$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json) Hash identifier: z6MhErAeoC8Lev7sdNGog1umBnAH6cdyLh9ddmaBGw4= Subject key identifier: 67:B8:7E:FF:D7:17:08:BA:D6:D4:D8:EE:1C:D8:EE:E2:1E:A8:C1:F5 Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft Manifest number: 0591 Signing time: Sat 01 Jun 2024 01:22:55 +0000 Manifest this update: Sat 01 Jun 2024 01:22:54 +0000 Manifest next update: Sat 08 Jun 2024 01:22:54 +0000 Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: x56ZDPssRqKDqNgkprPYNjkfrVhidVLKYEp3x+Dx5NI=) 2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: gN20eSl2skswrdrcUqtb74Ij5G3tYV7HZBj24U3U0oo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Jun 1 01:22:54 2024 GMT Not After : Jun 8 01:22:54 2024 GMT Subject: CN=665a77ef-d227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:b8:bd:7b:74:82:ca:c2:08:a1:da:11:46: 85:76:a6:da:c7:6f:5a:c3:6b:59:0f:10:2e:fc:5e: 56:ff:4e:7c:42:07:99:9a:7f:1c:3f:8f:8e:10:99: a5:0a:2f:ba:82:5d:bb:ba:ff:b4:d2:8f:8e:5b:46: 24:76:b7:6f:6d:8f:87:92:57:22:bf:a8:03:93:dc: 52:fc:f7:05:0f:53:8f:52:84:c2:5f:d5:c3:5d:c4: c4:68:4a:62:d9:5e:a9:92:db:6e:91:aa:49:94:dd: 0f:d0:21:77:45:97:38:70:e7:93:56:84:de:03:28: 94:89:94:68:64:23:a5:7a:49:4a:c1:91:68:68:03: e0:c9:01:12:3c:ff:d5:6f:be:bd:eb:e9:02:83:5a: 3f:4f:f1:b2:70:28:d2:b3:18:ce:6b:c4:19:2b:15: a4:d6:1d:61:4b:10:9e:6c:90:dc:78:a6:a7:78:1d: a2:fc:ac:f2:96:29:8d:35:37:fb:d2:b2:02:8f:95: 3a:a6:52:f5:ef:ab:44:27:60:b7:57:9e:b4:f8:c2: a1:ff:7a:78:84:44:b8:12:3d:dd:3d:18:40:d2:0e: 2f:da:dc:32:23:0d:36:cf:fe:8a:90:c8:b6:2c:49: 67:a6:a7:03:62:be:e5:be:9a:66:6e:8e:b0:34:b1: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B8:7E:FF:D7:17:08:BA:D6:D4:D8:EE:1C:D8:EE:E2:1E:A8:C1:F5 X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:db:2e:69:28:03:27:2c:c7:a8:86:e5:07:6d:a1:d7:40:9a: 42:2f:e5:0b:1f:d0:7c:97:cb:ef:bd:53:62:39:58:88:83:d6: e8:0f:fc:2a:14:b8:22:0a:de:81:5a:77:f6:93:db:20:8c:cb: 16:65:b2:fd:63:84:b8:33:fd:b9:ee:39:9b:12:bd:c8:32:aa: cd:75:10:ba:bd:43:fb:28:b2:c5:dd:d5:eb:a7:e8:19:c8:ef: 10:41:7d:ba:7d:c5:79:e8:ea:4e:00:29:1c:82:56:da:e0:0a: df:0d:c0:7f:1f:cf:8d:85:b7:a5:ad:bd:d4:ae:df:d6:76:60: 3e:c9:ae:b2:ce:ee:f8:e4:81:85:03:60:d3:d2:4b:1b:49:8d: bd:3a:80:58:c2:cf:3d:49:ee:42:44:3a:fb:f8:10:15:af:8e: 73:7b:9e:a1:76:06:95:af:ef:15:d8:da:9b:19:f7:b8:0a:b6: b4:26:89:c5:1f:6b:a0:90:d4:b0:71:9f:53:50:2e:df:49:d1: 08:ff:d3:e6:95:dd:90:b4:0f:fa:df:77:5e:03:d8:65:72:ef: c3:d3:61:8d:69:d6:66:f2:c3:fa:4c:b8:96:ca:c9:f1:1b:07: fb:ca:ad:ba:31:89:aa:12:dc:d5:e2:4a:98:64:e3:4c:67:eb: fc:b7:20:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjQwNjAxMDEyMjU0WhcNMjQwNjA4MDEyMjU0WjAYMRYwFAYD VQQDEw02NjVhNzdlZi1kMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunu4vXt0gsrCCKHaEUaFdqbax29aw2tZDxAu/F5W/058QgeZmn8cP4+OEJml Ci+6gl27uv+00o+OW0YkdrdvbY+Hklciv6gDk9xS/PcFD1OPUoTCX9XDXcTEaEpi 2V6pkttukapJlN0P0CF3RZc4cOeTVoTeAyiUiZRoZCOleklKwZFoaAPgyQESPP/V b7696+kCg1o/T/GycCjSsxjOa8QZKxWk1h1hSxCebJDceKaneB2i/KzylimNNTf7 0rICj5U6plL176tEJ2C3V560+MKh/3p4hES4Ej3dPRhA0g4v2twyIw02z/6KkMi2 LElnpqcDYr7lvppmbo6wNLGItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe4fv/X Fwi61tTY7hzY7uIeqMH1MB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjMxNy80RkQ1NzY4MDhDNkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtf blNheE9scW40M2JQdGZCcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg2y5pKAMnLMeohuUHbaHXQJpCL+ULH9B8l8vvvVNiOViIg9boD/wq FLgiCt6BWnf2k9sgjMsWZbL9Y4S4M/257jmbEr3IMqrNdRC6vUP7KLLF3dXrp+gZ yO8QQX26fcV56OpOACkcglba4ArfDcB/H8+Nhbelrb3Urt/WdmA+ya6yzu745IGF A2DT0ksbSY29OoBYws89Se5CRDr7+BAVr45ze56hdgaVr+8V2NqbGfe4Cra0JonF H2ugkNSwcZ9TUC7fSdEI/9Pmld2QtA/633deA9hlcu/D02GNadZm8sP6TLiWysnx Gwf7yq26MYmqEtzV4kqYZONMZ+v8tyAk -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:18 2024 by rpki-client on console-fra.rpki-client.org