$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: qctmaQ3jKVzr5/3eikPlAYlp7BwayqQFRKSJW5ho7F8= Subject key identifier: 96:8C:7E:A1:1C:06:5F:99:DB:D1:81:44:F1:E2:0F:88:0D:1D:B7:C5 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 33F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 33E1 Signing time: Fri 31 May 2024 14:52:21 +0000 Manifest this update: Fri 31 May 2024 14:52:21 +0000 Manifest next update: Fri 07 Jun 2024 14:52:21 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: rs2QmsP2cbPRDbPcLQnIlecwIjBDAyooj1N6YQnvo+A=) 2: 0232AA081A5A11EE89B07267C4F9AE02.roa (hash: E8aCWI5va6H/40DfS+TkQOoU/nMICN5p7NAnAXpdfVw=) 3: B028DBE894C811EAB8C45A7BC4F9AE02.roa (hash: 2ndC2bbzio3DRuJpcnV7jJ43hv7qBpllb/Kb7sC9yE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13296 (0x33f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: May 31 14:52:21 2024 GMT Not After : Jun 7 14:52:21 2024 GMT Subject: CN=6659e425-684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:a0:59:f5:9a:64:2c:d5:d3:6f:08:81:6b: 44:5b:7b:35:89:72:16:48:9d:87:71:7a:d2:fb:f9: 57:57:e9:c0:0f:32:65:a0:2c:c6:1e:0b:4b:9b:be: b3:d4:ed:0a:ca:20:26:2b:6a:24:86:84:1d:7c:a8: b7:9b:f4:f2:6c:22:dc:5a:42:82:d7:ca:07:10:6d: d3:0f:ec:86:47:3a:3e:a3:75:cb:35:55:5a:a7:f9: 00:3d:d1:03:26:17:11:9f:c6:c1:c0:f8:af:34:e1: 83:54:5a:0d:95:51:fb:de:05:a2:ee:e5:55:a7:42: ab:ce:bc:0f:a1:ce:4b:2c:8c:11:67:d3:79:7b:92: d9:27:10:91:72:9d:e9:85:56:83:fd:b6:62:bc:bb: 63:2c:63:8e:e3:80:82:4f:97:15:f7:c8:2e:9b:48: a4:38:92:51:31:80:b6:48:e5:22:b6:72:bc:b4:ca: cc:89:23:4a:76:f7:e2:ca:d1:5d:f2:20:39:bf:45: c7:2d:21:e7:52:46:39:a0:f6:b8:e3:d1:01:0e:d6: 06:58:e4:9c:b0:a9:5c:cc:8e:07:3c:7f:69:6f:4b: 2d:e6:fc:dd:5d:ba:dd:7f:e8:5b:36:d2:e3:0b:88: 6c:5f:c7:9f:74:ae:de:5e:64:75:06:6e:c5:48:76: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:7E:A1:1C:06:5F:99:DB:D1:81:44:F1:E2:0F:88:0D:1D:B7:C5 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ce:3a:62:21:6e:17:64:8b:d2:0f:ff:4d:49:25:4d:ce:33: 3c:83:a4:bb:af:5a:27:3e:4f:d7:28:10:68:8f:ea:8e:44:30: 0f:21:26:f0:4a:68:f9:03:44:24:93:57:01:ea:06:0f:bb:13: f4:17:b8:7a:2a:b5:7a:58:0b:e0:79:c7:7c:96:73:90:d9:47: 06:8d:c4:3a:d7:28:80:dc:dc:8c:ef:3e:a7:1d:9d:3b:5d:63: ae:05:59:5e:6c:ea:a6:73:ea:66:ec:02:df:04:4a:bd:d3:18: 0b:db:0d:f4:be:94:3a:b8:3c:f2:77:7a:7c:01:f5:8d:50:90: c7:1c:b4:31:2d:14:ad:7d:f5:3e:11:9f:71:49:1e:af:77:3a: 82:c6:b0:83:7b:21:a2:4d:9e:c7:d6:4c:5c:e6:b4:91:ff:52: 2c:47:3a:79:5c:df:86:b2:d0:ee:61:52:02:44:93:49:35:54: d5:db:48:ca:f4:df:9f:14:f5:6b:3b:9a:a1:4d:d8:c1:3d:0e: dc:03:ae:b7:13:9e:e6:90:1a:18:ca:17:07:4a:2f:93:f7:51: 45:1c:48:92:0d:b0:8b:bc:8d:55:1e:18:a8:61:52:5e:e7:4a: 33:0c:04:53:f8:34:ed:d8:b6:97:6f:d3:9d:12:d5:71:92:79: a1:91:cb:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjQwNTMxMTQ1MjIxWhcNMjQwNjA3MTQ1MjIxWjAYMRYwFAYD VQQDEw02NjU5ZTQyNS02ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RWgWfWaZCzV028IgWtEW3s1iXIWSJ2HcXrS+/lXV+nADzJloCzGHgtLm76z 1O0KyiAmK2okhoQdfKi3m/TybCLcWkKC18oHEG3TD+yGRzo+o3XLNVVap/kAPdED JhcRn8bBwPivNOGDVFoNlVH73gWi7uVVp0KrzrwPoc5LLIwRZ9N5e5LZJxCRcp3p hVaD/bZivLtjLGOO44CCT5cV98gum0ikOJJRMYC2SOUitnK8tMrMiSNKdvfiytFd 8iA5v0XHLSHnUkY5oPa449EBDtYGWOScsKlczI4HPH9pb0st5vzdXbrdf+hbNtLj C4hsX8efdK7eXmR1Bm7FSHa4xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaMfqEc Bl+Z29GBRPHiD4gNHbfFMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4zjpiIW4XZIvSD/9NSSVNzjM8g6S7r1onPk/XKBBoj+qORDAPISbw Smj5A0Qkk1cB6gYPuxP0F7h6KrV6WAvgecd8lnOQ2UcGjcQ61yiA3NyM7z6nHZ07 XWOuBVlebOqmc+pm7ALfBEq90xgL2w30vpQ6uDzyd3p8AfWNUJDHHLQxLRStffU+ EZ9xSR6vdzqCxrCDeyGiTZ7H1kxc5rSR/1IsRzp5XN+GstDuYVICRJNJNVTV20jK 9N+fFPVrO5qhTdjBPQ7cA663E57mkBoYyhcHSi+T91FFHEiSDbCLvI1VHhioYVJe 50ozDART+DTt2LaXb9OdEtVxknmhkctE -----END CERTIFICATE-----Generated at Fri May 31 16:41:45 2024 by rpki-client on console-ams.rpki-client.org