$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: 9JKurtQx7NvLf5oBeS+s+qleYt8wjksuWXupksAeQfo= Subject key identifier: 32:5B:3B:32:38:C7:18:96:9D:7C:D5:3C:76:BA:D2:9B:CF:C1:72:0C Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0B57 Signing time: Fri 10 May 2024 17:36:10 +0000 Manifest this update: Fri 10 May 2024 17:36:09 +0000 Manifest next update: Fri 17 May 2024 17:36:09 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: 5+ViMGrewERN6Pf6PyywxDJ7UPxC4ou4wmoQp8e4op0=) 2: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: 1MxMwrXZk8ftJkShEH2HIRV8rrWEwvbLO8gTpwcAJdo=) 3: 01571CFC878511EE8A9D2C3FC4F9AE02.roa (hash: pOOi+ljNELD1fedpC8dGLmeJGbYaX+puYPSQfPaK0zM=) 4: FD969234F2D211EC89771C5AC4F9AE02.roa (hash: 7FaVtW9pPHjWV7CAxVegUQzPI6d8IOVHfw2sCMVtG80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: May 10 17:36:09 2024 GMT Not After : May 17 17:36:09 2024 GMT Subject: CN=663e5b0a-dad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:71:be:51:29:b7:a7:b9:59:cf:bd:12:a4: 5a:b4:9b:8c:1f:95:61:10:47:1a:f9:c3:92:2b:7b: 1d:b6:d0:9e:8b:ab:fd:ec:d6:b7:da:5e:97:c7:9d: dd:7e:2e:7a:f6:29:b8:49:98:f1:03:b6:d1:a9:d5: 7b:98:cd:3d:40:14:9a:28:eb:17:53:b0:46:aa:7a: c0:ca:35:90:ca:43:23:f6:b8:30:88:a0:15:70:c4: 61:1e:27:2e:ea:88:bf:b0:42:2d:96:aa:c0:a7:80: 26:85:fb:cf:c2:ee:9d:82:be:be:ea:43:a4:ba:d6: 70:60:11:a0:0a:68:13:91:25:83:bc:28:57:11:60: 88:36:41:27:49:59:64:f4:01:99:b6:f6:9b:e9:e8: b5:26:2c:b4:37:c1:a6:a9:8a:c1:92:05:65:e5:67: 29:13:65:21:91:38:94:9f:b7:bb:4d:99:42:24:73: 82:dc:aa:53:81:45:79:1f:76:7b:13:c4:97:33:f7: 35:57:62:5f:c8:00:a7:a1:7b:b9:c5:8d:fd:08:c0: b5:1b:41:30:33:f0:bf:32:52:64:ac:23:92:b8:6a: 23:20:bd:22:2c:52:a6:45:68:6b:fc:be:dc:04:f5: bc:12:48:d5:4d:29:91:4c:36:14:af:53:11:2a:fb: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:3B:32:38:C7:18:96:9D:7C:D5:3C:76:BA:D2:9B:CF:C1:72:0C X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:43:29:ef:bc:7b:b4:e5:e2:bf:92:40:5c:41:32:37:e8:30: 18:d6:d6:52:bd:af:9f:73:cf:a3:ac:9b:2e:cc:1d:79:89:73: dd:b6:35:96:a6:18:3a:10:e4:94:c0:a4:01:ca:94:6d:41:07: 2b:3b:c5:92:e3:a7:54:57:c8:ac:ca:7f:90:25:11:78:b9:da: c8:31:14:31:a7:90:96:bf:39:a9:29:c0:96:82:f9:22:5d:eb: 44:e8:9e:4f:b8:10:be:16:05:30:6b:2a:b3:64:5f:62:56:8f: 38:6f:db:2a:80:85:d6:d8:7d:95:87:ca:a7:8a:e3:ac:fb:5d: bf:97:5e:64:20:67:31:0a:1f:a6:48:2f:f1:1e:05:30:13:f3: 29:d3:f2:ea:20:52:7d:d6:a2:a3:26:6c:37:0c:f2:87:43:47: e0:39:f7:b7:19:d5:a4:0d:93:af:28:78:1f:b7:17:9f:4e:43: e9:5c:e6:b3:eb:98:6c:2f:27:fe:8e:c1:41:b2:64:bb:20:6f: 3f:6f:0c:b0:12:b1:b9:01:08:7f:9f:2a:62:b1:ce:ad:ed:fc: c7:fe:4a:37:4b:65:30:ba:d4:fa:1a:28:e6:b0:85:0c:e9:2c: 54:14:53:7f:04:a2:79:6d:78:88:26:cd:2b:50:21:0f:1a:79: 82:9f:3d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjQwNTEwMTczNjA5WhcNMjQwNTE3MTczNjA5WjAYMRYwFAYD VQQDEw02NjNlNWIwYS1kYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aJxvlEpt6e5Wc+9EqRatJuMH5VhEEca+cOSK3sdttCei6v97Na32l6Xx53d fi569im4SZjxA7bRqdV7mM09QBSaKOsXU7BGqnrAyjWQykMj9rgwiKAVcMRhHicu 6oi/sEItlqrAp4AmhfvPwu6dgr6+6kOkutZwYBGgCmgTkSWDvChXEWCINkEnSVlk 9AGZtvab6ei1Jiy0N8GmqYrBkgVl5WcpE2UhkTiUn7e7TZlCJHOC3KpTgUV5H3Z7 E8SXM/c1V2JfyACnoXu5xY39CMC1G0EwM/C/MlJkrCOSuGojIL0iLFKmRWhr/L7c BPW8EkjVTSmRTDYUr1MRKvtsDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJbOzI4 xxiWnXzVPHa60pvPwXIMMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnQynvvHu05eK/kkBcQTI36DAY1tZSva+fc8+jrJsuzB15iXPdtjWW phg6EOSUwKQBypRtQQcrO8WS46dUV8isyn+QJRF4udrIMRQxp5CWvzmpKcCWgvki XetE6J5PuBC+FgUwayqzZF9iVo84b9sqgIXW2H2Vh8qniuOs+12/l15kIGcxCh+m SC/xHgUwE/Mp0/LqIFJ91qKjJmw3DPKHQ0fgOfe3GdWkDZOvKHgftxefTkPpXOaz 65hsLyf+jsFBsmS7IG8/bwywErG5AQh/nypisc6t7fzH/ko3S2UwutT6GijmsIUM 6SxUFFN/BKJ5bXiIJs0rUCEPGnmCnz00 -----END CERTIFICATE-----Generated at Fri May 10 19:18:36 2024 by rpki-client on console-ams.rpki-client.org