$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft File: zsJ8djIfZke8cP1A2bcKYu21h6M.mft (raw, json) Hash identifier: kZBh626R0fMjEU6G1FVC4N0FhyfvdLFdbswEuSn1m10= Subject key identifier: AB:83:E7:52:35:AF:FC:80:DC:76:7A:8D:F4:2F:79:44:C9:98:F3:C7 Authority key identifier: CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3 Certificate issuer: /CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3 Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft Manifest number: 03FF Signing time: Sat 01 Jun 2024 03:14:14 +0000 Manifest this update: Sat 01 Jun 2024 03:14:14 +0000 Manifest next update: Sat 08 Jun 2024 03:14:14 +0000 Files and hashes: 1: zsJ8djIfZke8cP1A2bcKYu21h6M.crl (hash: BigoDykrLyjbGyMf2QhVVqy84DTz0IfRINAEMgTscL4=) 2: 54D87FE02C2B11ECB519751BC4F9AE02.roa (hash: HxMzBwU0drdsgNcvOSUabUc0qZPrH3Qhh76eZIqC/MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3 Validity Not Before: Jun 1 03:14:14 2024 GMT Not After : Jun 8 03:14:14 2024 GMT Subject: CN=665a9206-db7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:0f:ac:0e:5e:2b:d1:37:6a:57:e3:b8:88: 36:d4:2e:ee:f5:17:90:e9:9a:f7:84:21:d4:e7:f4: 1e:2e:f5:02:ba:b4:9f:de:6d:7e:83:03:23:23:59: a8:f5:23:5b:ba:a8:a3:9c:e9:42:4d:a6:82:d3:f2: 23:00:a1:79:69:11:ee:29:ab:eb:2d:4b:9a:bb:dd: 93:01:24:2d:5a:d4:f8:ac:96:4e:ad:cb:c0:d8:63: 66:1a:ee:1e:2c:2a:25:aa:01:d1:c7:50:3a:fe:e8: 20:1a:b3:ca:e3:35:5f:77:ef:27:3d:26:e2:9e:8f: 36:1f:94:30:34:ec:07:7b:ba:f6:25:de:1d:62:a7: 5f:f6:e2:90:0d:3b:5c:07:ef:c9:71:b9:ec:2e:70: 89:b0:1d:e5:3c:6a:e1:49:cd:cc:61:b7:be:09:ab: 53:52:f2:87:8f:5d:98:20:08:aa:07:02:30:40:11: c6:8d:9d:24:f6:11:ca:16:a2:c4:20:7b:e0:69:04: 9d:4f:17:da:63:79:50:ee:a3:da:51:2c:2c:ee:ee: ee:e0:90:c7:73:5d:85:9a:61:cb:f5:52:d5:73:32: f8:f9:02:55:ed:56:f6:e0:67:f6:c0:1e:48:f4:89: f2:c0:cc:a8:86:1a:0b:ff:87:d0:04:c7:f5:22:2c: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:E7:52:35:AF:FC:80:DC:76:7A:8D:F4:2F:79:44:C9:98:F3:C7 X509v3 Authority Key Identifier: keyid:CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e4:e8:f6:11:4b:ac:9e:1a:4e:e8:a1:70:1c:24:1d:65:f0: 47:23:77:2d:83:20:4d:70:00:aa:45:a1:2a:23:dc:53:a0:e7: 14:82:81:96:54:bc:3b:eb:33:1b:1a:5a:30:ae:0b:0a:2c:66: 65:29:79:dd:74:9c:6c:52:05:12:b7:19:b6:ed:c1:cb:5c:ad: ba:9b:32:dd:87:90:c6:17:22:65:20:88:96:d6:62:03:7e:35: b9:4d:76:59:6c:80:15:97:df:7f:df:37:2c:ad:15:26:54:05: 33:c1:d1:0a:8e:02:16:6c:3f:7b:b4:6f:93:a2:91:5f:73:4a: 1b:18:67:f2:61:b5:e0:73:24:00:a7:e5:20:ae:24:0c:35:de: 8a:1c:ff:55:cf:a5:81:3f:6b:56:4b:d5:0a:2f:57:a5:e1:8e: 4e:9e:69:30:f1:81:bf:4d:fb:7b:83:42:ca:e8:e1:9a:73:69: a9:73:7c:aa:a4:2e:76:a9:3d:20:32:dd:e6:1b:0a:01:e5:ff: 61:33:28:20:32:cf:d6:e7:bf:ba:1a:39:d4:f3:6f:06:43:42: 80:0c:7f:25:99:29:7c:ff:fc:e8:3b:56:6b:a2:4a:91:70:21: 5f:1e:bb:f6:79:10:6c:83:e8:5a:73:84:69:e1:5b:19:26:fb: 95:04:83:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBEMUExMTAvBgNVBAUTKENFQzI3Qzc2MzIxRjY2NDdCQzcwRkQ0MEQ5QjcwQTYy RURCNTg3QTMwHhcNMjQwNjAxMDMxNDE0WhcNMjQwNjA4MDMxNDE0WjAYMRYwFAYD VQQDEw02NjVhOTIwNi1kYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvcPrA5eK9E3alfjuIg21C7u9ReQ6Zr3hCHU5/QeLvUCurSf3m1+gwMjI1mo 9SNbuqijnOlCTaaC0/IjAKF5aRHuKavrLUuau92TASQtWtT4rJZOrcvA2GNmGu4e LColqgHRx1A6/uggGrPK4zVfd+8nPSbino82H5QwNOwHe7r2Jd4dYqdf9uKQDTtc B+/JcbnsLnCJsB3lPGrhSc3MYbe+CatTUvKHj12YIAiqBwIwQBHGjZ0k9hHKFqLE IHvgaQSdTxfaY3lQ7qPaUSws7u7u4JDHc12FmmHL9VLVczL4+QJV7Vb24Gf2wB5I 9InywMyohhoL/4fQBMf1IiypEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuD51I1 r/yA3HZ6jfQveUTJmPPHMB8GA1UdIwQYMBaAFM7CfHYyH2ZHvHD9QNm3CmLttYej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEQxQS83MDZCMzU5ODJD MjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlprZThjUDFBMmJjS1l1MjFo Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzSjhkaklmWmtlOGNQMUEyYmNLWXUyMWg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEQxQS83MDZCMzU5ODJDMjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlpr ZThjUDFBMmJjS1l1MjFoNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF5Oj2EUusnhpO6KFwHCQdZfBHI3ctgyBNcACqRaEqI9xToOcUgoGW VLw76zMbGlowrgsKLGZlKXnddJxsUgUStxm27cHLXK26mzLdh5DGFyJlIIiW1mID fjW5TXZZbIAVl99/3zcsrRUmVAUzwdEKjgIWbD97tG+TopFfc0obGGfyYbXgcyQA p+UgriQMNd6KHP9Vz6WBP2tWS9UKL1el4Y5Onmkw8YG/Tft7g0LK6OGac2mpc3yq pC52qT0gMt3mGwoB5f9hMyggMs/W57+6GjnU828GQ0KADH8lmSl8//zoO1ZrokqR cCFfHrv2eRBsg+hac4Rp4VsZJvuVBIOd -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org