$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json) Hash identifier: skk9vl3IU+pfguLDVkQkCBuobpuL5EKovu4hZZE1c0w= Subject key identifier: 3D:A6:D2:CE:B6:3E:1F:A7:46:5B:BD:17:4F:D3:3E:4F:A1:C6:84:75 Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft Manifest number: 4F Signing time: Wed 15 May 2024 08:08:00 +0000 Manifest this update: Wed 15 May 2024 08:07:59 +0000 Manifest next update: Wed 22 May 2024 08:07:59 +0000 Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: gCAcqctXQk0g+PFzbFkYh4T5zKmtpicao1QcUKBG/q4=) 2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: Z6eIAw4+ZVpS3+rIFAXPpDa3a9OAI6I61Uyg5h9l7g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4 Validity Not Before: May 15 08:07:59 2024 GMT Not After : May 22 08:07:59 2024 GMT Subject: CN=66446d5f-067e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:67:f4:65:a6:25:16:f2:79:42:e3:78:69: 56:6f:0c:d1:30:69:85:e9:92:9c:5a:97:a9:b1:97: 2b:be:55:bf:48:53:c9:21:4a:47:1d:3e:12:5b:f2: b2:1f:e5:84:d4:25:0e:bd:f9:49:02:40:68:f6:dd: f0:ce:e2:08:4c:8a:56:ee:b2:30:4a:e7:11:79:b9: 56:b5:8d:5d:30:68:90:49:ef:d0:78:17:45:4f:36: 07:8e:b4:1a:41:58:b7:be:8e:12:a6:f9:ed:be:7e: 7c:42:03:46:f7:c1:dd:8c:3d:d3:14:3d:ca:85:ed: 1e:1a:38:d4:e0:b5:df:4d:b1:dc:3d:7a:c9:7f:08: eb:a3:3a:21:c8:47:f8:e0:ad:da:fd:ba:96:2b:be: f4:54:2e:be:8e:b5:9d:b6:49:f4:98:ca:8a:a3:9b: e9:77:ee:d1:17:49:f2:5b:fc:c2:82:38:94:98:40: 52:eb:de:c1:4a:05:3d:2c:df:3c:16:2b:8a:e0:7f: d8:0d:a5:81:68:c5:22:28:ad:60:c1:a4:a9:44:b7: 0d:93:2c:59:f2:ae:99:69:a8:75:a2:01:7d:06:40: e3:02:09:f3:1e:59:52:04:fe:bf:e5:dd:ff:7f:3d: 47:2b:ab:d6:f8:c9:93:ae:43:64:d9:2d:14:c4:6d: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:D2:CE:B6:3E:1F:A7:46:5B:BD:17:4F:D3:3E:4F:A1:C6:84:75 X509v3 Authority Key Identifier: keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:47:b8:e0:bb:28:6a:10:7c:2f:99:ee:00:f7:03:44:43:27: 29:4f:d2:9b:12:9b:bf:7e:e0:1f:47:65:57:48:c0:4e:75:d0: 8f:19:b2:3a:b9:5a:42:99:36:34:95:c3:8c:83:cf:a0:4b:d2: df:cd:58:f9:bc:d6:f5:f3:66:a1:43:62:97:42:31:f5:05:09: d8:83:a8:fb:72:00:f5:12:a4:f1:3d:a1:69:79:2c:d1:66:93: d3:76:56:10:8b:5d:33:a2:58:f1:4c:26:d5:fa:0c:35:85:37: 88:a2:cb:4f:7c:ba:a3:6e:38:e5:ef:f4:c4:39:0f:bf:43:52: fa:82:95:c4:0d:93:48:45:8c:af:0e:83:71:ea:9c:55:73:85: 10:56:c6:47:39:a0:bf:fc:2e:a7:d9:fa:3c:28:f0:f1:2f:c1: 1d:a9:5d:34:2e:78:d7:ad:27:9a:68:9b:72:df:7c:a6:0f:ce: de:50:41:18:d6:7c:e4:a3:5b:25:f0:7c:e9:ca:4b:5d:41:a3: ec:62:ff:3e:0d:92:e3:8f:8d:a1:eb:1f:77:ed:aa:82:4a:f5: 08:e2:83:82:f0:ef:45:2f:28:82:44:33:d5:ba:0d:d7:bf:2c: 8f:64:05:f9:89:3f:93:43:f2:6c:33:bc:d8:e5:7d:20:b3:46: d2:91:55:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjFFRTExMC8GA1UEBRMoNkIzQkU4RjM0Q0VBNjk0QjBENjRCQ0Y4NTc4NUQ5MTc0 NDM2OTVENDAeFw0yNDA1MTUwODA3NTlaFw0yNDA1MjIwODA3NTlaMBgxFjAUBgNV BAMTDTY2NDQ2ZDVmLTA2N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJGf0ZaYlFvJ5QuN4aVZvDNEwaYXpkpxal6mxlyu+Vb9IU8khSkcdPhJb8rIf 5YTUJQ69+UkCQGj23fDO4ghMilbusjBK5xF5uVa1jV0waJBJ79B4F0VPNgeOtBpB WLe+jhKm+e2+fnxCA0b3wd2MPdMUPcqF7R4aONTgtd9Nsdw9esl/COujOiHIR/jg rdr9upYrvvRULr6OtZ22SfSYyoqjm+l37tEXSfJb/MKCOJSYQFLr3sFKBT0s3zwW K4rgf9gNpYFoxSIorWDBpKlEtw2TLFnyrplpqHWiAX0GQOMCCfMeWVIE/r/l3f9/ PUcrq9b4yZOuQ2TZLRTEbcffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPabSzrY+ H6dGW70XT9M+T6HGhHUwHwYDVR0jBBgwFoAUazvo80zqaUsNZLz4V4XZF0Q2ldQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMUVFL0RFNkE2MTMwQTU1 RDExRUVCOEU5Q0UxMEM0RjlBRTAyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXp2bzgwenFhVXNOWkx6NFY0WFpGMFEybGRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MUVFL0RFNkE2MTMwQTU1RDExRUVCOEU5Q0UxMEM0RjlBRTAyL2F6dm84MHpxYVVz TlpMejRWNFhaRjBRMmxkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRHuOC7KGoQfC+Z7gD3A0RDJylP0psSm79+4B9HZVdIwE510I8Zsjq5 WkKZNjSVw4yDz6BL0t/NWPm81vXzZqFDYpdCMfUFCdiDqPtyAPUSpPE9oWl5LNFm k9N2VhCLXTOiWPFMJtX6DDWFN4iiy098uqNuOOXv9MQ5D79DUvqClcQNk0hFjK8O g3HqnFVzhRBWxkc5oL/8LqfZ+jwo8PEvwR2pXTQueNetJ5pom3LffKYPzt5QQRjW fOSjWyXwfOnKS11Bo+xi/z4NkuOPjaHrH3ftqoJK9Qjig4Lw70UvKIJEM9W6Dde/ LI9kBfmJP5ND8mwzvNjlfSCzRtKRVaY= -----END CERTIFICATE-----Generated at Wed May 15 09:27:34 2024 by rpki-client on console-fra.rpki-client.org