$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: 0FpcXmygZsMTGqoR+pljrSVNw5mWJEY51fr5IDjBqj4= Subject key identifier: 7B:31:6C:6C:83:36:A6:7F:63:E5:E9:94:84:B3:D3:19:91:22:FB:12 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 013C Signing time: Fri 03 May 2024 05:09:29 +0000 Manifest this update: Fri 03 May 2024 05:09:29 +0000 Manifest next update: Fri 10 May 2024 05:09:29 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: GnlzgkTH1748xw6yCX3tU05FHEhH35NaZWpH9oERh50=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: loYpUv1Um4itP1DhkO9J2kLAAlsHj9PiATnSulDl9Us=) 3: 2E926DC45B7C11EDAAFAB831C4F9AE02.roa (hash: Gx2no7tYjnOwupsDXgy6eKtX0sG90oOvxxXo880RUN8=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: Ei7JK1G2btZaclG35iojfaPh22FI762oYRqOBDOZ+mE=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 1ErsPRPbDwReOL5aIDAE645DztuNVhT3y8EHu4V5i/c=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: ncpnbLP+LILiD6GDslAAq4gIKkrTnIuJ0xtgZy6S3Eo=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: /rCzeylko5qSEJgLMqdkZC3i79GCItafvP/Gi3KWm0s=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: WeZeQts/vnY7bXzVpCkx8KZldrK7REUFFOnGW9ZB9eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: May 3 05:09:29 2024 GMT Not After : May 10 05:09:29 2024 GMT Subject: CN=66347189-fa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:f4:ba:10:0e:e8:3f:8c:e7:95:f1:d7:34: f9:4a:de:7c:0b:a9:fd:9c:54:4f:fc:35:a4:cb:6d: b5:ea:79:03:50:6b:d1:90:33:05:97:09:d9:ba:70: cc:1c:cd:6d:ca:9b:69:67:ec:93:2d:4e:f6:8d:22: 25:d2:16:4d:ac:80:6a:6f:4a:e6:ce:02:7f:56:31: 5a:22:0a:76:f5:9c:7f:dc:2f:d7:ac:2a:5b:a7:9a: 4d:d5:10:33:87:f8:90:2c:7f:51:76:97:01:51:b8: ec:1b:6d:93:b0:69:fb:94:9d:2f:23:7c:b8:3a:1d: 39:a2:23:0b:8c:e0:a3:e0:06:6a:36:52:4a:66:5e: c7:41:64:94:24:ae:d9:19:39:87:86:39:d8:a6:77: 2c:9d:9f:b8:a3:3d:74:80:4b:87:22:5f:8b:38:97: 9b:b2:b5:21:22:66:80:bb:9d:44:a4:5a:19:15:0d: 62:8f:9b:a9:24:d1:b0:3e:ff:4a:ba:94:0d:74:0e: e0:c2:81:fc:59:50:68:9f:aa:5d:8c:b2:15:0c:30: 22:24:12:76:1a:e8:90:48:52:46:ee:04:fa:c5:0f: 05:27:1e:a6:f5:ab:bb:9b:e2:b7:3a:04:62:7a:89: 0c:df:d8:a7:06:1c:fa:9c:97:34:b1:e7:bd:45:5e: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:6C:6C:83:36:A6:7F:63:E5:E9:94:84:B3:D3:19:91:22:FB:12 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:15:28:2d:24:7b:58:68:40:de:bf:0c:0a:5c:9e:48:64:f1: f8:69:fe:0c:08:01:85:24:7a:75:ba:7f:0b:02:fa:ee:4a:2f: 29:11:38:01:a4:44:02:1d:40:18:3c:37:a6:b3:94:40:89:f0: ab:82:c6:37:7a:66:de:dc:94:1e:52:65:c3:bb:3b:e4:86:14: 2c:fa:e3:7a:5a:5d:20:28:4c:53:69:fe:95:8b:d1:4f:86:5c: 5b:d8:c2:73:d3:0f:e9:15:7c:d7:38:62:2e:1d:8b:12:68:ad: a0:a5:79:f8:63:ff:cf:c2:ad:2d:d1:1c:7a:76:49:76:f2:c8: 08:22:ab:e7:53:1f:9c:4b:a7:c2:30:d7:7a:46:69:35:29:61: 8f:36:13:f4:1f:30:85:db:88:29:c7:00:e3:f7:da:22:eb:98: 27:7d:a0:5f:0c:34:48:5f:a2:1e:a0:56:61:88:aa:69:84:4a: c4:77:5f:bf:59:2e:0f:94:b1:ff:71:57:6b:79:dc:3c:a9:da: 6a:56:40:7e:b0:ec:28:7a:9d:ee:f5:d4:3d:c3:bb:50:be:9b: a8:f7:fc:fa:c8:42:dc:73:c3:3f:fa:14:49:a3:36:41:20:63: 7f:26:3a:c7:67:26:08:c4:3c:aa:45:3b:9a:c6:76:f1:ae:b7: d2:6c:fb:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQwNTAzMDUwOTI5WhcNMjQwNTEwMDUwOTI5WjAYMRYwFAYD VQQDEw02NjM0NzE4OS1mYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylX0uhAO6D+M55Xx1zT5St58C6n9nFRP/DWky2216nkDUGvRkDMFlwnZunDM HM1typtpZ+yTLU72jSIl0hZNrIBqb0rmzgJ/VjFaIgp29Zx/3C/XrCpbp5pN1RAz h/iQLH9RdpcBUbjsG22TsGn7lJ0vI3y4Oh05oiMLjOCj4AZqNlJKZl7HQWSUJK7Z GTmHhjnYpncsnZ+4oz10gEuHIl+LOJebsrUhImaAu51EpFoZFQ1ij5upJNGwPv9K upQNdA7gwoH8WVBon6pdjLIVDDAiJBJ2GuiQSFJG7gT6xQ8FJx6m9au7m+K3OgRi eokM39inBhz6nJc0see9RV4qVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsxbGyD NqZ/Y+XplISz0xmRIvsSMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxFSgtJHtYaEDevwwKXJ5IZPH4af4MCAGFJHp1un8LAvruSi8pETgB pEQCHUAYPDems5RAifCrgsY3embe3JQeUmXDuzvkhhQs+uN6Wl0gKExTaf6Vi9FP hlxb2MJz0w/pFXzXOGIuHYsSaK2gpXn4Y//Pwq0t0Rx6dkl28sgIIqvnUx+cS6fC MNd6Rmk1KWGPNhP0HzCF24gpxwDj99oi65gnfaBfDDRIX6IeoFZhiKpphErEd1+/ WS4PlLH/cVdredw8qdpqVkB+sOwoep3u9dQ9w7tQvpuo9/z6yELcc8M/+hRJozZB IGN/JjrHZyYIxDyqRTuaxnbxrrfSbPso -----END CERTIFICATE-----Generated at Fri May 3 06:29:22 2024 by rpki-client on console-fra.rpki-client.org