$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: 5MEYKc4BtarJJIJnbQX2/dgtaep9x5MD/tvKRZVgXME= Subject key identifier: 10:39:CB:98:5D:EF:46:77:58:86:20:38:BC:AE:92:24:98:C8:00:01 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1CAB Signing time: Sat 18 May 2024 16:33:37 +0000 Manifest this update: Sat 18 May 2024 16:33:36 +0000 Manifest next update: Sat 25 May 2024 16:33:36 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: HQyHIh5HtGcEV6C3ff4Lj+uAS4JTGMH2LgxtoUBRuXk=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: ce/f73SfrYJPg/gjQh7xIiEuRGOCIfNjuOOVpMGHrCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7362 (0x1cc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: May 18 16:33:36 2024 GMT Not After : May 25 16:33:36 2024 GMT Subject: CN=6648d861-79d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:44:57:97:63:43:15:83:ba:fb:e9:fc:40: 98:1c:b2:f0:ec:c1:42:14:2f:2b:6a:12:24:22:12: ab:fd:70:e7:fa:c6:32:27:2f:25:0d:9b:90:8f:72: 72:b0:f9:34:cf:48:14:16:76:ac:54:c9:8f:96:85: 75:8c:52:7d:1b:27:12:a0:a2:29:a2:6e:8a:06:ed: fd:43:1e:17:5d:d8:18:8e:31:73:7f:5a:75:22:ae: 19:74:69:06:9b:22:58:52:30:62:1a:72:68:02:67: ce:f5:da:f7:2a:35:01:b1:16:77:aa:db:c4:af:70: 23:f2:0e:95:32:44:48:46:9d:14:b4:c4:bc:89:eb: 7b:1b:95:33:d9:b3:fa:05:83:96:fc:08:0a:a2:d8: 26:08:07:39:69:65:8c:6a:50:9d:26:35:94:0f:2a: ea:a3:14:27:51:1e:58:5d:ca:54:83:5d:82:47:77: 5b:b5:67:f4:7c:1c:a2:61:df:95:8b:6f:f2:b7:76: 9b:10:82:9e:77:cf:cb:26:9b:1d:03:8b:f9:bf:f9: 8b:a6:57:2e:dd:f8:48:8e:93:47:99:7c:b1:18:1b: db:a0:79:2b:a6:ca:ee:46:85:1b:4b:83:2d:59:35: 13:c9:7c:52:d3:68:50:ee:a8:58:8d:f8:b5:41:92: 98:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:39:CB:98:5D:EF:46:77:58:86:20:38:BC:AE:92:24:98:C8:00:01 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:89:e6:1f:ef:6d:99:a3:1f:54:7c:f1:db:74:d8:1c:5a:fd: bc:49:67:7c:c7:28:83:c9:c0:52:b0:8a:f0:e7:88:ea:34:5b: 04:a3:5d:95:77:79:85:1a:55:f6:a6:46:5f:53:51:5f:3e:e2: 90:76:1b:93:df:b9:2b:89:a1:f8:c4:90:b6:66:51:a9:2e:ca: 63:6d:e0:44:60:f9:08:ce:c5:b9:65:d3:e0:1f:83:c2:07:ce: 5f:08:cd:64:8c:9a:a5:28:a8:49:8e:4c:84:4b:5b:f2:94:02: c0:56:32:f3:4f:a3:e1:ec:fb:3b:62:48:cc:fe:0f:f5:10:09: 8c:54:a6:7e:89:57:98:1e:2c:0f:34:e2:85:04:5c:a7:f5:e7: f7:52:85:79:fd:c1:83:f6:a6:37:23:f3:b5:98:07:f1:13:57: ed:39:26:80:88:4c:22:1a:c9:c4:7a:8b:f2:c7:4f:bb:bd:ab: 67:f6:c2:f3:b5:ad:a1:11:49:b8:36:18:e0:0b:df:8e:50:f5: 5b:9c:b2:b0:7a:85:7a:42:a4:f2:1f:99:03:98:d6:72:11:47: 66:fe:ea:6d:8d:76:a2:50:08:41:32:8b:5a:58:72:82:76:25: 1b:f3:c3:69:83:c5:81:d8:21:bf:d0:1a:44:6a:7c:ad:8b:5b: e7:32:cd:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjQwNTE4MTYzMzM2WhcNMjQwNTI1MTYzMzM2WjAYMRYwFAYD VQQDEw02NjQ4ZDg2MS03OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovxEV5djQxWDuvvp/ECYHLLw7MFCFC8rahIkIhKr/XDn+sYyJy8lDZuQj3Jy sPk0z0gUFnasVMmPloV1jFJ9GycSoKIpom6KBu39Qx4XXdgYjjFzf1p1Iq4ZdGkG myJYUjBiGnJoAmfO9dr3KjUBsRZ3qtvEr3Aj8g6VMkRIRp0UtMS8iet7G5Uz2bP6 BYOW/AgKotgmCAc5aWWMalCdJjWUDyrqoxQnUR5YXcpUg12CR3dbtWf0fByiYd+V i2/yt3abEIKed8/LJpsdA4v5v/mLplcu3fhIjpNHmXyxGBvboHkrpsruRoUbS4Mt WTUTyXxS02hQ7qhYjfi1QZKY1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA5y5hd 70Z3WIYgOLyukiSYyAABMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMieYf722Zox9UfPHbdNgcWv28SWd8xyiDycBSsIrw54jqNFsEo12V d3mFGlX2pkZfU1FfPuKQdhuT37kriaH4xJC2ZlGpLspjbeBEYPkIzsW5ZdPgH4PC B85fCM1kjJqlKKhJjkyES1vylALAVjLzT6Ph7Ps7YkjM/g/1EAmMVKZ+iVeYHiwP NOKFBFyn9ef3UoV5/cGD9qY3I/O1mAfxE1ftOSaAiEwiGsnEeovyx0+7vatn9sLz ta2hEUm4NhjgC9+OUPVbnLKweoV6QqTyH5kDmNZyEUdm/uptjXaiUAhBMotaWHKC diUb88Npg8WB2CG/0BpEanyti1vnMs1l -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org