$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: CEpxio+p4JzWVTWWzv9JpSghjiW41TQ50b+wqlufJJU= Subject key identifier: B7:93:A1:1D:E4:A3:DB:10:84:7E:AA:B6:C8:FF:F2:66:21:FA:BC:BD Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 02AC Signing time: Fri 31 May 2024 04:10:04 +0000 Manifest this update: Fri 31 May 2024 04:10:03 +0000 Manifest next update: Fri 07 Jun 2024 04:10:03 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: kpkMpYH6icMMfLgs3nrv0r1zG8lw/gkCMT/FOV1nSO0=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 7B7xZtAsyaDILpWRkOtStPc0FvXS15c7erODj+yoV30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: May 31 04:10:03 2024 GMT Not After : Jun 7 04:10:03 2024 GMT Subject: CN=66594d9b-56d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:e2:6b:59:64:89:a5:22:30:dc:23:54:e4: 5d:3b:81:b1:e4:46:3f:e1:82:73:06:ec:b2:5b:0c: 02:bf:18:40:db:06:44:a0:0b:e4:08:c5:c8:41:77: aa:ce:f9:01:ad:b7:06:36:3c:46:c2:1e:15:50:ce: f7:55:ff:da:b5:6b:67:1c:02:7e:1d:c9:f7:6c:52: 22:2f:54:70:8d:1f:72:d5:d8:ab:ee:b4:18:77:a5: 86:22:a0:15:f2:05:d7:33:d5:3e:d5:03:a4:5f:e0: e5:67:5e:6c:df:cc:b2:22:d5:83:ce:f7:71:7f:b4: 25:1a:4b:f1:e7:87:83:db:c1:1d:14:3a:8a:28:c9: ad:6c:d6:31:55:dc:f4:d2:4a:fa:a9:fc:74:61:96: ed:be:c8:f5:43:0f:d2:4e:37:e2:84:57:b8:a4:19: 03:52:3e:59:3a:7d:b9:4f:63:b4:9f:14:20:5d:c2: d9:09:6f:72:77:af:0a:bd:81:88:5a:11:a3:77:25: 13:54:83:09:51:55:05:99:d1:e9:bb:c8:c0:65:0a: 64:6b:6d:1f:89:a8:49:84:4e:01:d6:a2:e9:a1:82: da:83:e6:85:a5:06:7a:db:b0:0c:dd:76:d4:38:7e: a2:52:b0:20:34:a1:b9:d2:60:98:52:c2:ca:44:4c: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:A1:1D:E4:A3:DB:10:84:7E:AA:B6:C8:FF:F2:66:21:FA:BC:BD X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ca:e2:9a:73:6e:e5:b8:35:0b:06:8d:aa:c7:b1:7f:7e:81: 18:9e:6b:2f:a8:39:ff:e4:a8:a2:52:6a:53:85:23:21:07:01: 44:56:d5:34:85:30:d6:59:fc:a0:44:2e:75:e5:35:19:84:71: d2:81:32:99:38:1b:b8:17:d6:21:95:fb:69:2c:bc:eb:e4:e0: 65:f1:1e:53:3f:05:e8:7a:fb:84:e8:b2:a8:cf:07:00:24:9b: 6f:72:1d:42:41:e4:47:77:93:36:59:6e:19:e0:19:f2:2e:c1: 54:12:13:ab:c0:24:10:25:18:cc:91:f3:43:30:6c:8a:29:f5: c6:a5:cf:bb:e0:9d:d6:85:91:ff:13:81:3a:da:33:21:c3:97: 6e:92:f3:d7:5b:c3:07:e3:d2:ae:f7:f9:bf:29:65:b5:88:5f: 3f:18:45:38:9c:9c:62:0f:fa:92:45:5b:05:d0:33:52:35:54: 35:27:68:d8:49:63:ed:cb:1f:48:89:52:6e:36:4a:9b:92:cd: c8:80:af:f5:c6:c6:88:39:9e:14:1f:60:f5:59:0f:f2:a1:73: 09:21:ab:1c:94:e1:6d:c0:94:ac:3d:4d:09:ea:3c:3b:61:89: 18:4a:c9:5d:89:50:c4:10:ac:21:85:ef:ee:95:69:6c:60:cf: b3:2a:5e:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjQwNTMxMDQxMDAzWhcNMjQwNjA3MDQxMDAzWjAYMRYwFAYD VQQDEw02NjU5NGQ5Yi01NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmXia1lkiaUiMNwjVORdO4Gx5EY/4YJzBuyyWwwCvxhA2wZEoAvkCMXIQXeq zvkBrbcGNjxGwh4VUM73Vf/atWtnHAJ+Hcn3bFIiL1RwjR9y1dir7rQYd6WGIqAV 8gXXM9U+1QOkX+DlZ15s38yyItWDzvdxf7QlGkvx54eD28EdFDqKKMmtbNYxVdz0 0kr6qfx0YZbtvsj1Qw/STjfihFe4pBkDUj5ZOn25T2O0nxQgXcLZCW9yd68KvYGI WhGjdyUTVIMJUVUFmdHpu8jAZQpka20fiahJhE4B1qLpoYLag+aFpQZ627AM3XbU OH6iUrAgNKG50mCYUsLKREw4VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeToR3k o9sQhH6qtsj/8mYh+ry9MB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyuKac27luDULBo2qx7F/foEYnmsvqDn/5KiiUmpThSMhBwFEVtU0 hTDWWfygRC515TUZhHHSgTKZOBu4F9YhlftpLLzr5OBl8R5TPwXoevuE6LKozwcA JJtvch1CQeRHd5M2WW4Z4BnyLsFUEhOrwCQQJRjMkfNDMGyKKfXGpc+74J3WhZH/ E4E62jMhw5dukvPXW8MH49Ku9/m/KWW1iF8/GEU4nJxiD/qSRVsF0DNSNVQ1J2jY SWPtyx9IiVJuNkqbks3IgK/1xsaIOZ4UH2D1WQ/yoXMJIasclOFtwJSsPU0J6jw7 YYkYSsldiVDEEKwhhe/ulWlsYM+zKl5B -----END CERTIFICATE-----Generated at Fri May 31 06:49:27 2024 by rpki-client on console-ams.rpki-client.org