$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: KmySQVFEJ/bKLaHgry+ms+UM5gLBE59t13kzMX5Ca9w= Subject key identifier: 75:8D:27:65:BA:99:03:C7:73:F4:C9:75:E2:DE:BD:4B:CE:9F:E1:B8 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 089F Signing time: Sat 18 May 2024 21:31:45 +0000 Manifest this update: Sat 18 May 2024 21:31:44 +0000 Manifest next update: Sat 25 May 2024 21:31:44 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: wwGW7JIzgZibiqcmd3FKcOBrxIv/yeQUehyITWb6oyY=) 2: FD69130A94D211EA98E6DE1AC4F9AE02.roa (hash: yB1e2qL5T76I8RlDYls9mOLe9toKogCQSsApr8GkIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: May 18 21:31:44 2024 GMT Not After : May 25 21:31:44 2024 GMT Subject: CN=66491e40-73f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:e3:0b:44:6e:99:09:2b:62:72:2b:d5:54: f2:f2:21:58:44:bb:4e:f0:61:d4:09:7e:69:2b:9a: 13:c0:31:2f:e9:8d:30:c7:8d:46:0b:28:c2:2e:a8: 3e:6b:17:28:48:ff:f6:cd:ef:d7:a5:d2:4d:90:0d: 12:f8:c8:e6:73:06:b1:35:5f:a9:65:8d:29:67:25: ee:f4:8f:cf:8b:25:59:e9:29:0c:56:8e:46:b3:f4: d9:0a:e5:98:04:17:54:ad:f7:09:15:99:70:b6:24: 61:21:04:1e:32:0a:e3:0d:2e:a8:90:57:d4:2b:93: d8:dd:f6:bc:c8:60:04:5d:2f:4d:04:71:19:80:4f: 0e:be:e3:6d:a4:29:08:1d:f0:d1:dc:cf:5d:e8:e7: a5:9a:ec:8d:8f:0f:6b:f2:7f:13:f3:7a:3f:8c:c8: e9:89:a0:b7:53:ce:a8:13:dd:61:53:d6:63:9b:86: 4f:aa:d5:c9:47:38:71:72:14:91:4a:d1:83:a5:2d: 13:1c:c0:37:e1:9b:c7:06:57:06:57:6f:32:d6:4a: 4b:d8:8e:17:26:51:7c:bf:eb:b5:7e:55:78:78:ba: a2:a6:e3:93:cb:b4:92:5a:fb:f9:08:1d:82:0c:e6: 3b:19:9e:97:6e:0d:a2:ff:21:73:4a:ce:79:f0:89: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8D:27:65:BA:99:03:C7:73:F4:C9:75:E2:DE:BD:4B:CE:9F:E1:B8 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c2:dd:bb:54:f6:7c:f9:4a:96:1e:90:45:b2:45:28:e7:c0: 4b:0e:0b:b1:f8:d5:68:0b:83:bf:de:9f:55:b6:96:52:8d:a9: 14:a9:ff:7e:d1:62:8f:2a:6f:9e:03:28:00:0d:0f:58:e0:e1: aa:45:33:0a:20:84:2e:20:4e:a0:d7:d4:26:39:ba:e1:d9:d2: 1a:41:24:84:df:bb:90:d9:bb:d4:d1:3d:35:47:48:49:d9:5d: 0b:1c:07:0f:75:7c:dc:57:94:3a:38:20:7d:79:c3:9d:c1:35: 38:b0:e5:5e:b4:b0:d6:d8:65:23:cf:1e:67:38:3e:cb:54:52: a8:ae:96:ad:fe:91:25:6a:0e:58:97:e4:0b:cd:bd:3b:4a:c5: 73:5b:b3:9e:33:8b:39:2e:1b:25:e7:de:f6:0c:27:ec:af:65: 91:ca:83:08:56:2b:41:b4:a8:8e:99:dc:5a:39:97:d2:3f:eb: 24:83:ca:28:89:04:89:1a:e5:72:7b:7f:f6:c7:dc:2c:2c:02: 35:1f:cf:3f:df:ac:fd:e0:f0:14:21:f6:fb:0b:4a:07:52:b2: e9:ae:8b:bf:9e:87:e9:07:6e:b5:01:90:c6:6d:96:6c:b6:f1: 94:b9:1a:9a:a5:f0:cb:ee:10:0b:a2:d5:09:7d:db:c5:ca:85: d2:68:f3:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjQwNTE4MjEzMTQ0WhcNMjQwNTI1MjEzMTQ0WjAYMRYwFAYD VQQDEw02NjQ5MWU0MC03M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4bjC0RumQkrYnIr1VTy8iFYRLtO8GHUCX5pK5oTwDEv6Y0wx41GCyjCLqg+ axcoSP/2ze/XpdJNkA0S+MjmcwaxNV+pZY0pZyXu9I/PiyVZ6SkMVo5Gs/TZCuWY BBdUrfcJFZlwtiRhIQQeMgrjDS6okFfUK5PY3fa8yGAEXS9NBHEZgE8OvuNtpCkI HfDR3M9d6OelmuyNjw9r8n8T83o/jMjpiaC3U86oE91hU9Zjm4ZPqtXJRzhxchSR StGDpS0THMA34ZvHBlcGV28y1kpL2I4XJlF8v+u1flV4eLqipuOTy7SSWvv5CB2C DOY7GZ6Xbg2i/yFzSs558In68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWNJ2W6 mQPHc/TJdeLevUvOn+G4MB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUwt27VPZ8+UqWHpBFskUo58BLDgux+NVoC4O/3p9VtpZSjakUqf9+ 0WKPKm+eAygADQ9Y4OGqRTMKIIQuIE6g19QmObrh2dIaQSSE37uQ2bvU0T01R0hJ 2V0LHAcPdXzcV5Q6OCB9ecOdwTU4sOVetLDW2GUjzx5nOD7LVFKorpat/pElag5Y l+QLzb07SsVzW7OeM4s5Lhsl5972DCfsr2WRyoMIVitBtKiOmdxaOZfSP+skg8oo iQSJGuVye3/2x9wsLAI1H88/36z94PAUIfb7C0oHUrLprou/nofpB261AZDGbZZs tvGUuRqapfDL7hALotUJfdvFyoXSaPP2 -----END CERTIFICATE-----Generated at Sat May 18 22:14:04 2024 by rpki-client on console-fra.rpki-client.org