$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: /zfDPq7ZsYlEeEBsQZFKvgK4/Y1w0Ypm49UgIWi/H8U= Subject key identifier: 7C:A3:BD:7B:57:8A:25:AC:D8:5B:33:D8:BF:89:72:73:FC:53:85:B0 Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 0751 Signing time: Fri 31 May 2024 23:08:10 +0000 Manifest this update: Fri 31 May 2024 23:08:09 +0000 Manifest next update: Fri 07 Jun 2024 23:08:09 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: wAiYuhhbOWPTaQydQMVR0in4JqmGFEvVrknrptJC70g=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: OYa6pZQjPMNNTwycOThVBVCHRmNZFoJ1RzY6PDCzyqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: May 31 23:08:09 2024 GMT Not After : Jun 7 23:08:09 2024 GMT Subject: CN=665a5859-6a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:52:70:4b:e5:9b:35:c0:ef:d6:70:e5:41: 2d:49:c7:45:d0:62:f8:12:ea:2f:10:50:e4:ea:c6: 2f:73:e4:1e:ea:d1:f0:33:62:e5:65:db:e1:f2:a5: b6:6c:9a:b8:61:63:72:3d:97:a3:5d:1d:4e:8a:cc: cb:76:09:a3:ec:59:84:b3:b6:54:7f:10:12:fb:3c: cb:80:5a:ad:03:53:c7:26:68:cc:fb:31:a5:55:19: 2e:a6:4a:5a:44:70:e1:e8:fb:28:67:cd:c1:52:80: cc:97:52:1f:cc:26:56:5f:14:70:08:ca:43:68:2b: 21:66:cb:29:56:cb:ad:b7:82:9b:54:30:78:cd:5a: e3:bc:24:9c:46:a4:89:ce:85:bd:cc:0d:01:1a:ac: ac:2f:6a:43:36:05:07:dd:e9:22:64:6e:54:e7:dd: 36:69:dc:63:0d:1c:f7:e4:28:23:bb:43:8d:a4:4b: 9d:6a:de:0e:fe:a2:e8:82:2b:25:b5:d9:20:25:17: c8:3d:c4:d2:64:98:96:10:4b:f6:e8:08:46:99:20: ee:ca:f2:23:de:a7:5e:dc:91:24:bc:19:af:ae:a9: 87:df:1a:0f:2b:dc:d8:47:fe:fc:59:e5:a1:3a:1f: 95:6f:5e:81:ca:1e:62:6f:24:91:1c:bb:a6:ae:54: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:BD:7B:57:8A:25:AC:D8:5B:33:D8:BF:89:72:73:FC:53:85:B0 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d9:cb:78:be:a5:a9:80:41:e9:90:c3:b1:16:a7:a5:13:0b: 68:59:bb:a3:09:62:bf:84:c7:e5:4a:04:f1:21:7e:64:18:d3: 6f:05:8a:f6:ae:13:2c:57:8c:95:65:41:4a:2b:78:cd:37:db: d3:f4:88:ce:3e:69:a3:87:56:c0:23:73:d8:88:62:86:77:9f: 73:f2:d7:b2:e8:da:a7:12:8f:75:66:04:4f:54:78:28:47:7b: 2e:90:d8:0a:e9:46:fc:4d:9b:c4:51:2a:2b:7d:bd:80:7b:56: a3:c9:5d:f0:00:30:55:f5:bc:3e:f4:58:67:2d:6c:69:19:f2: ef:62:8c:e6:26:ae:4f:c7:26:4d:66:aa:cf:3b:bc:61:2b:f6: 76:30:c2:6a:f5:44:8a:b1:19:af:7f:23:db:67:a3:27:be:7f: 37:94:77:ef:40:ff:b2:76:93:bd:db:52:13:8a:2e:fe:de:f1: 56:da:b0:a6:fc:ee:f3:46:9b:78:60:29:91:62:3f:bb:d4:32: 6f:b0:24:67:eb:69:5b:74:03:d5:39:97:5b:42:7d:3f:5a:76: de:89:cf:5e:c3:60:27:13:44:06:a1:15:d3:f7:ab:43:d8:12: 57:60:cd:e0:b3:73:9d:b3:68:87:b9:54:41:30:7d:b8:81:12: c8:8a:c1:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjQwNTMxMjMwODA5WhcNMjQwNjA3MjMwODA5WjAYMRYwFAYD VQQDEw02NjVhNTg1OS02YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoRScEvlmzXA79Zw5UEtScdF0GL4EuovEFDk6sYvc+Qe6tHwM2LlZdvh8qW2 bJq4YWNyPZejXR1OiszLdgmj7FmEs7ZUfxAS+zzLgFqtA1PHJmjM+zGlVRkupkpa RHDh6PsoZ83BUoDMl1IfzCZWXxRwCMpDaCshZsspVsutt4KbVDB4zVrjvCScRqSJ zoW9zA0BGqysL2pDNgUH3ekiZG5U5902adxjDRz35Cgju0ONpEudat4O/qLogisl tdkgJRfIPcTSZJiWEEv26AhGmSDuyvIj3qde3JEkvBmvrqmH3xoPK9zYR/78WeWh Oh+Vb16Byh5ibySRHLumrlR9TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyjvXtX iiWs2Fsz2L+JcnP8U4WwMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB52ct4vqWpgEHpkMOxFqelEwtoWbujCWK/hMflSgTxIX5kGNNvBYr2 rhMsV4yVZUFKK3jNN9vT9IjOPmmjh1bAI3PYiGKGd59z8tey6NqnEo91ZgRPVHgo R3sukNgK6Ub8TZvEUSorfb2Ae1ajyV3wADBV9bw+9FhnLWxpGfLvYozmJq5PxyZN ZqrPO7xhK/Z2MMJq9USKsRmvfyPbZ6Mnvn83lHfvQP+ydpO921ITii7+3vFW2rCm /O7zRpt4YCmRYj+71DJvsCRn62lbdAPVOZdbQn0/Wnbeic9ew2AnE0QGoRXT96tD 2BJXYM3gs3Ods2iHuVRBMH24gRLIisEW -----END CERTIFICATE-----Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org