$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: bxcj3olN44SFQC5k4eF+mLo2msaAOUoYBWvUZl3fog0= Subject key identifier: 17:91:8A:96:29:70:59:D6:D0:62:EE:64:FE:30:B1:4E:9F:16:D4:C4 Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 05AB Signing time: Sun 19 May 2024 00:22:38 +0000 Manifest this update: Sun 19 May 2024 00:22:37 +0000 Manifest next update: Sun 26 May 2024 00:22:37 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: oJLFiFt4jAECHaNKXV/rKjhNbafRU+uK2QYkT0xiyZg=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: +hjw0zuL2O24CGkE1ADtuiu4lL2apQTchNB7zwQv2GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: May 19 00:22:37 2024 GMT Not After : May 26 00:22:37 2024 GMT Subject: CN=6649464e-9617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:2d:7d:40:03:d0:ce:8d:d5:aa:42:46:64: ae:08:86:37:c9:67:c0:78:02:26:ec:45:9c:e9:10: 8d:f3:ee:f0:70:a2:a9:f4:ce:76:68:2e:4f:e8:28: c8:1d:c7:0b:bc:0b:03:24:9b:ab:c0:3f:db:f8:0a: 60:2b:ab:d3:53:f0:38:f1:11:8c:f4:50:ab:f7:31: 69:3d:69:cf:54:ec:26:19:95:c8:33:6e:d2:7e:49: 3b:c6:9a:f3:f7:59:8b:92:ed:61:07:be:e0:7b:86: fb:e4:16:35:a9:67:c3:02:55:52:22:42:b2:b6:9f: cd:7d:5b:1c:04:21:a8:d1:bc:2f:69:e5:06:8e:8e: 32:01:c3:58:df:86:8a:9e:a1:63:50:41:af:45:ad: ff:ab:77:df:7c:5d:8c:c3:e2:bc:b6:cd:17:5a:aa: 0a:ec:d9:79:97:ed:17:a4:19:74:4e:f2:f1:fb:b1: 0b:53:90:97:cf:c2:6a:5b:de:86:0c:e9:ee:55:cd: 12:9d:d8:9f:51:c9:b3:03:38:b7:5c:24:ca:ad:c8: 3a:6e:b0:72:0a:cf:72:58:f7:77:ba:77:a5:9d:56: 49:ef:27:67:80:fe:d3:91:29:6f:c0:57:df:36:64: 9e:f1:ce:19:c0:c1:77:40:79:18:10:1f:a9:32:d0: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:8A:96:29:70:59:D6:D0:62:EE:64:FE:30:B1:4E:9F:16:D4:C4 X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:77:4a:72:1b:11:bf:2f:81:d8:51:13:7e:41:d6:34:40: 93:df:5b:31:17:e4:d5:1e:60:f1:6a:54:2d:9f:9d:da:07:30: 66:16:b6:25:39:49:ef:62:26:70:c0:8e:a2:ed:7a:d8:16:39: b6:9b:78:0e:20:7f:aa:08:71:7f:b5:6f:f6:6a:25:34:ba:d7: 0b:53:5b:d0:e4:b1:4b:ba:7a:80:af:24:ce:65:34:7a:e2:8c: 97:de:fc:51:d4:f3:8a:d8:32:f9:03:1b:ae:4c:82:73:bb:1c: 5e:dd:25:ad:7a:d3:48:9c:ee:b8:2d:68:17:9d:f6:ab:fa:11: 8b:9d:a6:2a:3d:2d:c6:6b:8f:a1:0a:b9:bc:3f:34:28:d1:91: d4:a8:95:7b:f3:e7:70:eb:cb:5d:15:4f:bd:cd:7c:02:5f:26: d7:e7:aa:87:0e:7c:5d:86:fb:89:ea:af:22:b1:92:b8:39:5d: 90:a1:fe:1d:35:f1:26:99:47:86:f9:55:85:35:9b:eb:14:c2: f4:2e:d7:79:7b:c3:ad:c9:29:7e:5a:b2:d3:33:4a:24:cb:42: 9e:15:3d:3e:e7:45:eb:7c:3b:37:d1:4a:64:b3:15:c7:d2:42: 82:58:1b:f3:0c:95:9d:ce:b1:b7:85:db:eb:b8:ff:cc:89:87: c2:75:57:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjQwNTE5MDAyMjM3WhcNMjQwNTI2MDAyMjM3WjAYMRYwFAYD VQQDEw02NjQ5NDY0ZS05NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf0tfUAD0M6N1apCRmSuCIY3yWfAeAIm7EWc6RCN8+7wcKKp9M52aC5P6CjI HccLvAsDJJurwD/b+ApgK6vTU/A48RGM9FCr9zFpPWnPVOwmGZXIM27Sfkk7xprz 91mLku1hB77ge4b75BY1qWfDAlVSIkKytp/NfVscBCGo0bwvaeUGjo4yAcNY34aK nqFjUEGvRa3/q3fffF2Mw+K8ts0XWqoK7Nl5l+0XpBl0TvLx+7ELU5CXz8JqW96G DOnuVc0SndifUcmzAzi3XCTKrcg6brByCs9yWPd3unelnVZJ7ydngP7TkSlvwFff NmSe8c4ZwMF3QHkYEB+pMtDnhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeRipYp cFnW0GLuZP4wsU6fFtTEMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG5HdKchsRvy+B2FETfkHWNECT31sxF+TVHmDxalQtn53aBzBmFrYl OUnvYiZwwI6i7XrYFjm2m3gOIH+qCHF/tW/2aiU0utcLU1vQ5LFLunqAryTOZTR6 4oyX3vxR1POK2DL5AxuuTIJzuxxe3SWtetNInO64LWgXnfar+hGLnaYqPS3Ga4+h Crm8PzQo0ZHUqJV78+dw68tdFU+9zXwCXybX56qHDnxdhvuJ6q8isZK4OV2Qof4d NfEmmUeG+VWFNZvrFML0Ltd5e8OtySl+WrLTM0oky0KeFT0+50XrfDs30UpksxXH 0kKCWBvzDJWdzrG3hdvruP/MiYfCdVed -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org