$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: GwOrW6pTeZXWBR9bQm56deq8gqiVYCMe85emKkAipys= Subject key identifier: 99:C7:98:18:2D:E9:C4:CB:DC:47:AA:F4:2B:44:8F:34:AC:05:04:5A Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 341D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 33F3 Signing time: Sat 18 May 2024 14:30:24 +0000 Manifest this update: Sat 18 May 2024 14:30:23 +0000 Manifest next update: Sat 25 May 2024 14:30:23 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: TpBYMfN+8VCfXw+p2UAM4pf/OW1BSnERmxzSnx1AQd4=) 2: 6AB08D12561011E78FC5FE7FC4F9AE02.roa (hash: 61kZnassBc8stF0ur52qBGG83zIwRfm1r942cp5jHsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13341 (0x341d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: May 18 14:30:23 2024 GMT Not After : May 25 14:30:23 2024 GMT Subject: CN=6648bb7f-3b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:68:d6:d6:ef:59:ef:aa:1a:10:6d:d2:7e: d7:15:2d:9e:a8:7a:ac:03:9a:5d:e3:82:26:5a:67: eb:b8:f7:dc:a0:ba:00:7b:3b:40:a4:58:ae:f6:37: 22:da:b8:a3:fa:7c:d0:66:5c:ea:57:af:aa:cf:7f: bc:53:56:b5:29:14:68:53:6f:ae:5e:68:62:41:55: dd:4e:57:97:71:2e:25:11:b3:6c:3e:76:78:32:88: c4:b8:f8:22:b5:76:c0:40:ef:b9:fe:15:3f:f8:fc: 43:17:38:69:96:0f:38:47:d7:e8:bb:0e:ea:39:0b: 48:b6:ff:9d:f0:bb:9b:09:06:d1:ab:cf:d7:7c:21: 1a:84:bd:91:9c:dc:29:a9:a7:b2:39:ec:3a:fe:10: a9:d3:73:10:e4:14:7c:6e:4d:fd:ce:32:49:66:2d: 66:6e:fa:4b:23:0e:f8:35:47:d7:e5:a7:dc:52:ef: 5c:8a:99:e1:d8:8b:b1:1b:07:b9:b4:b1:b7:78:09: 09:ca:db:e9:d1:56:c9:ca:ab:a8:03:2e:e2:3f:ca: c6:50:7e:8a:0b:aa:11:98:d9:44:47:82:b2:55:08: bc:c1:0e:05:ce:a9:b1:f2:e7:4b:40:92:16:36:b7: 0a:00:66:be:54:15:77:91:92:ce:4f:da:f4:95:ca: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:98:18:2D:E9:C4:CB:DC:47:AA:F4:2B:44:8F:34:AC:05:04:5A X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ac:ea:ef:24:10:31:74:ff:3d:c7:6f:01:3a:a4:ff:88:33: d9:de:a6:4f:95:d3:0b:59:e7:59:b2:8a:e1:8a:a3:8a:ef:4d: f4:81:0b:83:3f:e0:a1:9a:15:6a:b8:18:51:d6:97:0c:5e:cb: 91:a5:5e:0c:76:8e:a5:4f:0b:c5:f6:59:bd:7d:e3:69:0e:eb: 44:a5:6b:a2:00:6f:50:f9:57:b2:f3:b1:3d:df:6f:f9:f1:4a: e4:f0:bb:ab:f9:c3:cd:82:08:5c:ce:6b:e5:9f:e9:5d:78:b6: c0:67:53:4f:0e:0e:3e:97:03:48:60:ed:09:a9:ec:15:ff:39: 0b:ab:4b:02:a7:75:76:cb:9b:5c:de:8a:55:c0:2d:30:ba:9d: 8f:a9:41:76:ea:d4:c7:db:f5:bb:1d:ab:a1:2a:e7:ae:8f:b5: b5:72:f0:7c:d7:6d:85:e1:19:4a:0a:1d:72:04:d0:b4:84:1e: b8:aa:4a:4b:bc:0c:3e:6d:b4:54:60:fb:91:ce:62:75:ba:7c: cc:b7:88:e0:92:3b:f0:08:0e:fb:96:22:d9:64:16:1b:f5:ca: bf:6e:6f:a0:64:94:e6:79:e1:4d:5f:88:20:2d:9b:77:3d:00: a0:99:d8:f0:53:4e:66:22:40:17:8c:0c:5f:08:61:37:49:f7: da:57:e9:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjQwNTE4MTQzMDIzWhcNMjQwNTI1MTQzMDIzWjAYMRYwFAYD VQQDEw02NjQ4YmI3Zi0zYjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mxo1tbvWe+qGhBt0n7XFS2eqHqsA5pd44ImWmfruPfcoLoAeztApFiu9jci 2rij+nzQZlzqV6+qz3+8U1a1KRRoU2+uXmhiQVXdTleXcS4lEbNsPnZ4MojEuPgi tXbAQO+5/hU/+PxDFzhplg84R9fouw7qOQtItv+d8LubCQbRq8/XfCEahL2RnNwp qaeyOew6/hCp03MQ5BR8bk39zjJJZi1mbvpLIw74NUfX5afcUu9cipnh2IuxGwe5 tLG3eAkJytvp0VbJyquoAy7iP8rGUH6KC6oRmNlER4KyVQi8wQ4Fzqmx8udLQJIW NrcKAGa+VBV3kZLOT9r0lcq3XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnHmBgt 6cTL3Eeq9CtEjzSsBQRaMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkrOrvJBAxdP89x28BOqT/iDPZ3qZPldMLWedZsorhiqOK7030gQuD P+ChmhVquBhR1pcMXsuRpV4Mdo6lTwvF9lm9feNpDutEpWuiAG9Q+Vey87E932/5 8Urk8Lur+cPNgghczmvln+ldeLbAZ1NPDg4+lwNIYO0JqewV/zkLq0sCp3V2y5tc 3opVwC0wup2PqUF26tTH2/W7HauhKueuj7W1cvB8122F4RlKCh1yBNC0hB64qkpL vAw+bbRUYPuRzmJ1unzMt4jgkjvwCA77liLZZBYb9cq/bm+gZJTmeeFNX4ggLZt3 PQCgmdjwU05mIkAXjAxfCGE3SffaV+lP -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org