$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json) Hash identifier: uGtW8J3prVZNqO9HRSRyJVNd1I8+iQ6N80rNtvqQQro= Subject key identifier: 40:13:5F:B9:BB:B0:00:74:11:74:C8:C3:9B:CC:C8:6D:72:58:E8:46 Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Certificate serial: 2852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft Manifest number: 2835 Signing time: Fri 31 May 2024 15:58:58 +0000 Manifest this update: Fri 31 May 2024 15:58:58 +0000 Manifest next update: Fri 07 Jun 2024 15:58:58 +0000 Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: xkXlZioP1gAMehK5EvQYylaiH0AVa2Zke0GEEdz862Q=) 2: F4246CDA561811E98A165872C4F9AE02.roa (hash: qqcgVf3R5iW0yFC9ut5EMQrhE+oKVoowhStxRcRW600=) 3: 5B0D0BFE04D411EAA7E3F81FC4F9AE02.roa (hash: rwCF53o/2VLZF/xLvGMTlFyQCHhpOILr4tGZzUzVyo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10322 (0x2852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Validity Not Before: May 31 15:58:58 2024 GMT Not After : Jun 7 15:58:58 2024 GMT Subject: CN=6659f3c2-123b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:ca:bb:1c:3f:6f:fb:a9:e6:8d:ac:9a:a6: 1a:75:a1:63:32:fd:73:18:38:8d:f1:da:ad:da:92: 6a:a0:5a:37:74:5f:af:80:2c:74:9f:95:07:89:51: 0a:4b:40:b8:cb:c5:dc:3e:c8:7f:bb:40:65:59:2a: 89:b1:65:98:4f:27:87:36:b5:13:55:b8:9c:97:2f: 16:23:52:38:59:1d:fb:16:51:d5:22:c2:71:9a:64: d8:6a:6c:2b:1b:59:29:11:90:cb:d4:86:f9:02:62: 61:4b:0a:01:48:d8:34:65:0e:fd:17:01:16:20:c3: 45:ab:d3:3a:0f:ed:b1:2d:8d:84:05:8e:32:30:5d: 57:cf:33:0f:12:75:a2:e6:cd:85:df:bc:d1:ba:8d: b9:37:cd:6c:3f:bf:43:0d:fd:1f:47:ad:3b:df:f0: 8f:bf:8d:f3:f1:a1:c8:a2:2e:38:93:a6:8a:86:8c: 2c:12:7d:f9:b6:d6:9b:97:59:47:09:7b:40:6c:25: a2:6e:21:40:a6:03:81:60:c5:5c:c8:35:6d:a3:5b: c7:45:4c:ad:85:44:74:6b:31:1e:11:0a:b0:cd:00: 82:64:b0:ab:45:b6:fe:f5:2e:63:06:a1:22:48:87: f8:a9:43:83:5c:85:67:ce:5d:0f:02:96:34:d7:ed: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:5F:B9:BB:B0:00:74:11:74:C8:C3:9B:CC:C8:6D:72:58:E8:46 X509v3 Authority Key Identifier: keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:38:03:99:8d:73:49:2f:c7:a3:ed:d7:ab:8c:1d:52:3d:14: b4:28:ec:e5:68:ec:8b:14:a1:88:91:d1:4c:07:93:ac:56:69: 3b:42:05:a0:79:fb:83:f7:86:ba:1a:99:be:d3:05:f4:26:dd: 5c:93:e4:dd:9a:e7:80:f0:a7:c1:ac:ee:06:cf:1e:68:36:04: a2:84:a3:7e:c3:9a:d0:bb:ff:0c:32:4e:55:f7:09:a8:fa:58: bd:df:8e:24:19:a9:a4:28:90:a2:63:78:2f:ce:39:ee:b2:d3: 1b:9d:b8:da:1b:38:15:70:64:43:fe:9c:a3:6e:b8:f0:88:90: 73:00:32:e7:3e:a7:ed:49:bb:69:e4:eb:5a:a1:6f:0f:9c:35: 34:d3:72:9b:78:eb:76:64:d4:9a:be:6f:b8:14:e9:2e:c6:fc: 95:ff:81:6f:97:9e:c8:d1:e6:b8:ba:0f:0b:96:52:43:b2:a7: 73:40:3b:33:86:ec:03:92:00:ef:d1:c9:55:82:36:bd:f2:bb: 9a:7b:ce:65:a0:37:66:0b:8e:db:33:87:4c:ed:6f:e2:19:28: 40:bd:98:96:5f:df:17:88:b8:8c:c5:26:fb:9c:96:7b:6a:b6: 2e:61:b0:46:73:92:9d:12:8b:e2:d0:95:01:51:fd:95:61:d8: 4c:62:0f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1MTcxMTAvBgNVBAUTKDY3NUYzQkExRjk2QTlFMUVDMkIwMTM3NjYyQzc1NERC MUQxRTAwNzMwHhcNMjQwNTMxMTU1ODU4WhcNMjQwNjA3MTU1ODU4WjAYMRYwFAYD VQQDEw02NjU5ZjNjMi0xMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy03Kuxw/b/up5o2smqYadaFjMv1zGDiN8dqt2pJqoFo3dF+vgCx0n5UHiVEK S0C4y8XcPsh/u0BlWSqJsWWYTyeHNrUTVbicly8WI1I4WR37FlHVIsJxmmTYamwr G1kpEZDL1Ib5AmJhSwoBSNg0ZQ79FwEWIMNFq9M6D+2xLY2EBY4yMF1XzzMPEnWi 5s2F37zRuo25N81sP79DDf0fR6073/CPv43z8aHIoi44k6aKhowsEn35ttabl1lH CXtAbCWibiFApgOBYMVcyDVto1vHRUythUR0azEeEQqwzQCCZLCrRbb+9S5jBqEi SIf4qUODXIVnzl0PApY01+2UqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEATX7m7 sAB0EXTIw5vMyG1yWOhGMB8GA1UdIwQYMBaAFGdfO6H5ap4ewrATdmLHVNsdHgBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDUxNy80MDZGOTA0QzZB RTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5oN0NzQk4yWXNkVTJ4MGVB SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxODdvZmxxbmg3Q3NCTjJZc2RVMngwZUFITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDUxNy80MDZGOTA0QzZBRTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5o N0NzQk4yWXNkVTJ4MGVBSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwOAOZjXNJL8ej7derjB1SPRS0KOzlaOyLFKGIkdFMB5OsVmk7QgWg efuD94a6Gpm+0wX0Jt1ck+TdmueA8KfBrO4Gzx5oNgSihKN+w5rQu/8MMk5V9wmo +li9344kGamkKJCiY3gvzjnustMbnbjaGzgVcGRD/pyjbrjwiJBzADLnPqftSbtp 5OtaoW8PnDU003KbeOt2ZNSavm+4FOkuxvyV/4Fvl57I0ea4ug8LllJDsqdzQDsz huwDkgDv0clVgja98ruae85loDdmC47bM4dM7W/iGShAvZiWX98XiLiMxSb7nJZ7 arYuYbBGc5KdEovi0JUBUf2VYdhMYg92 -----END CERTIFICATE-----Generated at Fri May 31 17:44:51 2024 by rpki-client on console-fra.rpki-client.org