$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json) Hash identifier: 56hyZOznlh5NeiLjyuFMf5EN4NQRnXtHgva7SAQG++w= Subject key identifier: 37:DF:96:91:7D:2C:C4:AE:25:B1:3D:2D:7B:97:BC:F1:4B:D3:B1:BB Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft Manifest number: 47 Signing time: Fri 17 May 2024 08:07:34 +0000 Manifest this update: Fri 17 May 2024 08:07:34 +0000 Manifest next update: Fri 24 May 2024 08:07:34 +0000 Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: neO+wuV5t2MMVgRbSb/h/7+/SzMvl/D7maiCohlLQ8I=) 2: 82DEEC82AB9D11EEA419807BC4F9AE02.roa (hash: +WjoE8JHyUth/K1Fl5SeIByn5vFCyNQXhlWhVEjv1I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0 Validity Not Before: May 17 08:07:34 2024 GMT Not After : May 24 08:07:34 2024 GMT Subject: CN=66471046-f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:ef:4b:5d:ed:47:9a:89:14:5b:d7:fb:c4: ef:ce:5b:fa:b8:5a:a6:f7:0f:39:99:d9:2e:78:03: a7:7e:9c:b5:3d:96:dd:2e:5a:57:3d:75:5e:fd:b1: 71:e3:72:f2:78:00:58:1c:bd:31:56:de:73:f8:96: 1a:3d:0b:d7:f9:bf:fa:5f:06:6c:6c:b8:45:92:73: 9e:9a:a7:82:a1:00:76:9d:9b:bf:70:50:85:fe:fa: 00:94:25:0d:77:0e:a3:df:5b:eb:89:91:48:19:47: 07:da:3f:94:51:83:be:53:58:33:a0:33:79:ee:b9: 52:69:bd:82:34:6c:91:2c:dc:1d:46:26:26:2c:b6: ca:46:df:02:d8:b1:33:47:50:84:50:40:c1:b8:25: 34:82:91:af:54:1b:51:83:1d:35:c3:1f:26:94:57: 5b:bb:97:5e:43:51:5e:9f:bd:cb:e4:c2:89:2e:63: fb:c3:0a:ea:c8:7a:70:0d:15:23:be:68:e5:96:6a: 00:67:87:39:2a:0a:40:7b:40:9b:10:8e:15:36:cf: ad:10:16:46:4a:56:e7:bc:64:ec:f3:f4:90:d7:da: 8a:ca:e9:11:8c:4c:23:99:44:9f:2b:10:55:d2:c1: 0c:1e:e9:1f:f2:d6:c1:07:05:f4:67:6a:9c:3e:69: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:96:91:7D:2C:C4:AE:25:B1:3D:2D:7B:97:BC:F1:4B:D3:B1:BB X509v3 Authority Key Identifier: keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b7:18:ad:6e:ab:a3:92:96:8c:d1:19:2b:67:79:73:83:02: 9d:74:97:64:8d:07:2c:6d:7d:d6:bb:85:2e:42:2c:38:6f:68: 50:60:95:55:03:15:62:76:22:7e:be:6b:61:ef:3e:50:0d:97: ab:67:12:7a:23:f0:83:a3:de:89:28:2b:f7:6f:bf:04:79:16: fa:20:c3:1d:6e:a7:60:8a:3c:77:19:d8:a9:d0:b4:73:35:e5: ec:e1:20:98:08:d6:fc:76:22:4f:c0:dd:a4:2a:06:d3:dc:9f: 61:13:6b:cd:0b:4a:ff:b6:99:d4:f6:93:a0:fc:9d:9c:f0:f5: 34:9e:79:8a:97:ed:2d:ab:f2:75:fb:32:0c:60:6f:38:6e:65: ee:c0:dd:e3:c1:2d:19:2c:82:6d:66:c1:6d:bb:50:07:24:65: b9:cd:b6:f9:0d:c6:14:2e:ad:15:ae:e9:4f:b8:fa:c7:ee:81: b4:0e:a9:ec:de:88:03:69:c9:7f:79:fa:31:37:07:28:e6:3b: 75:28:df:ad:98:14:8b:98:42:d1:44:07:e3:b3:5a:93:a3:2d: 71:0f:4a:e7:44:7e:1c:6b:18:fa:92:f2:9e:64:8b:97:a3:a9: 89:ed:67:38:df:f3:1c:07:28:51:a0:39:e6:15:fe:fd:5f:4a: e8:83:35:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QUNBODExMC8GA1UEBRMoQ0U2MzcwOTk3REJEMTNEMjBFNUVDNjE2NUI1QTlFRTNB MjgyQTZCMDAeFw0yNDA1MTcwODA3MzRaFw0yNDA1MjQwODA3MzRaMBgxFjAUBgNV BAMTDTY2NDcxMDQ2LWYyZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8e9LXe1HmokUW9f7xO/OW/q4Wqb3DzmZ2S54A6d+nLU9lt0uWlc9dV79sXHj cvJ4AFgcvTFW3nP4lho9C9f5v/pfBmxsuEWSc56ap4KhAHadm79wUIX++gCUJQ13 DqPfW+uJkUgZRwfaP5RRg75TWDOgM3nuuVJpvYI0bJEs3B1GJiYstspG3wLYsTNH UIRQQMG4JTSCka9UG1GDHTXDHyaUV1u7l15DUV6fvcvkwokuY/vDCurIenANFSO+ aOWWagBnhzkqCkB7QJsQjhU2z60QFkZKVue8ZOzz9JDX2orK6RGMTCOZRJ8rEFXS wQwe6R/y1sEHBfRnapw+aYG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN9+WkX0s xK4lsT0te5e88UvTsbswHwYDVR0jBBgwFoAUzmNwmX29E9IOXsYWW1qe46KCprAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBQ0E4L0Y5NzE0QUU2QUFG QTExRUVBMjIxRTcyRUM0RjlBRTAyL3ptTndtWDI5RTlJT1hzWVdXMXFlNDZLQ3By QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem1Od21YMjlFOUlPWHNZV1cxcWU0NktDcHJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB Q0E4L0Y5NzE0QUU2QUFGQTExRUVBMjIxRTcyRUM0RjlBRTAyL3ptTndtWDI5RTlJ T1hzWVdXMXFlNDZLQ3ByQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAW3GK1uq6OSlozRGStneXODAp10l2SNByxtfda7hS5CLDhvaFBglVUD FWJ2In6+a2HvPlANl6tnEnoj8IOj3okoK/dvvwR5Fvogwx1up2CKPHcZ2KnQtHM1 5ezhIJgI1vx2Ik/A3aQqBtPcn2ETa80LSv+2mdT2k6D8nZzw9TSeeYqX7S2r8nX7 MgxgbzhuZe7A3ePBLRksgm1mwW27UAckZbnNtvkNxhQurRWu6U+4+sfugbQOqeze iANpyX95+jE3ByjmO3Uo362YFIuYQtFEB+OzWpOjLXEPSudEfhxrGPqS8p5ki5ej qYntZzjf8xwHKFGgOeYV/v1fSuiDNb4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org