$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: chqQV3PLSao26lShH58wthJb95EKw08lCLUvfz94LO4= Subject key identifier: 20:E9:DD:B2:15:1A:08:C2:5F:4C:17:9D:79:EA:70:85:71:13:8E:7C Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 06FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 06F6 Signing time: Sat 18 May 2024 22:44:36 +0000 Manifest this update: Sat 18 May 2024 22:44:36 +0000 Manifest next update: Sat 25 May 2024 22:44:36 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: BDTVNL1RTaAJboMW3gotvlFEHQZol2h7+6AOC3VOj50=) 2: E6C1DE9CFCB611EA9B245911C4F9AE02.roa (hash: 3Z49HwZL0ZclKRYisuk5BIfvyrDgD7nyjzYc6zYT6tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1787 (0x6fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: May 18 22:44:36 2024 GMT Not After : May 25 22:44:36 2024 GMT Subject: CN=66492f54-13dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:f0:27:38:0b:4e:14:3c:fe:07:80:9e:2f: 94:00:db:f6:1b:ed:c9:24:0e:28:87:fb:9d:99:28: a3:6c:b5:e7:4c:b8:48:15:58:f6:7d:1b:91:44:ef: 27:2a:8c:6c:a4:9c:d7:d7:f9:f6:fd:10:22:92:01: b9:39:77:5a:fd:05:53:69:a4:3a:20:ef:d3:9c:81: 88:8c:86:3f:58:af:58:0f:c1:72:f9:c6:54:10:f0: 38:38:67:a8:28:f4:c2:2a:a6:eb:54:d2:1f:73:c7: 46:40:f7:46:62:ed:17:40:75:a6:af:4f:28:48:d0: 04:94:f1:17:ab:66:33:9e:6e:01:ff:45:ce:43:b7: 44:23:d4:f3:8c:01:fa:97:0d:bb:0c:9e:24:cb:27: 87:72:2b:f0:4c:dd:9b:98:c4:de:51:4e:a4:79:f6: 2a:21:aa:9b:61:8e:71:53:b9:e4:27:58:c0:4d:6a: f4:7e:6c:c0:65:88:a1:f4:bf:e3:fe:2e:a6:70:1f: 3d:4a:e0:c9:14:3f:7e:3f:5e:f3:0a:52:ed:93:fb: 0e:0b:09:65:92:ed:a8:70:7c:57:68:69:98:1f:f0: 39:57:a7:36:dd:d4:51:97:6e:13:a2:14:c9:54:bc: db:65:a6:75:2d:fb:11:bd:85:b7:59:54:a0:2b:c6: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E9:DD:B2:15:1A:08:C2:5F:4C:17:9D:79:EA:70:85:71:13:8E:7C X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:5a:92:fa:29:85:31:14:87:43:89:95:ec:f9:30:f5:4b:74: b8:92:13:1c:05:4a:bc:ab:45:d7:1f:68:42:0b:8e:9a:b0:d5: bb:a7:f3:25:c2:57:89:0c:39:88:90:c9:ba:bb:bb:fc:7f:69: 95:64:8e:51:0d:a2:80:ec:5a:25:8a:8f:e7:79:e9:a0:73:8b: 65:7c:18:d1:f9:26:03:35:5b:15:22:f4:5d:29:c7:e1:29:20: b4:38:5f:22:bd:6e:cb:99:db:01:d3:48:c6:4b:de:0d:c9:f1: b7:0e:9a:34:a3:9d:63:3a:42:5f:10:29:90:4d:df:10:2d:c5: 00:7d:8e:a0:80:df:07:21:4f:53:28:0c:ff:2a:94:cc:26:ab: 90:3e:a8:ca:c2:7f:8e:0c:e2:1e:76:27:ab:bc:86:31:92:03: e9:a8:aa:66:e5:1b:bf:87:59:4a:21:1c:1f:2f:9d:57:28:d0: a4:24:f8:ca:3d:e6:a0:64:43:0b:ea:7b:ac:14:ab:dc:c9:21: 26:2a:d1:f9:6e:55:15:58:b2:19:e7:c1:d5:9c:51:6b:26:3d: a2:15:ae:2e:71:c3:25:04:3e:4c:48:cc:bd:25:9b:a3:42:22: 62:b5:a6:f1:63:89:bf:18:62:ad:59:3f:01:a1:01:97:9c:02: f6:b2:3e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjQwNTE4MjI0NDM2WhcNMjQwNTI1MjI0NDM2WjAYMRYwFAYD VQQDEw02NjQ5MmY1NC0xM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T3wJzgLThQ8/geAni+UANv2G+3JJA4oh/udmSijbLXnTLhIFVj2fRuRRO8n KoxspJzX1/n2/RAikgG5OXda/QVTaaQ6IO/TnIGIjIY/WK9YD8Fy+cZUEPA4OGeo KPTCKqbrVNIfc8dGQPdGYu0XQHWmr08oSNAElPEXq2Yznm4B/0XOQ7dEI9TzjAH6 lw27DJ4kyyeHcivwTN2bmMTeUU6kefYqIaqbYY5xU7nkJ1jATWr0fmzAZYih9L/j /i6mcB89SuDJFD9+P17zClLtk/sOCwllku2ocHxXaGmYH/A5V6c23dRRl24TohTJ VLzbZaZ1LfsRvYW3WVSgK8bvkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDp3bIV GgjCX0wXnXnqcIVxE458MB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxWpL6KYUxFIdDiZXs+TD1S3S4khMcBUq8q0XXH2hCC46asNW7p/Ml wleJDDmIkMm6u7v8f2mVZI5RDaKA7Folio/neemgc4tlfBjR+SYDNVsVIvRdKcfh KSC0OF8ivW7LmdsB00jGS94NyfG3Dpo0o51jOkJfECmQTd8QLcUAfY6ggN8HIU9T KAz/KpTMJquQPqjKwn+ODOIediervIYxkgPpqKpm5Ru/h1lKIRwfL51XKNCkJPjK PeagZEML6nusFKvcySEmKtH5blUVWLIZ58HVnFFrJj2iFa4uccMlBD5MSMy9JZuj QiJitabxY4m/GGKtWT8BoQGXnAL2sj7x -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org