$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: Voixl0xjFk+ajSSIk6d7zrI4JWUvM+11ltZINEzHPmo= Subject key identifier: 27:89:32:1B:E6:64:A7:B0:26:BF:CF:45:9A:2F:9F:E3:FF:93:72:3A Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 06E3 Signing time: Thu 30 May 2024 23:23:54 +0000 Manifest this update: Thu 30 May 2024 23:23:54 +0000 Manifest next update: Thu 06 Jun 2024 23:23:54 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: JI/1q6glae5ZyDZV3FDe+Ql6M7L0nSwsnuQnRK6RVrc=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: Y7eFgzF/UlzHZlIaZMMT6p/6Ir1lnrNlq+1rkd8Vdws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: May 30 23:23:54 2024 GMT Not After : Jun 6 23:23:54 2024 GMT Subject: CN=66590a8a-cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:70:cb:7e:a5:5e:04:67:ce:92:b8:e5:a9: 28:f9:7e:d5:7f:5b:73:60:70:5e:cf:26:f3:cf:89: 19:29:9b:b8:e0:4c:40:ca:63:f3:64:a9:95:d1:2d: 60:6c:11:f8:a4:cc:91:da:79:a4:25:61:e1:f6:81: 5b:36:b3:d2:5f:50:b7:40:a6:78:e5:4a:88:76:72: 1d:0c:29:e8:af:2a:d3:92:a3:e3:40:4f:16:65:d5: cd:2f:fd:e2:ea:48:e5:68:86:4e:d5:57:18:01:5f: 0e:fa:78:28:94:1d:7d:db:e3:33:ee:7c:8c:b5:d8: 41:cc:8e:43:31:43:01:f1:7a:9a:17:ce:86:42:5f: 80:de:24:64:8e:83:4f:fc:32:ca:88:16:11:0d:f7: 49:8c:4c:6d:fa:25:99:d7:8b:17:04:8a:ba:d7:4e: a5:e6:71:7b:b8:54:81:01:68:d3:f1:2d:d4:94:24: 38:a4:11:6a:ce:61:59:00:c1:56:f3:a1:6d:5d:ef: 8e:ff:b1:ca:c5:ed:f7:72:50:89:4b:dc:99:3c:3c: 6a:f7:c1:75:70:9b:a4:ef:90:d5:42:77:14:57:f9: 26:9a:f3:4a:a0:0e:a5:b9:7e:d4:c3:ad:74:d5:bf: 1e:e9:1b:17:5f:3e:76:9c:19:4e:72:02:5d:60:64: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:89:32:1B:E6:64:A7:B0:26:BF:CF:45:9A:2F:9F:E3:FF:93:72:3A X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:29:f9:c7:b3:ec:c0:2f:03:b4:d3:31:03:e2:10:26:45:3e: b3:cf:a4:f3:0d:d6:5f:75:a7:c2:df:bb:13:bd:40:7b:b3:9a: ca:47:04:0f:22:ce:36:f9:1f:55:98:97:c5:a9:84:fd:20:6b: 61:74:72:64:f2:af:5f:6a:6b:3a:85:6a:e8:43:d0:57:6e:38: f6:8a:b0:53:49:d6:53:ab:4e:bc:99:68:bc:4d:44:54:f6:df: 09:a2:36:bc:0f:11:3f:5e:f5:ca:6d:4e:0e:56:9b:70:b5:55: f6:da:32:b9:b3:f4:d5:c0:5b:78:5a:df:ae:a9:89:31:8e:ab: 44:53:73:d8:4a:47:51:18:84:aa:28:76:a7:fd:8c:d7:9c:d5: dc:68:a6:3a:c1:ae:27:32:be:9a:1c:a7:6a:db:57:e5:66:74: ba:f8:17:94:3a:6f:d3:42:d0:45:be:09:ff:97:fc:70:90:f0: 1a:33:88:7f:d1:3b:fd:6f:ce:eb:fd:8d:79:39:92:d8:61:b5: 40:0b:25:14:6d:0c:d1:57:46:9d:34:5f:03:4e:1b:99:6d:a7: 23:7c:76:a2:8b:25:1b:06:f1:ed:f5:8b:ea:54:f5:4a:d6:09: 9e:f7:81:c4:a8:9d:47:a8:37:91:ab:29:10:16:d7:31:d1:1c: 39:22:ab:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjQwNTMwMjMyMzU0WhcNMjQwNjA2MjMyMzU0WjAYMRYwFAYD VQQDEw02NjU5MGE4YS1jYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTVwy36lXgRnzpK45ako+X7Vf1tzYHBezybzz4kZKZu44ExAymPzZKmV0S1g bBH4pMyR2nmkJWHh9oFbNrPSX1C3QKZ45UqIdnIdDCnoryrTkqPjQE8WZdXNL/3i 6kjlaIZO1VcYAV8O+ngolB192+Mz7nyMtdhBzI5DMUMB8XqaF86GQl+A3iRkjoNP /DLKiBYRDfdJjExt+iWZ14sXBIq6106l5nF7uFSBAWjT8S3UlCQ4pBFqzmFZAMFW 86FtXe+O/7HKxe33clCJS9yZPDxq98F1cJuk75DVQncUV/kmmvNKoA6luX7Uw610 1b8e6RsXXz52nBlOcgJdYGTYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeJMhvm ZKewJr/PRZovn+P/k3I6MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsKfnHs+zALwO00zED4hAmRT6zz6TzDdZfdafC37sTvUB7s5rKRwQP Is42+R9VmJfFqYT9IGthdHJk8q9fams6hWroQ9BXbjj2irBTSdZTq068mWi8TURU 9t8Joja8DxE/XvXKbU4OVptwtVX22jK5s/TVwFt4Wt+uqYkxjqtEU3PYSkdRGISq KHan/YzXnNXcaKY6wa4nMr6aHKdq21flZnS6+BeUOm/TQtBFvgn/l/xwkPAaM4h/ 0Tv9b87r/Y15OZLYYbVACyUUbQzRV0adNF8DThuZbacjfHaiiyUbBvHt9YvqVPVK 1gme94HEqJ1HqDeRqykQFtcx0Rw5Iqtp -----END CERTIFICATE-----Generated at Fri May 31 00:28:36 2024 by rpki-client on console-ams.rpki-client.org