$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft File: zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft (raw, json) Hash identifier: 8rrbGe7sD8JNZQr5fpZOXwaDxbnpYVWxmaqfCtLQCW0= Subject key identifier: 00:C7:9E:CA:5E:78:07:A1:8A:6A:00:A3:D2:F8:22:75:05:83:C0:9E Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 Certificate issuer: /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Certificate serial: 0E91 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft Manifest number: 0E82 Signing time: Sun 02 Jun 2024 18:35:40 +0000 Manifest this update: Sun 02 Jun 2024 18:35:40 +0000 Manifest next update: Sun 09 Jun 2024 18:35:40 +0000 Files and hashes: 1: zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl (hash: 7ricZLpLXZQ+/GcqXisxTTHaMeFDQMvu1sVM7LkLjeA=) 2: E56FCF286F9E11E9B98EF633C4F9AE02.roa (hash: HrD8wloe3iue1rkCggoa0BL5sTfzVaZdzTzTDbT0lGk=) 3: 5BCA77886F9D11E99D2E7930C4F9AE02.roa (hash: 3z4jFf2H8dfDXzTJviTES87G2aAZrK2+SrqCt0vte5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3729 (0xe91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Validity Not Before: Jun 2 18:35:40 2024 GMT Not After : Jun 9 18:35:40 2024 GMT Subject: CN=665cbb7c-7b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:57:17:dc:1c:4e:63:31:08:70:28:00:9b: 2f:98:16:ae:2e:1e:49:e0:c6:2e:32:19:ed:1f:25: c3:04:bc:e9:b0:7f:f0:33:5f:09:15:07:a4:02:4c: c3:9f:8d:3b:3f:66:16:7d:fb:34:92:63:cd:e7:28: 59:b6:4e:e9:14:b5:75:66:a3:28:7d:04:2f:f3:68: 88:90:86:7e:47:90:1d:ea:b4:86:22:08:29:3f:46: b3:be:db:6d:e7:3d:70:cf:8d:1e:b5:48:fc:9d:94: 91:7d:a0:b2:11:b2:9a:e7:8c:99:b5:78:10:ac:cf: 1d:d0:87:b3:7d:70:a7:4d:46:8e:02:63:d0:18:23: af:f4:ed:5d:8e:ac:5f:f9:73:2d:08:cd:b9:c9:f5: 99:39:fa:2f:91:10:dd:c0:ee:a7:cd:9c:ef:f9:cc: c6:02:a2:da:e9:be:7a:b0:8e:83:6a:4d:7b:29:31: a0:8b:63:77:f0:89:a3:86:2c:14:46:71:52:76:fe: 50:66:b9:75:66:16:b4:3c:f4:ae:69:ae:d0:27:7d: fe:29:38:53:92:65:f7:4f:c9:00:1b:35:a1:e9:07: ae:44:65:4b:65:99:50:66:82:d9:5e:da:98:66:ed: ae:49:d0:61:7d:36:e9:b5:c9:4a:27:45:9e:ba:bf: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:9E:CA:5E:78:07:A1:8A:6A:00:A3:D2:F8:22:75:05:83:C0:9E X509v3 Authority Key Identifier: keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cc:18:a3:d3:0a:0f:28:eb:79:71:05:5c:39:db:23:11:07: a7:3b:42:ec:16:81:3e:21:c4:f1:a2:66:dd:05:86:98:fa:8d: 57:8c:d7:e4:dd:60:79:0c:92:ff:c7:ee:0d:ed:b0:1a:9d:40: 77:d5:29:9b:9d:0a:ea:d9:05:fe:2a:ed:c8:86:10:c8:18:5c: 2a:28:1f:53:9c:3a:4a:d1:23:b5:e7:9c:56:30:7c:d8:77:0e: a9:3c:32:de:54:a9:25:cb:e5:14:20:52:1c:13:b1:90:80:1a: b6:2c:f6:74:0a:fc:f0:31:b6:c4:c4:40:06:4f:ed:ff:8d:68: 58:da:9a:5f:35:83:82:d8:dd:76:5c:f4:15:02:44:36:01:8a: e8:d9:bb:1b:66:86:06:13:7c:63:70:92:be:e1:a0:4e:6c:38: 5d:76:3a:4c:66:63:51:69:be:f2:3f:bb:ba:cb:41:0e:20:26: 1d:37:e1:ec:55:92:7c:bd:58:e5:a9:90:12:ee:b1:b5:8e:12: a8:9f:87:a5:08:c7:b1:18:1a:a8:87:f7:37:e6:81:d1:5d:e8: 17:5e:14:7c:40:11:ca:2a:9a:16:1f:12:3c:18:aa:59:49:8d: 5c:d8:1c:4e:a7:2c:87:ab:7d:b5:39:0f:5a:34:3a:bb:9a:3d: 4c:58:1d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKENDQ0U1NEVFQUZCRjkzMjEzQ0Q5OTJCQ0ExRTUyNjdE NTA1MkIzQzcwHhcNMjQwNjAyMTgzNTQwWhcNMjQwNjA5MTgzNTQwWjAYMRYwFAYD VQQDEw02NjVjYmI3Yy03Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KJXF9wcTmMxCHAoAJsvmBauLh5J4MYuMhntHyXDBLzpsH/wM18JFQekAkzD n407P2YWffs0kmPN5yhZtk7pFLV1ZqMofQQv82iIkIZ+R5Ad6rSGIggpP0azvttt 5z1wz40etUj8nZSRfaCyEbKa54yZtXgQrM8d0IezfXCnTUaOAmPQGCOv9O1djqxf +XMtCM25yfWZOfovkRDdwO6nzZzv+czGAqLa6b56sI6Dak17KTGgi2N38ImjhiwU RnFSdv5QZrl1Zha0PPSuaa7QJ33+KThTkmX3T8kAGzWh6QeuRGVLZZlQZoLZXtqY Zu2uSdBhfTbptclKJ0Weur81MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADHnspe eAehimoAo9L4InUFg8CeMB8GA1UdIwQYMBaAFMzOVO6vv5MhPNmSvKHlJn1QUrPH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS85QkE5NzFBMjZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5RTgyWks4b2VVbWZWQlNz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pNNVU3cS1fa3lFODJaSzhvZVVtZlZCU3M4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS85QkE5NzFBMjZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5 RTgyWks4b2VVbWZWQlNzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwzBij0woPKOt5cQVcOdsjEQenO0LsFoE+IcTxombdBYaY+o1XjNfk 3WB5DJL/x+4N7bAanUB31SmbnQrq2QX+Ku3IhhDIGFwqKB9TnDpK0SO155xWMHzY dw6pPDLeVKkly+UUIFIcE7GQgBq2LPZ0CvzwMbbExEAGT+3/jWhY2ppfNYOC2N12 XPQVAkQ2AYro2bsbZoYGE3xjcJK+4aBObDhddjpMZmNRab7yP7u6y0EOICYdN+Hs VZJ8vVjlqZAS7rG1jhKon4elCMexGBqoh/c35oHRXegXXhR8QBHKKpoWHxI8GKpZ SY1c2BxOpyyHq321OQ9aNDq7mj1MWB3j -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:01 2024 by rpki-client on console-fra.rpki-client.org