$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: yMaFu809La+GC44ByM7DTLKf5aKMQ4XB0DgPYsQeZuM= Subject key identifier: 5C:20:49:17:DD:D2:40:3D:D7:51:89:02:ED:E7:4F:40:E0:25:11:D1 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: D6 Signing time: Wed 15 May 2024 06:51:10 +0000 Manifest this update: Wed 15 May 2024 06:51:10 +0000 Manifest next update: Wed 22 May 2024 06:51:10 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: a4A9FzewXvzSy4ySK1iN0+VQssqTb48S2bK9D/5WEV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: May 15 06:51:10 2024 GMT Not After : May 22 06:51:10 2024 GMT Subject: CN=66445b5e-0ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b2:1c:da:06:c6:68:97:cd:17:18:f3:61:bc: 1e:b5:67:8b:f7:78:19:22:8a:f9:1e:8a:2f:a9:65: 03:16:3c:b0:10:e6:35:47:71:17:71:4c:60:b3:8a: fb:a0:92:93:d3:a1:cd:e0:03:f2:a5:61:73:7c:00: 9a:e0:7c:5e:b1:67:d9:99:ff:27:5e:ee:81:ee:58: b3:79:72:3b:5a:38:31:ee:aa:53:a2:ba:37:85:85: 27:80:c5:37:5d:70:86:80:98:18:62:a2:80:60:02: 38:c5:f2:f1:d6:ec:e1:9e:51:eb:32:42:d2:3d:bf: ea:06:83:39:59:ef:b9:98:2b:69:ad:0d:db:6b:34: a0:fa:81:e0:e9:fc:33:a8:41:8e:85:5e:cb:25:99: 69:ee:60:9a:bb:be:52:5d:09:99:52:87:96:40:5c: b2:a6:8a:f7:0e:ff:34:82:50:aa:51:59:27:c9:db: 66:9f:e6:46:92:d4:5f:2e:ef:3b:cd:f8:9e:89:a3: f2:b3:7a:b1:3b:e0:3d:a7:7c:ec:54:e1:0d:a2:8a: 39:bd:48:d4:72:b0:b0:43:db:2f:05:5a:4c:3b:36: 0f:f5:99:d7:53:1a:47:a4:21:5a:53:b6:e8:19:4e: 34:53:9d:c9:3f:41:8d:df:88:2c:3a:31:92:bc:8b: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:20:49:17:DD:D2:40:3D:D7:51:89:02:ED:E7:4F:40:E0:25:11:D1 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:91:bb:0b:73:d4:e3:ab:a2:b6:b1:d3:32:29:7e:32:b2:f6: 69:75:a3:ea:2e:78:4d:9b:e1:23:7a:b1:42:c5:fb:18:4b:4f: f2:06:43:15:fe:6c:3e:6a:3b:08:26:b6:e0:20:3e:49:6e:bb: e6:9b:60:df:ea:bb:3b:53:05:8d:7d:ea:d6:58:24:1f:77:14: 6b:17:79:08:04:5b:a7:cd:72:33:1a:19:a3:2e:8a:d0:25:2e: f7:44:40:b0:a4:25:9b:72:26:89:46:9f:8e:44:42:9f:bc:b9: ef:22:68:53:f5:16:6a:9c:f4:23:24:02:62:cd:99:41:6a:11: 2b:e4:9f:21:40:21:1a:0d:39:c4:e4:4e:c8:80:aa:cb:4a:18: 41:f1:ae:fb:43:bc:6f:fc:49:54:78:f7:c6:0c:f9:a4:e2:ef: d8:2a:b9:cd:01:e8:6f:86:a1:5c:77:bc:70:fe:07:65:0a:6c: a6:e2:30:e1:fa:fa:ea:63:77:64:c7:b3:d3:0e:3f:e4:17:49: 4f:b3:62:fc:a0:ba:12:c4:e0:46:ab:c2:02:b7:15:c2:ef:bb: 91:63:73:5a:68:6f:17:c8:46:ba:2f:2d:aa:4d:ab:b9:a6:cf: 44:ac:99:fe:8a:af:97:e9:6d:8f:06:c3:07:b2:89:ba:64:aa: 49:e3:e0:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjQwNTE1MDY1MTEwWhcNMjQwNTIyMDY1MTEwWjAYMRYwFAYD VQQDEw02NjQ0NWI1ZS0wY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77Ic2gbGaJfNFxjzYbwetWeL93gZIor5HoovqWUDFjywEOY1R3EXcUxgs4r7 oJKT06HN4APypWFzfACa4HxesWfZmf8nXu6B7lizeXI7Wjgx7qpToro3hYUngMU3 XXCGgJgYYqKAYAI4xfLx1uzhnlHrMkLSPb/qBoM5We+5mCtprQ3bazSg+oHg6fwz qEGOhV7LJZlp7mCau75SXQmZUoeWQFyypor3Dv80glCqUVknydtmn+ZGktRfLu87 zfieiaPys3qxO+A9p3zsVOENooo5vUjUcrCwQ9svBVpMOzYP9ZnXUxpHpCFaU7bo GU40U53JP0GN34gsOjGSvItUkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwgSRfd 0kA911GJAu3nT0DgJRHRMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkbsLc9Tjq6K2sdMyKX4ysvZpdaPqLnhNm+EjerFCxfsYS0/yBkMV /mw+ajsIJrbgID5Jbrvmm2Df6rs7UwWNferWWCQfdxRrF3kIBFunzXIzGhmjLorQ JS73RECwpCWbciaJRp+OREKfvLnvImhT9RZqnPQjJAJizZlBahEr5J8hQCEaDTnE 5E7IgKrLShhB8a77Q7xv/ElUePfGDPmk4u/YKrnNAehvhqFcd7xw/gdlCmym4jDh +vrqY3dkx7PTDj/kF0lPs2L8oLoSxOBGq8ICtxXC77uRY3NaaG8XyEa6Ly2qTau5 ps9ErJn+iq+X6W2PBsMHsom6ZKpJ4+Cx -----END CERTIFICATE-----Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org