vn61Iys8m JoRIFLjyzoKQNuS86phCe2dKO/EP3ups2InhUxQ/uZDC2M4jMlwjUUkpDAHAeXRP ZHcYPF4QiYq0DnigNljyqb3k8R0FN2tZ9yKzDY6enNVmMzKX6cugvKz+4+9GOgNc arpTPptxIPDep9O4vwMtfVUmo7DVD7QDo4q7lQ7ENzaeDXV2gumrLeCqeeqhlATm K+5bGOVz8L+scsT0LSUkWy6/lFu1i+wq -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org