$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: 1ZENI1I8kN5ItEyylDSrM5Jsbo43KOqaWL6ScUdpKZg= Subject key identifier: 07:DB:E3:0D:98:1F:24:57:36:77:4B:6B:A9:75:D7:8A:1D:10:36:D9 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 3B Signing time: Fri 31 May 2024 09:13:44 +0000 Manifest this update: Fri 31 May 2024 09:13:44 +0000 Manifest next update: Fri 07 Jun 2024 09:13:44 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: rCDvTbQ0M76ZzQSpADP/Vo/M0Buz33JjhgRAmZUwMyo=) 2: 37EB330AC9A411EE98496754C4F9AE02.roa (hash: pq3YmshSa5LiwtO4lXl1oBpAEwDO9Rdm27qbxdhtJJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: May 31 09:13:44 2024 GMT Not After : Jun 7 09:13:44 2024 GMT Subject: CN=665994c8-4bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:07:2e:c7:fe:7e:73:83:a8:0a:e7:6b:57:a7: 5e:d0:4d:ac:bb:96:b9:47:b3:37:9a:5e:0a:39:6c: 97:9a:48:9e:30:97:ec:3a:da:52:48:b2:3b:36:5e: 78:49:68:9b:8e:1c:0e:cb:cc:7d:47:72:c2:cd:ce: 9a:e9:5a:65:14:45:cd:bd:8b:1f:0d:3d:60:9a:e4: 88:bb:eb:7c:58:66:4e:4c:54:73:01:bf:7d:2c:3a: f4:3c:7e:9e:24:80:fc:fe:5d:63:ee:cc:09:d1:2f: 58:8a:54:59:7d:64:b7:1e:4d:37:26:b6:e4:10:6c: 73:30:ec:e7:e3:94:6e:e7:30:5c:3d:d3:eb:61:37: 70:4f:a0:0a:ce:d6:87:c7:61:8a:4f:62:f1:b6:39: f2:cd:17:ff:81:f9:34:be:46:4e:4c:cc:9c:94:22: 56:ab:12:d2:c8:70:11:b0:a3:16:aa:8a:d2:02:9c: a0:42:69:36:fd:04:07:7c:c8:79:41:50:6c:65:5c: 2f:83:e4:15:56:85:e0:75:0a:05:7d:1e:8b:fe:81: 06:05:83:67:90:42:e6:bc:1c:5f:0b:68:62:61:01: 29:58:0c:42:aa:07:bc:08:55:15:95:4f:51:52:c6: 83:52:3a:2b:21:85:7f:88:6b:bc:d5:6a:e5:21:5a: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DB:E3:0D:98:1F:24:57:36:77:4B:6B:A9:75:D7:8A:1D:10:36:D9 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f1:2c:62:36:f4:94:aa:cd:06:7e:71:89:5e:9d:1f:21:28: 45:96:71:36:fa:ad:a8:b1:62:92:e7:28:a4:70:63:5e:52:28: 25:ed:5f:73:ed:80:78:5e:67:29:b1:50:3d:02:ee:15:1b:6a: 46:04:e1:c1:04:47:4c:a6:a0:a8:d6:76:bc:4f:6e:2b:31:dc: 66:f1:16:0b:12:34:c4:65:54:d5:c6:b9:0b:20:d4:2d:b6:4b: 51:da:ab:db:d7:09:df:8a:87:4d:0b:56:d8:36:38:3b:73:9d: bd:c7:7e:68:13:8f:19:67:b7:4c:4c:3b:1b:a2:41:f7:6c:54: d4:06:78:1d:fa:e7:98:f4:01:1f:68:54:43:f1:e6:ce:ef:5d: 9d:b2:4a:26:bc:ea:e4:7e:aa:0c:80:86:e3:bb:74:64:11:e4: d9:b1:04:57:90:e6:26:94:98:5b:6c:bb:b8:f8:8b:d1:c8:23: 47:bf:03:74:97:e3:59:a6:dd:0b:76:34:19:cb:0c:7b:a1:cc: c5:0e:7f:6b:d3:a9:77:1c:ce:95:92:35:53:0d:b2:ce:c5:89: 18:13:9f:f6:1c:9a:c7:d3:9b:7a:09:f7:fe:ff:a1:f7:49:b4: ef:78:55:55:ac:79:05:02:fc:e5:99:26:22:82:7d:5c:c9:20: 62:1f:21:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NEU2MjExMC8GA1UEBRMoNjU4MDkxMEI1NUZBRTVGRjYwRjcxRUIyMDcwNDcwQTEy NjJFMzQzQjAeFw0yNDA1MzEwOTEzNDRaFw0yNDA2MDcwOTEzNDRaMBgxFjAUBgNV BAMTDTY2NTk5NGM4LTRiZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD/By7H/n5zg6gK52tXp17QTay7lrlHszeaXgo5bJeaSJ4wl+w62lJIsjs2XnhJ aJuOHA7LzH1HcsLNzprpWmUURc29ix8NPWCa5Ii763xYZk5MVHMBv30sOvQ8fp4k gPz+XWPuzAnRL1iKVFl9ZLceTTcmtuQQbHMw7OfjlG7nMFw90+thN3BPoArO1ofH YYpPYvG2OfLNF/+B+TS+Rk5MzJyUIlarEtLIcBGwoxaqitICnKBCaTb9BAd8yHlB UGxlXC+D5BVWheB1CgV9Hov+gQYFg2eQQua8HF8LaGJhASlYDEKqB7wIVRWVT1FS xoNSOishhX+Ia7zVauUhWqghAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB9vjDZgf JFc2d0trqXXXih0QNtkwHwYDVR0jBBgwFoAUZYCRC1X65f9g9x6yBwRwoSYuNDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RTYyLzcwMkEwMjhDQzk5 RjExRUVBODE1OEU3OUM0RjlBRTAyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWllDUkMxWDY1ZjlnOXg2eUJ3UndvU1l1TkRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 RTYyLzcwMkEwMjhDQzk5RjExRUVBODE1OEU3OUM0RjlBRTAyL1pZQ1JDMVg2NWY5 Zzl4NnlCd1J3b1NZdU5Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrxLGI29JSqzQZ+cYlenR8hKEWWcTb6raixYpLnKKRwY15SKCXtX3Pt gHheZymxUD0C7hUbakYE4cEER0ymoKjWdrxPbisx3GbxFgsSNMRlVNXGuQsg1C22 S1Haq9vXCd+Kh00LVtg2ODtznb3HfmgTjxlnt0xMOxuiQfdsVNQGeB3655j0AR9o VEPx5s7vXZ2ySia86uR+qgyAhuO7dGQR5NmxBFeQ5iaUmFtsu7j4i9HII0e/A3SX 41mm3Qt2NBnLDHuhzMUOf2vTqXcczpWSNVMNss7FiRgTn/YcmsfTm3oJ9/7/ofdJ tO94VVWseQUC/OWZJiKCfVzJIGIfIcs= -----END CERTIFICATE-----Generated at Fri May 31 10:42:51 2024 by rpki-client on console-fra.rpki-client.org