$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: y5oz6lvmBIy0TfO8OFRnQTGtvRBxNGKU9LHa4RBIyt0= Subject key identifier: C6:2C:A5:9B:D2:B1:98:CC:F0:E3:B1:2F:AA:FA:FA:BF:3E:22:3B:41 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 1727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 1716 Signing time: Sat 18 May 2024 17:04:36 +0000 Manifest this update: Sat 18 May 2024 17:04:35 +0000 Manifest next update: Sat 25 May 2024 17:04:35 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: ptFL6Inp/FlMcA7QyeS9AHUzogqGMQGLjk1rfJJHvx4=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: WcxbXK7pdjHqiaOm+c53LrwbHNpvehmBziJhBJ+L4+A=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ybBCNAe9ww1gC6h0hxh0XLQ0JxvVGyjFwMWuAiX5tEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5927 (0x1727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: May 18 17:04:35 2024 GMT Not After : May 25 17:04:35 2024 GMT Subject: CN=6648dfa4-30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:b1:04:6a:b7:ab:88:48:66:00:dd:1d:6d: 15:d3:6e:35:65:68:7b:12:e3:13:7b:a3:56:9e:42: c7:e8:8a:e7:a8:6c:3c:be:e5:9e:de:8c:5f:d0:b0: 29:2c:2e:61:eb:39:37:6b:94:e0:f0:f7:f3:16:e1: bd:cc:3a:54:17:f1:00:dd:8b:b0:42:bc:2f:d5:49: 15:65:2a:73:32:87:dc:ac:6f:b0:15:c2:8b:1c:3e: f9:6e:4c:a3:03:af:26:3c:d8:de:d1:64:c4:b4:95: 0e:36:1e:c6:9c:43:29:97:df:ca:68:bd:56:85:59: 72:fc:cf:5e:12:dd:a4:6b:4a:b9:82:03:8d:b8:f2: 9f:be:59:2a:6b:ec:bf:d8:da:04:e6:eb:fd:81:64: fc:e8:e5:42:07:28:ab:e1:d4:18:4a:69:81:b9:ee: ca:ca:6d:d1:54:9f:14:72:de:94:ed:c3:66:55:55: b4:2a:e8:6c:41:ea:fa:df:3e:1c:f3:f1:04:97:ba: f2:1f:b6:00:7d:83:1c:f8:23:c4:ea:ce:a5:f2:d4: 4a:24:52:b8:cd:b0:4c:bd:ac:c5:57:f7:a5:47:30: 2d:96:f0:ea:93:c5:eb:28:a6:cf:4e:08:4b:3d:c5: e9:24:7c:85:17:02:51:51:69:e0:0e:d7:29:68:ee: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2C:A5:9B:D2:B1:98:CC:F0:E3:B1:2F:AA:FA:FA:BF:3E:22:3B:41 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9d:89:2c:49:60:e1:2a:f3:4a:12:d5:2a:e6:4f:e7:26:80: 31:cd:bb:ae:f1:61:c7:22:42:f0:18:fb:41:69:d3:74:39:f0: 84:fd:77:8a:10:21:62:a6:65:1a:83:8d:ae:08:d7:9e:c5:25: 8b:5d:c8:41:61:57:d9:c1:4e:59:24:9d:08:f2:84:20:14:89: fd:da:f8:f5:f9:d2:6c:5c:3b:ad:88:df:6b:37:c3:98:8c:44: f1:e2:16:1e:58:37:03:c2:44:34:82:35:96:30:f0:14:f6:19: d5:6d:c0:8b:ac:97:24:79:ba:54:ef:7e:4d:6d:19:b3:cb:d7: 48:a8:b6:de:0d:70:79:02:af:46:77:ca:dc:86:80:19:b4:cd: 96:5e:8f:d7:67:00:a4:ea:3d:fa:95:08:89:62:0d:fd:cb:76: 3f:29:1b:f8:22:33:39:de:59:a9:fb:34:aa:90:6b:86:d1:92: 33:18:d8:ea:5c:36:fd:52:27:49:86:e9:a6:be:c6:54:d0:f6: 81:35:94:8e:b8:40:48:90:38:b7:84:08:04:0c:4d:53:53:90: fb:02:6c:49:cb:f0:36:9b:b2:46:dd:5d:0e:52:93:2a:d8:1b: 5d:a4:00:7d:55:cd:62:71:4c:ce:6e:75:f2:54:d1:46:93:ac: d8:c6:52:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjQwNTE4MTcwNDM1WhcNMjQwNTI1MTcwNDM1WjAYMRYwFAYD VQQDEw02NjQ4ZGZhNC0zMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41WxBGq3q4hIZgDdHW0V0241ZWh7EuMTe6NWnkLH6IrnqGw8vuWe3oxf0LAp LC5h6zk3a5Tg8PfzFuG9zDpUF/EA3YuwQrwv1UkVZSpzMofcrG+wFcKLHD75bkyj A68mPNje0WTEtJUONh7GnEMpl9/KaL1WhVly/M9eEt2ka0q5ggONuPKfvlkqa+y/ 2NoE5uv9gWT86OVCByir4dQYSmmBue7Kym3RVJ8Uct6U7cNmVVW0KuhsQer63z4c 8/EEl7ryH7YAfYMc+CPE6s6l8tRKJFK4zbBMvazFV/elRzAtlvDqk8XrKKbPTghL PcXpJHyFFwJRUWngDtcpaO4YnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYspZvS sZjM8OOxL6r6+r8+IjtBMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXnYksSWDhKvNKEtUq5k/nJoAxzbuu8WHHIkLwGPtBadN0OfCE/XeK ECFipmUag42uCNeexSWLXchBYVfZwU5ZJJ0I8oQgFIn92vj1+dJsXDutiN9rN8OY jETx4hYeWDcDwkQ0gjWWMPAU9hnVbcCLrJckebpU735NbRmzy9dIqLbeDXB5Aq9G d8rchoAZtM2WXo/XZwCk6j36lQiJYg39y3Y/KRv4IjM53lmp+zSqkGuG0ZIzGNjq XDb9UidJhummvsZU0PaBNZSOuEBIkDi3hAgEDE1TU5D7AmxJy/A2m7JG3V0OUpMq 2BtdpAB9Vc1icUzObnXyVNFGk6zYxlJc -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org