$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: g2IKUY9uuytqrSyYzCb0KS36uW2HoawTlb6+0i3lE2o= Subject key identifier: 54:76:DF:F7:E3:16:BB:42:40:74:C3:31:4E:D4:26:C6:81:EA:3C:4A Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 7E Signing time: Fri 17 May 2024 07:18:08 +0000 Manifest this update: Fri 17 May 2024 07:18:07 +0000 Manifest next update: Fri 24 May 2024 07:18:07 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: xsygif4nYTDC3NokdUuYIsa03c8AyUBB5UdFzIyZ7Dg=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: I/KgRawnSXsUvfybGQFY+fhUgBwia8VB/+hkrVX07Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: May 17 07:18:07 2024 GMT Not After : May 24 07:18:07 2024 GMT Subject: CN=664704af-c5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:95:b4:28:47:73:41:02:21:af:3d:da:2c: 37:ac:a3:7e:69:6e:0d:29:9b:19:f6:81:40:3d:02: 48:ab:d4:08:e7:aa:97:1d:d3:f4:64:6c:dd:e8:6d: b5:c8:c7:e4:a8:b6:be:e9:30:0a:6e:68:68:58:b6: 00:05:a2:4b:6a:a3:7b:93:37:71:2b:bf:e3:58:b1: c9:07:ae:ea:a1:87:df:80:64:83:df:19:be:05:32: 0c:cf:21:9f:0f:3e:14:6c:bc:d8:59:ab:25:fc:f1: e5:da:44:2d:0f:85:8f:3e:98:d1:7d:cd:81:a3:0b: 75:70:d4:aa:49:8d:01:21:6b:90:56:a0:a7:9a:73: f0:f3:2e:10:35:0c:77:d6:b1:19:08:46:62:b5:84: 2c:38:3a:e9:0a:6f:bd:74:cb:83:49:2b:33:31:5a: 59:f3:4b:52:f6:d0:81:03:40:fb:6d:54:b3:68:97: 82:b0:6c:f4:43:c5:0f:7b:65:ff:9f:71:a5:13:89: ad:c0:fb:dc:63:6c:6d:9e:ff:cb:59:03:38:51:b8: a1:cf:f3:51:08:4f:f0:c3:6d:d8:b0:86:f0:e8:a5: e3:d7:47:94:8a:5f:61:75:58:b0:44:bb:94:15:40: 56:db:4d:fd:1a:ec:d1:5f:63:d9:d2:16:33:9a:38: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:76:DF:F7:E3:16:BB:42:40:74:C3:31:4E:D4:26:C6:81:EA:3C:4A X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:87:2a:28:49:2c:eb:a8:9b:94:56:b3:23:1e:55:92:e5:46: 9e:74:cb:61:61:3a:c0:df:d3:1c:27:34:25:ce:60:e9:3d:c5: d1:04:89:3d:82:11:22:42:c7:a0:7c:b3:42:b2:7b:26:84:99: c5:80:f5:8f:55:77:78:7e:ab:cc:f7:e5:91:ce:31:50:74:8c: 39:6d:0d:39:fc:9d:00:f3:67:99:1a:6e:4c:5d:dd:32:e1:fa: 9a:d5:79:51:58:85:13:19:e1:82:34:5c:8c:14:9e:e0:5a:dd: 9f:01:63:b1:e2:dd:c4:52:48:68:b7:8d:88:03:05:77:b3:ca: 50:8d:06:01:6c:2f:b1:09:1d:5d:73:92:39:70:17:0b:37:d7: d4:f1:05:44:cc:71:0d:67:b2:15:fb:90:1a:37:9c:2e:68:3a: 0d:ea:6d:2f:10:86:b6:47:ed:ea:bd:c8:8b:e9:f0:0b:9b:4d: a4:e5:75:37:62:bf:eb:46:73:13:77:ec:63:7e:07:e7:50:58: 6d:23:02:2b:53:7e:c8:79:b5:4d:9d:42:61:a3:5b:66:3d:d3: b1:2d:4b:36:62:e8:9f:10:f0:d1:34:87:ff:11:7b:42:cd:1e: c9:df:77:d4:14:cc:4e:42:f2:9b:76:e0:45:43:94:23:c3:cb: eb:9b:9d:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QUFENDExMC8GA1UEBRMoQ0Y0NzY2NDI4MDRGQ0ZGOUQ3MDkyODk2MzU4MzU1RDVB QzAwRUE3MzAeFw0yNDA1MTcwNzE4MDdaFw0yNDA1MjQwNzE4MDdaMBgxFjAUBgNV BAMTDTY2NDcwNGFmLWM1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq7JW0KEdzQQIhrz3aLDeso35pbg0pmxn2gUA9Akir1Ajnqpcd0/RkbN3obbXI x+Sotr7pMApuaGhYtgAFoktqo3uTN3Erv+NYsckHruqhh9+AZIPfGb4FMgzPIZ8P PhRsvNhZqyX88eXaRC0PhY8+mNF9zYGjC3Vw1KpJjQEha5BWoKeac/DzLhA1DHfW sRkIRmK1hCw4OukKb710y4NJKzMxWlnzS1L20IEDQPttVLNol4KwbPRDxQ97Zf+f caUTia3A+9xjbG2e/8tZAzhRuKHP81EIT/DDbdiwhvDopePXR5SKX2F1WLBEu5QV QFbbTf0a7NFfY9nSFjOaOL9nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVHbf9+MW u0JAdMMxTtQmxoHqPEowHwYDVR0jBBgwFoAUz0dmQoBPz/nXCSiWNYNV1awA6nMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBQUQ0LzBERDhGNzlFNTFC QTExRUU4NEVGOUM1RkM0RjlBRTAyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZu TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejBkbVFvQlB6X25YQ1NpV05ZTlYxYXdBNm5NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB QUQ0LzBERDhGNzlFNTFCQTExRUU4NEVGOUM1RkM0RjlBRTAyL3owZG1Rb0JQel9u WENTaVdOWU5WMWF3QTZuTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEWHKihJLOuom5RWsyMeVZLlRp50y2FhOsDf0xwnNCXOYOk9xdEEiT2C ESJCx6B8s0KyeyaEmcWA9Y9Vd3h+q8z35ZHOMVB0jDltDTn8nQDzZ5kabkxd3TLh +prVeVFYhRMZ4YI0XIwUnuBa3Z8BY7Hi3cRSSGi3jYgDBXezylCNBgFsL7EJHV1z kjlwFws319TxBUTMcQ1nshX7kBo3nC5oOg3qbS8QhrZH7eq9yIvp8AubTaTldTdi v+tGcxN37GN+B+dQWG0jAitTfsh5tU2dQmGjW2Y907EtSzZi6J8Q8NE0h/8Re0LN Hsnfd9QUzE5C8pt24EVDlCPDy+ubnbw= -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org