$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json) Hash identifier: lTxNx0Gf4cQQfXgRaJZL1Too1NrGiOEkW6SFVgOEVtU= Subject key identifier: 22:96:D8:43:BD:97:CE:01:29:89:6E:39:46:71:71:21:53:16:D3:7F Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft Manifest number: 05C7 Signing time: Sun 05 May 2024 00:16:53 +0000 Manifest this update: Sun 05 May 2024 00:16:52 +0000 Manifest next update: Sun 12 May 2024 00:16:52 +0000 Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: +Gqx4MnDK01uP94IVwkW1EtcarMfBM1JGzUj+yl0oe0=) 2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: UQj9/7zikz/RpoGQoQno/3YWc0mX82l8PfM+EwDDark=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Validity Not Before: May 5 00:16:52 2024 GMT Not After : May 12 00:16:52 2024 GMT Subject: CN=6636cff5-be5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:45:62:88:9a:89:bc:f2:b6:4e:e9:28:d0: 3f:af:84:a3:27:5b:7d:1c:33:08:8c:0b:5c:51:96: 67:73:f4:bf:a2:04:df:77:5c:5a:74:1c:78:69:3c: 56:86:bd:3d:5c:4c:89:cd:71:f5:2d:44:d0:8f:43: 34:71:6d:a0:ef:83:df:c3:94:b2:82:35:66:b5:b8: 7a:b1:a4:c8:8a:46:c0:b5:0c:5a:14:ff:b5:2e:b4: 2a:e8:32:9d:13:59:5c:87:60:cc:90:24:d0:ef:11: 94:e8:37:25:62:ee:77:3d:08:e0:26:2e:ca:07:90: 65:b0:54:ba:19:5e:dc:3a:73:f2:4d:ff:c8:6a:8d: 75:91:1e:72:3a:92:46:7c:f1:43:02:08:00:ba:6c: 2e:97:31:e9:3d:ae:83:0e:a0:0f:67:c5:ba:2a:06: 43:62:83:14:3b:44:1b:80:ca:22:7e:87:05:20:bc: f1:0a:3a:83:52:cb:45:04:e3:a7:ed:b6:b7:80:b9: d7:b9:6b:20:c4:0f:77:6e:6c:95:42:48:52:49:b8: 97:7a:fb:4c:50:16:07:d6:e0:fe:1a:4a:0d:c2:9f: c8:57:6d:d5:24:cc:c4:41:18:15:9b:21:8b:7d:95: f0:ea:4f:3c:fe:cb:53:9a:db:35:fc:da:bf:4b:9b: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:D8:43:BD:97:CE:01:29:89:6E:39:46:71:71:21:53:16:D3:7F X509v3 Authority Key Identifier: keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:94:65:71:f3:6d:0c:5a:54:f5:0f:38:d1:02:a6:b2:f0:3f: 89:04:47:72:f8:18:67:5b:6d:7b:28:19:bd:7f:bb:fd:4f:b2: 2d:2c:43:1d:3a:55:d7:f7:9d:e5:5e:f5:25:96:21:bb:be:8c: d8:ac:fe:db:2f:5b:ed:d7:6a:c0:74:0f:d8:15:54:38:a5:a0: 5e:25:a5:ba:cd:b1:8c:66:b1:51:09:77:05:df:cc:18:e9:db: e6:aa:81:2d:8e:fe:83:eb:a8:60:87:4d:29:fa:66:f3:ed:aa: 6c:33:f4:dd:4f:ac:7f:0a:d2:de:67:5e:57:48:6f:6c:bb:92: 76:c6:50:23:28:b9:3f:e2:1e:80:ca:df:47:a9:0d:21:4b:52: c7:59:14:a7:a8:e9:e7:92:e2:9c:7a:f9:7d:e6:37:fb:72:a3: cc:dd:b8:f2:27:88:da:94:68:6a:8d:be:bd:49:77:be:94:10: 13:84:f2:85:7a:76:64:02:6c:57:71:95:eb:87:16:bc:27:13: 27:d5:2a:9d:a6:05:c3:89:e5:60:05:79:66:9f:a1:37:9b:8a: 6d:24:15:d7:89:32:a4:7e:fd:7d:cb:16:c9:44:c0:89:25:a2: c0:84:13:76:64:1e:2e:80:2f:69:c9:2b:bf:af:11:a7:46:6b: 8a:82:ad:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzRUUxMTAvBgNVBAUTKDY5NkFGMjNEOTMyOTVDMkY1RkRERjMyQTk1NTEzQjJE REJCRkNFMUIwHhcNMjQwNTA1MDAxNjUyWhcNMjQwNTEyMDAxNjUyWjAYMRYwFAYD VQQDEw02NjM2Y2ZmNS1iZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDdFYoiaibzytk7pKNA/r4SjJ1t9HDMIjAtcUZZnc/S/ogTfd1xadBx4aTxW hr09XEyJzXH1LUTQj0M0cW2g74Pfw5SygjVmtbh6saTIikbAtQxaFP+1LrQq6DKd E1lch2DMkCTQ7xGU6DclYu53PQjgJi7KB5BlsFS6GV7cOnPyTf/Iao11kR5yOpJG fPFDAggAumwulzHpPa6DDqAPZ8W6KgZDYoMUO0QbgMoifocFILzxCjqDUstFBOOn 7ba3gLnXuWsgxA93bmyVQkhSSbiXevtMUBYH1uD+GkoNwp/IV23VJMzEQRgVmyGL fZXw6k88/stTmts1/Nq/S5vZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKW2EO9 l84BKYluOUZxcSFTFtN/MB8GA1UdIwQYMBaAFGlq8j2TKVwvX93zKpVROy3bv84b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNFRS81Qjk3QThCODcw MTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhDOWYzZk1xbFZFN0xkdV96 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcnlQWk1wWEM5ZjNmTXFsVkU3TGR1X3pocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNFRS81Qjk3QThCODcwMTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhD OWYzZk1xbFZFN0xkdV96aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQColGVx820MWlT1DzjRAqay8D+JBEdy+BhnW217KBm9f7v9T7ItLEMd OlXX953lXvUlliG7vozYrP7bL1vt12rAdA/YFVQ4paBeJaW6zbGMZrFRCXcF38wY 6dvmqoEtjv6D66hgh00p+mbz7apsM/TdT6x/CtLeZ15XSG9su5J2xlAjKLk/4h6A yt9HqQ0hS1LHWRSnqOnnkuKcevl95jf7cqPM3bjyJ4jalGhqjb69SXe+lBAThPKF enZkAmxXcZXrhxa8JxMn1SqdpgXDieVgBXlmn6E3m4ptJBXXiTKkfv19yxbJRMCJ JaLAhBN2ZB4ugC9pySu/rxGnRmuKgq09 -----END CERTIFICATE-----Generated at Sun May 5 01:13:19 2024 by rpki-client on console-ams.rpki-client.org