$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: ZUHoRTdgp9yyNoLLMzw7PUZi2c9hlm4r1htIDMyUNFw= Subject key identifier: 65:BA:C4:EC:B1:5F:A5:D7:87:26:C6:83:93:F3:BA:A7:BF:F3:3B:1A Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 0497 Signing time: Sun 19 May 2024 01:37:17 +0000 Manifest this update: Sun 19 May 2024 01:37:16 +0000 Manifest next update: Sun 26 May 2024 01:37:16 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: Z0Red9qOEXCmeC8PdS3WItMWWNQYuNHTV5kngRZ8QNM=) 2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: 0uI77WnMvgx38BJ7x5ctqph2jfLMtLeb4wieKz5xnjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Validity Not Before: May 19 01:37:16 2024 GMT Not After : May 26 01:37:16 2024 GMT Subject: CN=664957cc-c487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:d8:e0:99:3c:6d:b7:33:af:e5:6f:60:d8: 10:76:f0:b5:09:d6:a0:5d:a3:12:43:9d:87:26:eb: a7:12:46:7b:f5:a9:18:af:c0:5b:96:2e:ad:bd:90: 51:71:2b:8b:b4:a1:2c:e7:eb:4c:04:ff:23:21:14: 87:39:c3:2a:57:78:32:62:b0:bf:bc:6d:d5:13:38: a0:b7:6f:1a:0e:d3:01:3a:91:1d:93:e3:06:df:52: 4f:ad:a9:20:f0:74:a9:17:d3:1d:9d:0b:ef:ba:c1: e9:34:0a:aa:f6:2d:46:69:4b:67:fc:32:1b:f2:8e: 0e:2a:b7:b8:ab:26:5e:2a:08:d4:08:c2:37:96:33: 90:d2:1c:4e:76:17:58:7c:31:6e:98:33:40:00:d1: 34:66:a6:79:dd:89:fc:fb:4e:49:64:24:8a:f6:b9: b7:a9:b8:93:5b:7f:b0:70:8d:65:fe:75:1d:50:43: b8:c9:8d:8d:f7:91:0f:01:b9:25:ae:9f:78:af:08: db:04:d0:26:0b:ff:ee:25:f4:c6:1d:09:8c:da:cf: a2:70:fd:e0:b4:21:5b:9e:07:b4:04:de:dd:66:d7: 17:26:f1:31:84:1a:76:97:ae:75:c1:bb:dc:96:b1: cf:32:55:51:07:95:f6:f0:cc:dc:d3:59:38:7c:a4: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:C4:EC:B1:5F:A5:D7:87:26:C6:83:93:F3:BA:A7:BF:F3:3B:1A X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:94:ec:7d:0c:34:d0:24:31:94:54:c7:90:f7:38:09:b3: 94:0a:16:fd:92:30:68:6f:42:e6:ab:c0:74:de:a2:20:34:b7: 96:14:95:7c:69:ef:8d:09:f3:46:9b:fe:a2:e7:be:93:64:66: a3:4a:96:47:7f:54:de:83:e5:5c:56:ae:5a:2e:68:70:16:e3: 09:e3:ed:52:b4:6d:7d:f2:e8:77:62:ce:0c:92:87:d5:c1:e4: 32:4c:e7:c8:84:35:78:95:3d:61:b4:3f:dd:b8:c2:ef:b9:51: b9:0d:1b:dc:0d:3a:4d:75:84:c0:6b:6d:62:88:70:58:7b:cb: 25:87:cf:94:f2:6c:48:aa:4a:71:4e:8d:20:24:59:da:f3:0b: d0:68:e4:ad:f5:86:1b:a8:54:a0:ba:b5:62:ac:0c:82:6b:fb: 9d:9a:00:da:da:37:00:34:77:17:3a:c8:fb:dd:22:39:55:d8: 8b:d2:bd:7e:22:3b:c6:52:dc:34:f0:6e:67:28:e8:54:04:1a: c6:14:1f:47:e0:08:a8:56:e1:0d:c7:22:f4:42:35:47:a6:c6: dd:4d:93:a7:82:25:7f:4a:8c:4a:28:eb:4b:de:37:54:20:e1: 29:ff:12:4a:f7:c1:ac:b7:c8:89:3e:9c:e5:57:2c:4d:5d:36: df:69:e3:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjQwNTE5MDEzNzE2WhcNMjQwNTI2MDEzNzE2WjAYMRYwFAYD VQQDEw02NjQ5NTdjYy1jNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/DY4Jk8bbczr+VvYNgQdvC1CdagXaMSQ52HJuunEkZ79akYr8Bbli6tvZBR cSuLtKEs5+tMBP8jIRSHOcMqV3gyYrC/vG3VEzigt28aDtMBOpEdk+MG31JPrakg 8HSpF9MdnQvvusHpNAqq9i1GaUtn/DIb8o4OKre4qyZeKgjUCMI3ljOQ0hxOdhdY fDFumDNAANE0ZqZ53Yn8+05JZCSK9rm3qbiTW3+wcI1l/nUdUEO4yY2N95EPAbkl rp94rwjbBNAmC//uJfTGHQmM2s+icP3gtCFbnge0BN7dZtcXJvExhBp2l651wbvc lrHPMlVRB5X28Mzc01k4fKSrSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW6xOyx X6XXhybGg5Pzuqe/8zsaMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAycJTsfQw00CQxlFTHkPc4CbOUChb9kjBob0Lmq8B03qIgNLeWFJV8 ae+NCfNGm/6i576TZGajSpZHf1Teg+VcVq5aLmhwFuMJ4+1StG198uh3Ys4MkofV weQyTOfIhDV4lT1htD/duMLvuVG5DRvcDTpNdYTAa21iiHBYe8slh8+U8mxIqkpx To0gJFna8wvQaOSt9YYbqFSgurVirAyCa/udmgDa2jcANHcXOsj73SI5VdiL0r1+ IjvGUtw08G5nKOhUBBrGFB9H4AioVuENxyL0QjVHpsbdTZOngiV/SoxKKOtL3jdU IOEp/xJK98Gst8iJPpzlVyxNXTbfaeNA -----END CERTIFICATE-----Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org