$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: 9Vn1QXvXY3dGszkNRYL+pKxoSjdvjMElkdb9RWWbLYU= Subject key identifier: 11:F8:CA:AE:C6:B6:5A:6A:0D:BB:34:6F:71:05:82:72:48:6D:42:0B Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 5A Signing time: Wed 29 May 2024 08:28:54 +0000 Manifest this update: Wed 29 May 2024 08:28:53 +0000 Manifest next update: Wed 05 Jun 2024 08:28:53 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: KDpG43gkO6+Wak13aGPn3Ka/T409RM5vfYlrO/5lyzA=) 2: 1CFF4196D25D11EE8265DF1BC4F9AE02.roa (hash: VgrMolXlnMmBdnFruJODhCZjJyPACP+Qk3+uCDVN0dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: May 29 08:28:53 2024 GMT Not After : Jun 5 08:28:53 2024 GMT Subject: CN=6656e746-50b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:6b:64:70:94:04:b1:7b:75:d9:b1:ef:8f: 8c:4d:a1:ec:04:76:e9:b5:7e:44:61:f9:c3:1d:af: 62:e8:4e:4c:b9:62:4e:c9:b8:1f:5a:c4:17:b2:c2: fa:bd:d3:14:92:8e:34:84:8c:bf:bf:25:ad:69:dd: 00:a2:37:2a:66:22:7a:95:90:36:3c:3b:6a:d9:9c: a5:49:1e:d1:25:1d:2f:cc:6a:72:bb:36:4b:fb:ac: 25:6d:c6:e5:ce:b1:c9:c7:19:01:62:53:d5:38:c8: f1:88:da:5d:e3:1a:cf:59:16:fc:a9:f4:c1:dd:ff: e0:63:69:06:1e:86:fb:ad:99:d1:36:0b:65:21:04: 47:80:be:c2:3a:6c:44:97:b8:b7:0d:54:d0:ce:95: bf:27:b7:b7:2c:c1:4c:5f:08:cb:36:52:9a:90:f9: 8a:d5:87:c3:a7:00:51:a3:1d:08:46:b5:7d:64:5f: df:01:ba:e3:a8:c5:60:c2:6c:1a:fc:83:21:71:5f: 3a:e6:69:91:82:48:30:e7:eb:13:aa:32:f1:a1:4b: f7:37:32:66:28:1c:7a:5b:d9:69:a2:55:50:ce:39: 65:9c:3d:00:46:42:25:9e:71:d1:26:08:33:24:e6: 44:f7:0a:53:ab:91:5d:15:33:5c:ca:54:26:1e:3f: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F8:CA:AE:C6:B6:5A:6A:0D:BB:34:6F:71:05:82:72:48:6D:42:0B X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:fd:fb:da:ce:37:c7:b9:ef:3f:8d:75:a4:fc:e0:74:be:65: 24:8f:93:ff:92:0d:91:3d:52:04:26:ce:8c:ff:b3:52:6d:77: f4:07:62:07:72:8c:1f:1c:fa:11:df:75:1b:68:ab:b5:ac:79: a0:da:ec:54:62:be:8b:64:6b:58:3e:f7:fa:a4:43:a7:d1:f7: e4:f7:c6:21:43:24:bb:8d:4b:7c:81:de:7b:64:c0:15:3c:c8: 74:47:76:d5:ad:4f:8a:56:13:fd:0c:de:3d:dc:6e:27:9f:56: 3d:7e:0b:31:e9:7c:3d:a4:53:64:0f:39:54:08:65:fa:66:83: 3d:95:d3:d6:76:c2:87:e7:e4:bc:50:7d:60:d9:bc:58:b8:d1: eb:ec:c6:59:56:0b:49:03:a7:f0:7b:89:5e:8f:41:bd:39:74: 1d:ba:6c:16:8b:4b:66:bb:88:66:6a:77:b0:a6:b1:c3:a0:d7: 4d:d9:0b:63:d6:da:01:34:90:66:f5:30:f8:48:33:2d:34:77: eb:3b:2f:c5:a6:bf:44:c0:49:35:1f:ad:d7:5f:65:a8:4a:71: b3:05:b8:5a:ef:41:11:88:bc:ae:aa:81:1e:b7:bb:05:80:3e: 2b:97:59:2b:16:63:d8:ca:aa:93:dd:e8:2e:ab:11:f0:bd:ab: 1d:52:b7:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlDNTExMC8GA1UEBRMoNjY3NjFDQ0QxQjRDODgzODRFNkE0MDQwMjhDRDlBOUY4 MDlERTI3NjAeFw0yNDA1MjkwODI4NTNaFw0yNDA2MDUwODI4NTNaMBgxFjAUBgNV BAMTDTY2NTZlNzQ2LTUwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjQ2tkcJQEsXt12bHvj4xNoewEdum1fkRh+cMdr2LoTky5Yk7JuB9axBeywvq9 0xSSjjSEjL+/Ja1p3QCiNypmInqVkDY8O2rZnKVJHtElHS/ManK7Nkv7rCVtxuXO scnHGQFiU9U4yPGI2l3jGs9ZFvyp9MHd/+BjaQYehvutmdE2C2UhBEeAvsI6bESX uLcNVNDOlb8nt7cswUxfCMs2UpqQ+YrVh8OnAFGjHQhGtX1kX98BuuOoxWDCbBr8 gyFxXzrmaZGCSDDn6xOqMvGhS/c3MmYoHHpb2WmiVVDOOWWcPQBGQiWecdEmCDMk 5kT3ClOrkV0VM1zKVCYeP7fFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEfjKrsa2 WmoNuzRvcQWCckhtQgswHwYDVR0jBBgwFoAUZnYczRtMiDhOakBAKM2an4Cd4nYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUM1Lzc0QjE2Qzc2OTU5 OTExRUVCQTNDQjI3NUM0RjlBRTAyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWm5ZY3pSdE1pRGhPYWtCQUtNMmFuNENkNG5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUM1Lzc0QjE2Qzc2OTU5OTExRUVCQTNDQjI3NUM0RjlBRTAyL1puWWN6UnRNaURo T2FrQkFLTTJhbjRDZDRuWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALX9+9rON8e57z+NdaT84HS+ZSSPk/+SDZE9UgQmzoz/s1Jtd/QHYgdy jB8c+hHfdRtoq7WseaDa7FRivotka1g+9/qkQ6fR9+T3xiFDJLuNS3yB3ntkwBU8 yHRHdtWtT4pWE/0M3j3cbiefVj1+CzHpfD2kU2QPOVQIZfpmgz2V09Z2wofn5LxQ fWDZvFi40evsxllWC0kDp/B7iV6PQb05dB26bBaLS2a7iGZqd7CmscOg103ZC2PW 2gE0kGb1MPhIMy00d+s7L8Wmv0TASTUfrddfZahKcbMFuFrvQRGIvK6qgR63uwWA PiuXWSsWY9jKqpPd6C6rEfC9qx1St6c= -----END CERTIFICATE-----Generated at Wed May 29 09:16:48 2024 by rpki-client on console-fra.rpki-client.org