$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: XpzmGzD5NXPpZ5Dv4EcutbVhzs2JRFe26S9cMem0hFI= Subject key identifier: 0F:3D:87:74:23:6B:10:4B:DF:E0:4A:34:B2:B7:A5:6C:1F:C8:DE:15 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 14C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 14BD Signing time: Sun 02 Jun 2024 17:34:00 +0000 Manifest this update: Sun 02 Jun 2024 17:33:59 +0000 Manifest next update: Sun 09 Jun 2024 17:33:59 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: 59XAYmF++1x7TN76BZeRqgj3EEVUYTCfCkMqmVJAmv4=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: JDVg5EtOYvgHX+RYsdLp49o/Rnp72J5uVVL6OYjEcqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5316 (0x14c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Jun 2 17:33:59 2024 GMT Not After : Jun 9 17:33:59 2024 GMT Subject: CN=665cad07-b782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:6e:cf:5c:d2:4e:7b:ee:e5:a9:94:e2:86: 8c:58:7e:3d:48:b1:5f:ba:73:7c:86:d9:80:c5:14: ce:38:88:9d:9a:57:f1:70:a6:44:aa:38:42:58:85: ec:bf:91:55:2b:79:6f:d3:e2:ee:90:76:63:3f:76: c2:9e:1c:ac:57:dd:46:3e:9f:32:4b:93:97:0a:9e: 06:21:77:59:b7:72:d2:74:bc:ea:0e:32:8e:70:ce: 3e:26:9d:ca:fa:f2:af:fc:2a:57:0c:d2:70:27:55: d4:57:cd:29:7d:3c:9d:36:1a:35:0e:33:3c:b2:ac: e2:a1:fa:7e:a8:92:9b:66:47:7f:7b:22:c5:e5:4b: 83:3f:3a:e5:37:f0:01:32:b5:e0:4e:35:c9:9a:19: 28:d7:0f:74:d3:ab:d3:84:72:df:84:0c:6e:1c:13: bf:bf:f8:14:a0:85:fd:1b:c8:eb:af:12:f5:30:09: 58:d1:af:ae:48:be:84:ac:1b:18:c0:fa:09:8a:2b: 13:d2:6f:97:89:5a:5c:a1:78:c9:31:25:22:0c:7d: 13:09:16:73:f2:85:e6:ae:c5:1f:dd:12:56:c7:57: b1:40:c1:42:06:5d:e4:78:30:2b:ff:2e:59:4b:62: 23:14:9c:1a:0f:7b:ec:ca:8a:24:d5:c7:68:c0:66: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:87:74:23:6B:10:4B:DF:E0:4A:34:B2:B7:A5:6C:1F:C8:DE:15 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9e:89:6b:be:a7:0f:72:e8:e6:b6:39:5d:37:7c:fd:25:8b: 8c:98:43:94:3d:3b:60:c8:69:c2:b5:b1:dd:7a:d7:4e:0b:f5: 9c:40:35:22:ec:54:1f:20:cc:b2:13:7c:84:b2:a1:96:13:ad: 70:15:dc:50:fa:58:0a:00:4a:e1:3f:9d:06:f7:cf:97:71:78: 66:3c:23:9b:cc:28:6a:ee:e0:d0:d9:2a:d7:74:dd:ad:da:36: 8f:0b:e8:f2:68:42:87:e0:3d:79:ad:ac:43:ed:14:a6:a3:3f: 40:1b:1c:0f:96:1e:e0:06:82:88:f5:18:11:0f:16:6b:e5:49: 8f:4a:db:7e:32:4b:b9:e8:82:25:18:8d:bb:9f:2c:66:63:0b: ce:19:8b:78:ea:b6:37:d3:8b:d8:cb:ea:aa:d5:ec:03:a8:24: d4:dd:69:8e:c0:8f:00:de:71:91:2a:f8:be:ee:3a:a8:78:08: 5d:26:b7:7a:bc:20:eb:40:04:0b:73:99:f6:af:1a:14:2f:85: dc:5a:be:dc:f1:47:51:14:66:a6:29:62:16:04:87:bb:41:0b: 25:bb:ae:a1:ba:54:7f:ca:a0:5d:85:e2:9a:41:82:e6:22:06: 58:21:73:37:65:fd:11:c9:b5:a7:07:89:5b:0c:6f:d3:79:22: db:23:87:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjQwNjAyMTczMzU5WhcNMjQwNjA5MTczMzU5WjAYMRYwFAYD VQQDEw02NjVjYWQwNy1iNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEFuz1zSTnvu5amU4oaMWH49SLFfunN8htmAxRTOOIidmlfxcKZEqjhCWIXs v5FVK3lv0+LukHZjP3bCnhysV91GPp8yS5OXCp4GIXdZt3LSdLzqDjKOcM4+Jp3K +vKv/CpXDNJwJ1XUV80pfTydNho1DjM8sqziofp+qJKbZkd/eyLF5UuDPzrlN/AB MrXgTjXJmhko1w9006vThHLfhAxuHBO/v/gUoIX9G8jrrxL1MAlY0a+uSL6ErBsY wPoJiisT0m+XiVpcoXjJMSUiDH0TCRZz8oXmrsUf3RJWx1exQMFCBl3keDAr/y5Z S2IjFJwaD3vsyook1cdowGY8ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA89h3Qj axBL3+BKNLK3pWwfyN4VMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtnolrvqcPcujmtjldN3z9JYuMmEOUPTtgyGnCtbHdetdOC/WcQDUi 7FQfIMyyE3yEsqGWE61wFdxQ+lgKAErhP50G98+XcXhmPCObzChq7uDQ2SrXdN2t 2jaPC+jyaEKH4D15raxD7RSmoz9AGxwPlh7gBoKI9RgRDxZr5UmPStt+Mku56IIl GI27nyxmYwvOGYt46rY304vYy+qq1ewDqCTU3WmOwI8A3nGRKvi+7jqoeAhdJrd6 vCDrQAQLc5n2rxoUL4XcWr7c8UdRFGamKWIWBIe7QQslu66hulR/yqBdheKaQYLm IgZYIXM3Zf0RybWnB4lbDG/TeSLbI4cX -----END CERTIFICATE-----Generated at Sun Jun 2 17:59:43 2024 by rpki-client on console-fra.rpki-client.org