$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: u3D2N1rcKztE/lYG3CBQgytRwHegURWpv5RMOOPB9mg= Subject key identifier: E0:9F:96:2A:D6:4E:DA:02:D4:8C:96:50:BC:4F:48:87:22:C4:3D:41 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 091D Signing time: Wed 24 Apr 2024 21:14:34 +0000 Manifest this update: Wed 24 Apr 2024 21:14:33 +0000 Manifest next update: Wed 01 May 2024 21:14:33 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: 0UJeh6nVNPa/uEY3cyaUmI11VBT+of38CMoQxqx41AA=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: naQ0f1fMl+5YOqPXWqkAJem3Mp8Csnn5VZpRI+ERtew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Apr 24 21:14:33 2024 GMT Not After : May 1 21:14:33 2024 GMT Subject: CN=66297639-32b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:9f:d6:dc:3c:62:6e:3e:9a:95:f5:af:cb: 75:31:e7:f4:cf:18:56:ea:ff:33:1b:a2:a8:94:eb: f6:e1:a7:54:57:2d:75:7c:84:ee:4c:9f:a9:ad:4c: dc:3d:1f:25:9d:0e:ca:89:bd:41:bf:ba:c3:7e:9d: 3d:77:6b:e7:07:c4:86:25:a8:cb:ac:d2:b9:40:b4: 78:67:3f:a8:53:95:93:5e:41:bd:11:fa:dd:7e:b7: 46:19:ba:71:0e:90:f7:cf:b5:d6:93:66:ed:73:e6: 75:ea:88:81:29:eb:2c:b0:31:cc:3e:30:6c:c1:1e: 5a:ca:47:54:e6:65:eb:d1:27:dd:d6:a9:d8:90:49: 5b:5b:9f:63:b2:18:f2:b5:70:b2:57:c4:45:77:23: 65:fc:ea:4b:83:a0:54:a4:89:92:3c:df:45:f7:6d: 00:61:6d:f4:44:c4:33:ea:c4:a6:7e:8a:9f:d5:8b: bb:23:61:46:12:e0:cc:7d:b8:22:28:55:21:69:16: 96:c0:84:b7:5d:c3:49:d3:cf:54:61:54:96:e1:46: ef:7b:cc:b4:15:b1:49:c7:df:6b:8f:8b:69:e3:a8: a8:5e:38:4a:db:9b:3d:d7:5f:7b:43:89:ea:df:9b: fa:fb:6d:f9:61:ec:0d:c9:ef:f7:ea:7a:93:05:16: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9F:96:2A:D6:4E:DA:02:D4:8C:96:50:BC:4F:48:87:22:C4:3D:41 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c4:db:ee:34:18:a3:7d:54:fe:7f:90:86:73:30:b6:f4:64: 66:c8:f7:fd:bc:22:cd:74:9c:a3:cc:ae:af:a8:27:87:71:53: 00:db:50:cd:81:74:1c:77:90:73:d3:aa:11:d1:63:70:e1:e2: 78:c5:c0:ae:84:31:c1:0d:c8:6a:fa:b1:05:af:a3:78:63:35: 83:32:63:6c:dd:8c:14:73:e6:f1:5e:3a:93:38:94:35:a2:27: 82:ad:d9:bb:ba:bc:ae:5b:11:f5:1f:2e:1e:21:32:70:05:d9: 0f:a1:6e:a6:e4:b3:a1:20:42:65:89:82:2b:05:18:cf:8f:c9: 61:d2:e5:93:8b:e2:c2:24:70:7f:0e:93:37:d5:6f:d5:d4:d1: 30:b9:55:c2:59:cf:c0:ee:a8:86:ad:72:40:34:1a:17:9f:7d: e8:69:4f:29:db:98:48:74:14:dc:46:25:c4:90:62:92:00:a9: 33:ca:48:9f:4a:64:54:10:e5:d5:12:2f:9e:7b:73:eb:b2:77: 05:2b:41:3e:40:63:83:a0:c1:ff:da:4e:46:43:76:df:bb:76: c1:52:8e:4d:3f:e6:45:f3:9b:1a:47:a6:25:95:7b:c5:ed:b2: fc:b0:0c:fa:17:73:11:04:d7:6e:bc:b2:83:f2:8e:65:40:f5: d8:31:ff:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjQwNDI0MjExNDMzWhcNMjQwNTAxMjExNDMzWjAYMRYwFAYD VQQDEw02NjI5NzYzOS0zMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT+f1tw8Ym4+mpX1r8t1Mef0zxhW6v8zG6KolOv24adUVy11fITuTJ+prUzc PR8lnQ7Kib1Bv7rDfp09d2vnB8SGJajLrNK5QLR4Zz+oU5WTXkG9EfrdfrdGGbpx DpD3z7XWk2btc+Z16oiBKesssDHMPjBswR5aykdU5mXr0Sfd1qnYkElbW59jshjy tXCyV8RFdyNl/OpLg6BUpImSPN9F920AYW30RMQz6sSmfoqf1Yu7I2FGEuDMfbgi KFUhaRaWwIS3XcNJ089UYVSW4Ubve8y0FbFJx99rj4tp46ioXjhK25s91197Q4nq 35v6+235YewNye/36nqTBRZuMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCflirW TtoC1IyWULxPSIcixD1BMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtxNvuNBijfVT+f5CGczC29GRmyPf9vCLNdJyjzK6vqCeHcVMA21DN gXQcd5Bz06oR0WNw4eJ4xcCuhDHBDchq+rEFr6N4YzWDMmNs3YwUc+bxXjqTOJQ1 oieCrdm7uryuWxH1Hy4eITJwBdkPoW6m5LOhIEJliYIrBRjPj8lh0uWTi+LCJHB/ DpM31W/V1NEwuVXCWc/A7qiGrXJANBoXn33oaU8p25hIdBTcRiXEkGKSAKkzykif SmRUEOXVEi+ee3PrsncFK0E+QGODoMH/2k5GQ3bfu3bBUo5NP+ZF85saR6YllXvF 7bL8sAz6F3MRBNduvLKD8o5lQPXYMf+D -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:02 2024 by rpki-client on console-fra.rpki-client.org