$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: HQyVSPYBnzvyCn5Z0OrECe3Ea4NjNUOlK3wLVlo0u7Q= Subject key identifier: 97:AC:76:F5:83:71:AD:74:0F:92:F8:F2:22:B1:D9:E5:35:CC:41:DB Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: 2B Signing time: Sun 19 May 2024 08:29:40 +0000 Manifest this update: Sun 19 May 2024 08:29:40 +0000 Manifest next update: Sun 26 May 2024 08:29:40 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: eA7MQQibLn/OwK0Mqu9lMzKmps25K98k9nebJ3D0HLg=) 2: 0F1FBEA0D9FD11EEA4312983C4F9AE02.roa (hash: d6rvOEuha5JQmSsy/6mTmD/23xKKm1iMKtMvSkxNu/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: May 19 08:29:40 2024 GMT Not After : May 26 08:29:40 2024 GMT Subject: CN=6649b874-59ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:ea:11:ba:51:85:c0:57:3f:54:c5:46:3a: 10:f5:2e:6d:5b:7f:49:b6:3d:6c:bd:7e:ec:1f:84: 67:1c:bb:7f:a3:dc:d1:d1:4f:f0:e4:98:92:1c:5c: c3:e0:6d:35:1f:c5:18:ce:4d:3d:59:a5:c7:83:ed: 72:bd:fd:3a:bf:bc:07:d7:77:25:2c:ca:30:3b:10: 7a:64:7c:fd:01:d2:37:c5:91:f3:be:29:50:49:b7: db:a9:9c:3e:1c:fb:12:cc:86:d1:9e:f5:be:9e:10: 96:ab:d5:0b:81:5a:49:9d:b2:94:93:df:ed:d7:3e: 26:7e:00:be:2a:ee:90:22:83:95:74:da:d0:5d:67: af:3c:86:c1:c6:ef:43:19:c9:49:8b:b0:53:ee:83: b5:8c:51:fc:c2:fc:ec:c8:c8:be:0b:51:eb:17:e8: ff:23:9f:88:20:f0:a7:e0:f8:c8:b1:67:fa:23:a0: 45:44:08:04:0f:ce:91:1a:c1:a9:c8:d6:11:c4:3d: 27:f7:67:d3:33:ae:4c:2b:80:1e:71:00:0a:a5:c4: 88:3f:a6:49:1d:1f:f7:4d:d5:36:b3:57:f0:48:0e: ce:ef:32:2b:50:e3:ce:ad:d9:fa:03:32:48:a5:57: ff:ab:8f:46:c2:47:4d:cd:9d:d8:d5:c8:09:0f:72: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AC:76:F5:83:71:AD:74:0F:92:F8:F2:22:B1:D9:E5:35:CC:41:DB X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b3:55:66:6d:c8:df:a3:08:a6:6d:c9:27:38:03:f8:b3:f4: 22:ca:f4:f3:e2:ef:4b:cc:97:29:e9:2c:5f:dd:bc:c1:af:5c: ff:c0:bf:ea:09:53:f4:bd:5e:d6:7a:97:09:f3:46:8e:59:d7: d9:08:d8:a1:b8:ee:b5:63:06:0e:a6:b8:8e:3d:57:a9:0a:b9: 86:a3:26:47:ea:12:c8:ec:28:40:69:1b:99:52:91:18:81:0f: 8f:8f:92:1e:dd:45:59:d7:af:67:ae:b6:3f:1f:55:58:e9:9b: 5f:cc:9b:53:af:36:6b:17:4a:36:36:f5:a4:a4:f7:f6:ea:20: d9:e1:d2:eb:33:2c:82:84:85:36:7d:8c:6f:f2:23:8d:c6:97: 39:a0:02:40:9b:ad:e7:c4:6e:0a:a1:1a:f3:62:31:10:49:86: 9c:e4:a5:ea:4e:ec:7a:eb:4e:1f:31:b8:4f:fc:ce:02:5e:36: fa:c2:35:0c:bd:c8:e8:1d:5c:2a:ad:99:ec:a4:68:38:c7:21: f7:37:6d:23:33:dd:c6:fe:45:7c:61:9a:3f:75:cb:47:ba:0a: bf:9a:c7:e6:11:74:55:f9:28:31:ab:60:24:33:7b:b3:46:5e: 24:cf:42:45:f4:37:2e:c4:50:0f:b1:88:a9:dd:28:65:fd:ed: d6:93:32:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjRGNTExMC8GA1UEBRMoQ0NCOEUwOEY5OTkwQTc1NTMxRTkzNkFEQjA2REJBQ0FB NzMxQjU1MjAeFw0yNDA1MTkwODI5NDBaFw0yNDA1MjYwODI5NDBaMBgxFjAUBgNV BAMTDTY2NDliODc0LTU5YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV6+oRulGFwFc/VMVGOhD1Lm1bf0m2PWy9fuwfhGccu3+j3NHRT/DkmJIcXMPg bTUfxRjOTT1ZpceD7XK9/Tq/vAfXdyUsyjA7EHpkfP0B0jfFkfO+KVBJt9upnD4c +xLMhtGe9b6eEJar1QuBWkmdspST3+3XPiZ+AL4q7pAig5V02tBdZ688hsHG70MZ yUmLsFPug7WMUfzC/OzIyL4LUesX6P8jn4gg8Kfg+MixZ/ojoEVECAQPzpEawanI 1hHEPSf3Z9MzrkwrgB5xAAqlxIg/pkkdH/dN1TazV/BIDs7vMitQ486t2foDMkil V/+rj0bCR03NndjVyAkPctQXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl6x29YNx rXQPkvjyIrHZ5TXMQdswHwYDVR0jBBgwFoAUzLjgj5mQp1Ux6TatsG26yqcxtVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NEY1LzNBM0EyMTBFRDlF MjExRUU5QkFFMzcyRUM0RjlBRTAyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekxqZ2o1bVFwMVV4NlRhdHNHMjZ5cWN4dFZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NEY1LzNBM0EyMTBFRDlFMjExRUU5QkFFMzcyRUM0RjlBRTAyL3pMamdqNW1RcDFV eDZUYXRzRzI2eXFjeHRWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIizVWZtyN+jCKZtySc4A/iz9CLK9PPi70vMlynpLF/dvMGvXP/Av+oJ U/S9XtZ6lwnzRo5Z19kI2KG47rVjBg6muI49V6kKuYajJkfqEsjsKEBpG5lSkRiB D4+Pkh7dRVnXr2eutj8fVVjpm1/Mm1OvNmsXSjY29aSk9/bqINnh0uszLIKEhTZ9 jG/yI43GlzmgAkCbrefEbgqhGvNiMRBJhpzkpepO7HrrTh8xuE/8zgJeNvrCNQy9 yOgdXCqtmeykaDjHIfc3bSMz3cb+RXxhmj91y0e6Cr+ax+YRdFX5KDGrYCQze7NG XiTPQkX0Ny7EUA+xiKndKGX97daTMkU= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org