$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: yl4GOpElC4wYyi3aRBvfIQMPtxOF1vEwuNRzgv/F2t4= Subject key identifier: F6:87:D6:8A:C4:ED:3D:09:D6:7C:22:BA:EA:95:1A:5C:89:18:2D:8A Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 52 Signing time: Fri 31 May 2024 09:00:46 +0000 Manifest this update: Fri 31 May 2024 09:00:45 +0000 Manifest next update: Fri 07 Jun 2024 09:00:45 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: 5VSsWoNYJwPtODiRLmaf6zcjkvuT+lG+LfLc5tVjsJQ=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: vVNH40XtkiHAzgaJbll3kToyBC/aui+ZXTdh2wT62KA=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 02yX7wylzSvAqODHOOq2bhEVbO+mgUt1nCgsJsh9nWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: May 31 09:00:45 2024 GMT Not After : Jun 7 09:00:45 2024 GMT Subject: CN=665991bd-36a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:4c:4e:60:6f:41:2f:12:71:5b:74:b0:e6: 7d:79:4d:fd:b6:39:3b:43:69:fc:3d:b1:10:43:11: 4f:47:48:74:c0:6b:c6:fd:3c:bf:c2:c2:d6:31:22: cc:4f:20:92:1d:09:d5:04:bf:63:d4:1a:10:0d:d2: fe:52:a2:8c:2d:0b:79:e9:55:d3:74:5b:30:fa:06: 79:41:18:8b:7c:a2:4a:7d:12:0d:da:f2:bc:d0:c1: 0f:e8:85:e1:0e:d6:ff:b3:b2:88:f6:36:af:d6:74: 24:2c:68:7b:70:c2:58:4a:27:9d:6d:57:43:64:45: 4d:0a:64:4f:51:97:eb:ae:cf:70:a1:b9:b1:fd:cb: 07:2f:42:6f:4d:70:83:a0:86:56:fd:85:79:4c:93: 44:78:07:cb:a2:1c:13:55:ef:29:92:e1:43:ee:d8: 2c:74:ad:e9:8e:be:93:c9:6a:d8:a9:9c:2f:c3:07: ab:6f:e3:e3:62:8f:e3:25:c3:0c:61:76:a0:cc:c9: ab:e1:8c:82:9f:82:24:5f:c5:5f:fd:a6:cb:21:63: 6e:f9:ca:b1:42:2f:e4:71:66:7b:88:f5:14:cb:04: 66:90:ad:4a:2a:c6:b3:20:c3:f3:01:70:2e:e8:a1: e0:6d:99:06:66:c8:88:d4:85:d5:18:84:c7:f8:6f: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:87:D6:8A:C4:ED:3D:09:D6:7C:22:BA:EA:95:1A:5C:89:18:2D:8A X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:c0:c8:6c:e4:b9:80:95:de:89:05:a4:5d:3d:eb:ca:37: 8a:e4:5c:11:1a:07:41:41:d8:ff:09:1f:c5:cf:97:f6:72:9b: 65:4d:75:b1:6d:77:42:49:3f:24:76:8d:87:b1:47:08:55:b8: 10:9b:aa:df:9d:ce:99:27:4d:56:95:2c:d5:4f:f7:a1:d0:01: 73:13:e8:59:dc:80:91:89:4f:28:65:c8:6c:a4:5b:61:56:6c: e1:22:71:55:23:64:fa:ca:b5:93:50:64:fb:5b:c3:78:2f:e9: c5:07:a0:9f:87:c7:d4:7e:ed:f3:07:93:2b:1a:f2:40:4e:59: c6:65:17:69:5b:77:82:d5:58:e2:47:32:e2:65:06:ca:a0:47: 86:94:91:c8:20:b9:47:14:42:3a:d1:81:8d:51:66:46:ba:74: 5c:1c:43:f3:4e:dd:b0:ae:07:96:31:32:37:fa:cd:d5:d2:69: aa:62:46:00:1f:06:45:e6:76:a9:6a:02:49:4b:97:a2:c9:db: 78:16:9e:1c:47:f5:66:01:53:16:70:af:03:ee:ae:d4:cd:fd: bb:02:e1:a7:1d:3b:e3:dc:2c:b4:3c:f8:9d:69:b8:a5:9a:78: d4:ce:06:b4:fc:8c:5e:1f:2c:4b:32:b2:12:8d:ef:af:3f:1c: 52:a1:1d:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEYzNDExMC8GA1UEBRMoNjQ5NDNCMUQyQkUyRjkzREQ2NDBFMDI0RUI5NEQ4RDM4 RENFNkE4MzAeFw0yNDA1MzEwOTAwNDVaFw0yNDA2MDcwOTAwNDVaMBgxFjAUBgNV BAMTDTY2NTk5MWJkLTM2YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1GUxOYG9BLxJxW3Sw5n15Tf22OTtDafw9sRBDEU9HSHTAa8b9PL/CwtYxIsxP IJIdCdUEv2PUGhAN0v5SoowtC3npVdN0WzD6BnlBGIt8okp9Eg3a8rzQwQ/oheEO 1v+zsoj2Nq/WdCQsaHtwwlhKJ51tV0NkRU0KZE9Rl+uuz3ChubH9ywcvQm9NcIOg hlb9hXlMk0R4B8uiHBNV7ymS4UPu2Cx0remOvpPJatipnC/DB6tv4+Nij+Mlwwxh dqDMyavhjIKfgiRfxV/9psshY275yrFCL+RxZnuI9RTLBGaQrUoqxrMgw/MBcC7o oeBtmQZmyIjUhdUYhMf4byx9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9ofWisTt PQnWfCK66pUaXIkYLYowHwYDVR0jBBgwFoAUZJQ7HSvi+T3WQOAk65TY043OaoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4RjM0LzgxREFFQzVBQjU5 ODExRUU5QTE4Rjk1RkM0RjlBRTAyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2Fv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpRN0hTdmktVDNXUU9BazY1VFkwNDNPYW9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 RjM0LzgxREFFQzVBQjU5ODExRUU5QTE4Rjk1RkM0RjlBRTAyL1pKUTdIU3ZpLVQz V1FPQWs2NVRZMDQzT2FvTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJw6wMhs5LmAld6JBaRdPevKN4rkXBEaB0FB2P8JH8XPl/Zym2VNdbFt d0JJPyR2jYexRwhVuBCbqt+dzpknTVaVLNVP96HQAXMT6FncgJGJTyhlyGykW2FW bOEicVUjZPrKtZNQZPtbw3gv6cUHoJ+Hx9R+7fMHkysa8kBOWcZlF2lbd4LVWOJH MuJlBsqgR4aUkcgguUcUQjrRgY1RZka6dFwcQ/NO3bCuB5YxMjf6zdXSaapiRgAf BkXmdqlqAklLl6LJ23gWnhxH9WYBUxZwrwPurtTN/bsC4acdO+PcLLQ8+J1puKWa eNTOBrT8jF4fLEsyshKN768/HFKhHeU= -----END CERTIFICATE-----Generated at Fri May 31 10:02:41 2024 by rpki-client on console-ams.rpki-client.org