$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: vptpT27IRpkYQUjZcH5GXWefMhYz0IpyblWD16dx3gk= Subject key identifier: 21:68:E0:FF:05:7E:60:9E:08:33:E1:DB:44:DA:D6:34:02:B6:EA:BD Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 08FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 08F2 Signing time: Sat 04 May 2024 21:28:21 +0000 Manifest this update: Sat 04 May 2024 21:28:21 +0000 Manifest next update: Sat 11 May 2024 21:28:21 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: SHk4E5a4+cwxC6DvdTIf6oTGNeI6mQUnRAXQ1qxPEYg=) 2: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: Lv3s/tDzwoH6gl7nLzqYDd9D8Hirj2BDnbGE+1t61zg=) 3: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: J0+zE9SmlQGpzIqcvJUCPulCa8uAwpw7BcVDFzghz4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: May 4 21:28:21 2024 GMT Not After : May 11 21:28:21 2024 GMT Subject: CN=6636a875-d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:e1:3f:be:fd:c7:f8:f8:26:b6:bf:93:38: 43:b7:85:ad:51:ef:8f:05:98:98:e1:54:e6:91:95: ea:bf:62:e7:b6:95:58:8a:2a:f4:21:6d:cb:45:4a: fc:ff:76:41:3d:f2:33:c6:84:34:67:d1:8d:bb:3c: 45:9c:92:75:f0:22:e0:75:34:b2:9c:4b:73:15:7d: 91:82:e4:f3:7b:94:65:64:cb:6f:c6:87:67:11:f4: 5d:b1:49:f3:fb:6e:51:d6:5a:0c:1c:e3:0b:d1:86: 68:ed:66:e3:87:c7:3e:2a:ef:1c:38:82:8c:db:24: f5:aa:3a:c2:4a:fc:bc:36:b4:26:e3:c9:02:a0:40: 4a:6a:72:5d:0c:ef:c9:00:b7:ba:7c:74:86:89:4c: 37:00:86:7e:6f:c5:27:25:61:24:54:60:24:9b:26: b8:fe:46:50:be:2a:f1:b0:1a:b3:65:91:56:55:01: 6a:72:e9:d5:7e:b9:8c:29:af:b4:cd:95:7a:16:ef: 14:99:9a:c4:b6:3f:d7:4c:4e:a3:d6:17:20:cc:07: 10:9a:b6:30:e2:c6:d0:65:3f:59:63:8f:f3:1d:38: 12:7d:c6:ce:c9:29:fa:18:b4:4e:6f:a2:ad:09:80: f6:4d:d7:3d:17:17:1f:ab:43:3d:af:a1:23:29:8e: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:68:E0:FF:05:7E:60:9E:08:33:E1:DB:44:DA:D6:34:02:B6:EA:BD X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:3f:b9:5c:cf:36:93:47:a4:c4:9c:c5:a4:d3:75:9c:15:bf: dd:c0:0d:b6:1b:c7:3c:68:ad:49:05:da:27:22:d3:f4:d8:a6: 5c:36:85:da:0a:4f:52:ae:02:47:b0:0d:9b:d9:77:95:43:f1: 8e:8a:93:33:c4:76:f2:f6:f5:1a:0b:96:1e:1c:21:37:fe:af: 92:c9:1f:fa:ef:9d:79:4f:6b:18:df:be:02:0e:7c:02:4e:2d: 37:41:71:9c:e0:2c:15:08:a7:15:75:0f:cd:c3:86:0e:50:99: 1e:10:d9:d5:a6:f4:50:a8:a3:b1:3a:ae:03:4e:3e:69:b8:db: d8:f0:49:44:5f:e2:d3:c4:11:28:69:1f:34:5e:46:30:5c:a3: 63:16:60:1a:62:31:9a:22:7b:a1:fa:37:4f:6c:a4:97:8d:23: 4c:8a:b8:59:38:cf:8a:b5:e4:ab:39:bc:6b:1b:42:1a:5e:bd: 2e:cf:e0:92:74:d7:f4:e0:b8:73:c0:42:c4:69:d0:ba:94:25: a5:3b:6b:40:66:55:38:69:48:53:4d:40:5d:58:80:26:6a:3c: 5a:d7:84:3d:56:5d:33:9e:9b:e4:1e:b8:45:f4:8c:84:eb:70: c1:67:b0:97:cc:2c:d4:98:fd:2e:fd:64:71:9d:47:a1:91:bc: b4:39:1c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjQwNTA0MjEyODIxWhcNMjQwNTExMjEyODIxWjAYMRYwFAYD VQQDEw02NjM2YTg3NS1kNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIbhP779x/j4Jra/kzhDt4WtUe+PBZiY4VTmkZXqv2LntpVYiir0IW3LRUr8 /3ZBPfIzxoQ0Z9GNuzxFnJJ18CLgdTSynEtzFX2RguTze5RlZMtvxodnEfRdsUnz +25R1loMHOML0YZo7Wbjh8c+Ku8cOIKM2yT1qjrCSvy8NrQm48kCoEBKanJdDO/J ALe6fHSGiUw3AIZ+b8UnJWEkVGAkmya4/kZQvirxsBqzZZFWVQFqcunVfrmMKa+0 zZV6Fu8UmZrEtj/XTE6j1hcgzAcQmrYw4sbQZT9ZY4/zHTgSfcbOySn6GLROb6Kt CYD2Tdc9Fxcfq0M9r6EjKY6xfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFo4P8F fmCeCDPh20Ta1jQCtuq9MB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBP7lczzaTR6TEnMWk03WcFb/dwA22G8c8aK1JBdonItP02KZcNoXa Ck9SrgJHsA2b2XeVQ/GOipMzxHby9vUaC5YeHCE3/q+SyR/67515T2sY374CDnwC Ti03QXGc4CwVCKcVdQ/Nw4YOUJkeENnVpvRQqKOxOq4DTj5puNvY8ElEX+LTxBEo aR80XkYwXKNjFmAaYjGaInuh+jdPbKSXjSNMirhZOM+KteSrObxrG0IaXr0uz+CS dNf04LhzwELEadC6lCWlO2tAZlU4aUhTTUBdWIAmajxa14Q9Vl0znpvkHrhF9IyE 63DBZ7CXzCzUmP0u/WRxnUehkby0ORzG -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org