$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: OR7DuNldZ3T6CMTbfdaDWHApd+pE3xgAXkNlCm6wWXw= Subject key identifier: DD:95:99:3C:97:F5:FD:F2:83:DC:FE:06:5B:AE:B1:3C:F8:3A:A4:64 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 0792 Signing time: Sat 18 May 2024 22:13:00 +0000 Manifest this update: Sat 18 May 2024 22:12:59 +0000 Manifest next update: Sat 25 May 2024 22:12:59 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: sDosTf3e55yT/ymOz4xOC2OsUB7T5rNON+VAYJxUSBQ=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: xHShd3tlwlxB2nTBnu7DIXCsWddzN3NU74q1kH3c3cw=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: WtwzNtkr/sMDE1Pw4fKTao1GvYsAwYCq34T3uS2XRT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: May 18 22:12:59 2024 GMT Not After : May 25 22:12:59 2024 GMT Subject: CN=664927ec-ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:60:59:fb:08:c4:01:f9:c0:23:30:92:ff:a6: 59:9b:fb:8d:39:ba:2e:3a:9f:68:a0:7e:97:39:18: 7b:52:dc:54:64:52:10:a2:20:48:7f:24:0d:48:74: c3:ed:d8:20:10:f3:42:3f:2a:66:9d:91:08:93:6a: a7:3c:3f:3b:1b:af:fa:28:a9:1c:a5:9f:49:bf:f2: 0b:b9:54:03:02:51:a5:04:06:8b:1e:f1:fc:77:3d: 8d:8a:f4:11:1b:48:17:20:d4:71:37:dc:46:c1:c5: 34:19:58:c8:1b:84:5b:7e:33:25:ba:20:dd:97:2f: 25:6a:a8:62:48:f5:75:8d:ce:e4:33:e2:e8:81:ce: 5c:95:8c:60:69:c9:8a:88:a8:f2:f7:81:8f:3d:a9: fc:b0:75:66:26:52:5e:59:e4:d2:ba:10:90:99:d4: e6:46:be:d9:1d:cc:b4:6f:98:bc:51:af:4c:15:44: fa:f2:b9:8b:5b:4d:2e:28:82:ef:dd:55:79:90:30: f3:1e:95:a1:e7:34:e4:2b:73:89:06:96:ae:d8:41: 0f:23:2b:fe:d3:33:3e:d6:57:25:fe:ab:db:41:b2: 0f:d5:82:46:92:a6:8d:47:56:06:b9:b5:be:fa:56: 24:0f:01:ec:ce:27:e6:b9:10:57:83:c1:d4:1c:b3: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:99:3C:97:F5:FD:F2:83:DC:FE:06:5B:AE:B1:3C:F8:3A:A4:64 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0c:bc:3b:f2:6c:64:ca:c8:f6:aa:61:7e:5b:3c:6e:74:f9: 3c:c8:ba:a9:7d:b4:db:67:6a:b1:ea:8b:6c:47:8b:63:61:87: 13:5f:7f:55:c4:19:e5:f9:40:a9:79:02:c4:c5:32:04:e6:10: 7a:cd:80:30:d9:f2:8b:fc:8c:b9:db:58:6a:8e:2c:7e:42:6d: 46:49:0f:13:ae:2b:c3:db:10:e1:a0:42:69:5b:b3:72:46:c4: 65:76:b9:48:09:32:16:95:65:04:b6:06:16:52:a9:b0:da:22: a7:99:be:dc:13:4d:be:a4:ee:61:85:fb:f9:2e:92:08:ea:48: aa:3f:d6:5b:48:09:80:14:b2:ee:06:7f:d1:21:af:96:b6:31: 49:74:cd:99:4c:b9:ab:bf:7c:ba:b5:ea:46:60:6b:53:ff:1d: 1f:a4:cd:d5:38:14:90:60:ef:a5:e8:31:f7:8d:c5:4e:04:f7: 04:63:d9:b6:ef:fd:a1:8a:ad:dd:18:87:9b:bb:fb:7e:a3:8b: 66:ef:6b:c3:0c:ae:d0:99:2c:41:30:d0:f7:24:f7:fd:17:d6: 52:06:f2:a2:f1:48:80:1e:a3:8f:5a:c6:9e:92:9b:38:c2:88: 11:6e:16:06:1a:4c:ac:c9:64:5b:fb:e0:5b:e8:11:f3:7e:b7: da:1d:5e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjQwNTE4MjIxMjU5WhcNMjQwNTI1MjIxMjU5WjAYMRYwFAYD VQQDEw02NjQ5MjdlYy1lYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGBZ+wjEAfnAIzCS/6ZZm/uNObouOp9ooH6XORh7UtxUZFIQoiBIfyQNSHTD 7dggEPNCPypmnZEIk2qnPD87G6/6KKkcpZ9Jv/ILuVQDAlGlBAaLHvH8dz2NivQR G0gXINRxN9xGwcU0GVjIG4RbfjMluiDdly8laqhiSPV1jc7kM+Logc5clYxgacmK iKjy94GPPan8sHVmJlJeWeTSuhCQmdTmRr7ZHcy0b5i8Ua9MFUT68rmLW00uKILv 3VV5kDDzHpWh5zTkK3OJBpau2EEPIyv+0zM+1lcl/qvbQbIP1YJGkqaNR1YGubW+ +lYkDwHszifmuRBXg8HUHLPTKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2VmTyX 9f3yg9z+BluusTz4OqRkMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJDLw78mxkysj2qmF+WzxudPk8yLqpfbTbZ2qx6otsR4tjYYcTX39V xBnl+UCpeQLExTIE5hB6zYAw2fKL/Iy521hqjix+Qm1GSQ8TrivD2xDhoEJpW7Ny RsRldrlICTIWlWUEtgYWUqmw2iKnmb7cE02+pO5hhfv5LpII6kiqP9ZbSAmAFLLu Bn/RIa+WtjFJdM2ZTLmrv3y6tepGYGtT/x0fpM3VOBSQYO+l6DH3jcVOBPcEY9m2 7/2hiq3dGIebu/t+o4tm72vDDK7QmSxBMND3JPf9F9ZSBvKi8UiAHqOPWsaekps4 wogRbhYGGkysyWRb++Bb6BHzfrfaHV5H -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org