$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: 6aCT5m1visLTC2QIMhZDomQ4GLvJxsz2DvSlMOjYLII= Subject key identifier: FC:86:E5:3A:6A:46:5F:1D:4C:AC:A1:2E:D5:40:5A:9F:B6:24:FE:D2 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 196B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1955 Signing time: Sat 18 May 2024 16:50:36 +0000 Manifest this update: Sat 18 May 2024 16:50:35 +0000 Manifest next update: Sat 25 May 2024 16:50:35 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: kddtdubvMVwFGpm2szC4HGO+Vy2Ds9CA0dPpPbyeU2o=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: 9a54487kU30HvjlYE5xfFjhvD+XqzxTj4eHbx1+NhvU=) 3: FED0B33ED4C111EC9367BF31C4F9AE02.roa (hash: NBLqEf4Cs12ktShMDVUGgoDyBtgDQP5H9EoEIrLF62k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6507 (0x196b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: May 18 16:50:35 2024 GMT Not After : May 25 16:50:35 2024 GMT Subject: CN=6648dc5b-34e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:8e:55:21:66:c6:6f:93:78:74:b1:82:72: 67:f6:5e:3b:c9:e0:19:01:09:c0:09:13:a0:5e:76: a2:67:cc:2c:da:1f:5e:8d:f0:fd:35:5c:0e:e4:0f: 71:96:95:b0:3a:3d:77:ae:45:a4:ff:be:28:1e:00: 8f:69:b4:99:17:42:87:44:a9:65:6e:5d:0e:b0:a2: 41:f4:aa:6b:82:f0:19:31:e9:9d:a4:da:d6:a9:12: 0e:fd:97:fa:34:d4:60:a2:27:c6:9c:38:54:4a:2b: 11:66:74:ef:97:bf:d7:bf:67:8c:86:44:46:95:c1: 6f:d1:bb:b6:0f:b0:ad:64:24:f3:45:ec:7e:14:33: c3:5f:39:76:b3:20:55:8d:66:a0:f4:d1:bb:6d:d1: 5d:45:8d:56:0b:17:73:27:5b:5d:c3:2e:4e:40:00: e6:a9:19:7c:a4:c6:3e:cf:7d:ee:84:2a:08:4a:58: 41:f1:68:96:a4:c6:cf:71:10:ed:1d:61:c5:4a:a7: cc:f3:69:60:62:a2:1e:a4:57:16:b8:92:67:98:c3: de:84:70:bb:e7:31:78:1d:21:7c:55:a3:b1:dd:40: f9:27:72:d9:6d:b6:84:b3:c2:a8:5e:6d:a3:d7:c7: 9c:11:1b:9a:1d:0a:7b:d3:20:3a:1f:39:b3:25:24: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:E5:3A:6A:46:5F:1D:4C:AC:A1:2E:D5:40:5A:9F:B6:24:FE:D2 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f5:86:0a:17:d2:60:d2:28:55:f8:46:10:25:f8:8f:46:6d: 1a:61:f0:e9:70:3e:51:a7:4d:13:68:00:aa:9f:a6:70:87:9e: 7d:a6:10:e5:56:e2:97:6e:29:8d:5f:33:4f:ea:30:85:cc:c8: 66:16:aa:df:92:71:11:29:6b:09:66:ca:0c:70:dd:38:fa:e8: ba:a3:ac:23:08:7f:d8:84:94:77:7d:b7:fe:71:c9:65:fe:04: 22:0e:17:07:18:00:5d:0f:d2:75:c6:df:9a:19:d7:09:ff:0f: 45:95:64:68:e8:56:c2:3e:52:c1:a1:51:16:06:6a:98:81:07: 29:9b:36:56:3c:37:83:d2:a4:1d:84:d5:40:21:ab:d3:8d:a9: 3d:13:37:4b:32:55:fb:75:11:57:4e:aa:96:31:54:8d:a3:4c: 1e:fc:c3:34:29:06:6c:3d:d5:ad:3d:81:38:64:80:2d:77:f4: 67:15:21:33:23:71:fd:5c:df:12:fb:6a:c4:31:80:80:46:e0: d8:d8:6f:21:d1:f9:65:3d:9e:09:9a:dd:59:08:44:64:b9:75: 7a:24:87:f2:6f:f8:d6:e4:7c:95:6e:43:94:3b:7f:4b:1e:52: 67:e4:27:0b:07:70:f3:78:29:38:d6:22:ad:a2:45:f0:bf:d8: 2b:fc:65:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjQwNTE4MTY1MDM1WhcNMjQwNTI1MTY1MDM1WjAYMRYwFAYD VQQDEw02NjQ4ZGM1Yi0zNGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC+OVSFmxm+TeHSxgnJn9l47yeAZAQnACROgXnaiZ8ws2h9ejfD9NVwO5A9x lpWwOj13rkWk/74oHgCPabSZF0KHRKllbl0OsKJB9KprgvAZMemdpNrWqRIO/Zf6 NNRgoifGnDhUSisRZnTvl7/Xv2eMhkRGlcFv0bu2D7CtZCTzRex+FDPDXzl2syBV jWag9NG7bdFdRY1WCxdzJ1tdwy5OQADmqRl8pMY+z33uhCoISlhB8WiWpMbPcRDt HWHFSqfM82lgYqIepFcWuJJnmMPehHC75zF4HSF8VaOx3UD5J3LZbbaEs8KoXm2j 18ecERuaHQp70yA6HzmzJSSRZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyG5Tpq Rl8dTKyhLtVAWp+2JP7SMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9YYKF9Jg0ihV+EYQJfiPRm0aYfDpcD5Rp00TaACqn6Zwh559phDl VuKXbimNXzNP6jCFzMhmFqrfknERKWsJZsoMcN04+ui6o6wjCH/YhJR3fbf+ccll /gQiDhcHGABdD9J1xt+aGdcJ/w9FlWRo6FbCPlLBoVEWBmqYgQcpmzZWPDeD0qQd hNVAIavTjak9EzdLMlX7dRFXTqqWMVSNo0we/MM0KQZsPdWtPYE4ZIAtd/RnFSEz I3H9XN8S+2rEMYCARuDY2G8h0fllPZ4Jmt1ZCERkuXV6JIfyb/jW5HyVbkOUO39L HlJn5CcLB3DzeCk41iKtokXwv9gr/GVj -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org