$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: xe1La+LrZ3vQbsyTbcoI/eKJfT9mGOB2IOCOv5Inoow= Subject key identifier: EF:E9:4A:12:90:98:F1:10:6C:A5:D0:6B:EE:EE:DA:66:C7:A2:9A:70 Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 0FAD Signing time: Sat 18 May 2024 21:05:17 +0000 Manifest this update: Sat 18 May 2024 21:05:17 +0000 Manifest next update: Sat 25 May 2024 21:05:17 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: gjAtEfrtJ8bvMaXaJ8oMSx6KBkh5DFucHokbdFOOOxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: May 18 21:05:17 2024 GMT Not After : May 25 21:05:17 2024 GMT Subject: CN=6649180d-c45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:25:ea:d7:59:80:0c:69:a1:29:1f:6e:ce: 5e:8e:7f:83:dd:75:33:9d:cf:69:e7:09:cb:cb:9e: f8:77:35:47:df:08:44:0e:1e:4a:76:e3:4e:56:7a: 72:b8:81:74:31:07:70:83:73:ed:2a:e3:49:a1:57: d8:75:5f:6d:89:fb:16:e8:db:ef:0d:50:17:7e:dd: 0e:c0:02:89:4c:f3:3f:7f:b4:a3:e7:c9:f7:10:08: 79:fd:c6:d6:77:2b:65:88:24:da:14:ba:45:6d:c3: 80:f2:b6:c6:50:85:4f:dc:c9:8a:f3:67:77:1d:b6: b0:d9:b8:4e:72:c8:a1:44:97:7e:2e:bd:38:77:ab: fe:83:be:0c:4a:04:84:51:99:2c:a1:6d:84:af:61: b6:81:a9:43:cd:46:1b:fb:c2:5d:f1:6b:f0:e8:06: da:92:05:13:9b:9b:94:0f:73:ef:a6:99:f1:05:6c: 58:95:96:2f:c7:c3:06:35:8d:ee:9d:89:5b:73:a5: d2:a9:a5:c6:54:77:78:ef:99:f0:3f:13:d4:f2:6e: 6f:48:fb:9d:de:a9:1d:75:13:50:d3:04:01:6c:58: 69:2f:bc:d3:cf:b7:a2:7c:77:22:9a:3a:fd:b6:dd: 3c:0e:9e:3d:86:37:f8:22:2f:16:5c:9c:e1:3c:cc: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E9:4A:12:90:98:F1:10:6C:A5:D0:6B:EE:EE:DA:66:C7:A2:9A:70 X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:58:93:9d:63:59:a9:40:be:b5:13:f6:69:0c:0e:74:37:3d: 4c:94:97:28:46:e6:b7:75:f6:38:eb:da:40:d5:03:73:e4:54: 6d:94:44:9e:19:a7:b6:62:cc:f2:b9:22:7c:aa:4d:12:45:5f: d0:b5:27:a2:84:12:e8:27:b6:24:7b:af:98:7f:8a:e4:fc:ee: ec:94:5c:d4:78:72:01:d2:bf:11:7c:bb:44:2b:27:fc:2b:5f: 13:50:f8:10:23:e1:38:68:c2:56:48:a8:dd:1f:c6:3b:2a:fe: 80:e5:11:9b:2d:05:d3:c6:0f:70:47:50:b9:23:b8:66:19:db: d1:27:14:fc:22:35:2c:fe:47:cb:c6:97:a7:d4:a1:88:25:8e: 80:41:5a:b9:03:0f:57:7f:a3:a6:5b:59:de:9b:9e:0c:5d:62: 00:4e:76:95:04:80:05:43:c8:2b:ce:ae:95:e1:6e:11:c6:ff: 1c:ef:53:b0:0a:9a:cd:9f:f0:68:9e:0a:a5:41:62:b3:29:ce: f2:a9:14:74:cb:bf:fe:f2:9b:2e:0a:ac:0e:42:60:f0:ce:e6: fd:14:ae:2a:2a:9a:93:95:4a:67:ed:80:87:3e:af:a7:8a:12: d9:9a:9c:8e:8c:b0:b5:09:94:97:1e:ee:e5:b1:25:99:0f:e4: f5:fe:bf:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjQwNTE4MjEwNTE3WhcNMjQwNTI1MjEwNTE3WjAYMRYwFAYD VQQDEw02NjQ5MTgwZC1jNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh8l6tdZgAxpoSkfbs5ejn+D3XUznc9p5wnLy574dzVH3whEDh5KduNOVnpy uIF0MQdwg3PtKuNJoVfYdV9tifsW6NvvDVAXft0OwAKJTPM/f7Sj58n3EAh5/cbW dytliCTaFLpFbcOA8rbGUIVP3MmK82d3Hbaw2bhOcsihRJd+Lr04d6v+g74MSgSE UZksoW2Er2G2galDzUYb+8Jd8Wvw6AbakgUTm5uUD3PvppnxBWxYlZYvx8MGNY3u nYlbc6XSqaXGVHd475nwPxPU8m5vSPud3qkddRNQ0wQBbFhpL7zTz7eifHcimjr9 tt08Dp49hjf4Ii8WXJzhPMxvzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/pShKQ mPEQbKXQa+7u2mbHoppwMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpWJOdY1mpQL61E/ZpDA50Nz1MlJcoRua3dfY469pA1QNz5FRtlESe Gae2YszyuSJ8qk0SRV/QtSeihBLoJ7Yke6+Yf4rk/O7slFzUeHIB0r8RfLtEKyf8 K18TUPgQI+E4aMJWSKjdH8Y7Kv6A5RGbLQXTxg9wR1C5I7hmGdvRJxT8IjUs/kfL xpen1KGIJY6AQVq5Aw9Xf6OmW1nem54MXWIATnaVBIAFQ8grzq6V4W4Rxv8c71Ow CprNn/BongqlQWKzKc7yqRR0y7/+8psuCqwOQmDwzub9FK4qKpqTlUpn7YCHPq+n ihLZmpyOjLC1CZSXHu7lsSWZD+T1/r+V -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org