$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: h8SrTYmGncjBeLNnWTDcKJdDZcGl3gI+Ty9TSuv9LNU= Subject key identifier: C2:18:A0:DA:67:9C:1F:DC:FB:AA:10:1E:D4:7F:71:48:D3:6A:94:D5 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0B6B Signing time: Sat 04 May 2024 19:42:36 +0000 Manifest this update: Sat 04 May 2024 19:42:36 +0000 Manifest next update: Sat 11 May 2024 19:42:36 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: uQe0WFjGMTL6Nk2OdKAxHfZ/E5jMV40YYkXGicjuEww=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: 3WaMXjV5r4nSW1yYwxDFwZ3faXnEdVurZ589z5o1ing=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: May 4 19:42:36 2024 GMT Not After : May 11 19:42:36 2024 GMT Subject: CN=66368fac-c3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e0:ba:62:3a:2e:6f:c5:99:d3:6b:b6:2d:f2: 3a:55:ef:e8:1e:01:21:d6:1e:23:b8:3c:e3:35:1f: 0a:da:50:95:55:c1:97:68:0a:91:63:f8:2b:50:5c: 89:9d:13:27:d5:46:06:29:56:60:49:bd:e5:bf:7b: c8:87:db:50:97:4e:ef:90:48:ad:63:b0:c3:18:96: 5e:92:0b:88:10:a8:a9:be:e9:2f:05:ec:a1:ee:d8: fb:26:dd:2c:fa:a4:c8:52:55:60:49:ba:8d:30:cd: 78:79:4e:93:18:0f:34:86:36:9c:26:ae:5e:d6:d7: bf:96:49:27:b7:a0:81:dd:c8:26:ab:4a:19:a2:b4: 36:d5:38:84:08:cd:e0:fb:28:a2:5e:a9:48:82:c8: 16:6c:3c:c2:c9:07:f4:57:d5:e8:c8:93:32:64:ff: da:11:6b:8e:31:d2:ab:20:09:b7:12:96:26:71:08: d9:d3:a0:e6:fc:e1:aa:ce:88:6b:f9:aa:3b:00:02: 28:76:3d:b4:72:1e:7a:64:1e:83:53:33:63:38:b2: fd:19:8b:c1:58:90:c8:d3:60:44:8e:6e:84:2d:95: de:b2:53:2a:a0:35:2b:59:72:e2:12:59:9a:f5:e2: 35:25:3a:d1:b3:0a:b9:b8:c9:17:ea:f5:5f:55:f9: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:A0:DA:67:9C:1F:DC:FB:AA:10:1E:D4:7F:71:48:D3:6A:94:D5 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:f6:15:97:17:2d:d7:ae:2d:4a:f3:7a:b1:02:43:7c:1f: 1b:4e:63:3a:c2:33:91:52:09:54:f7:20:f2:d7:77:ef:fc:31: 1c:49:9e:4b:b9:4c:5c:38:73:44:73:5f:78:2a:fc:55:04:15: bd:12:6b:ec:8b:2f:6b:fb:5a:8e:e3:ff:35:d6:38:a6:30:a9: 47:e9:7b:01:f6:3e:4b:3a:cf:9b:7c:f8:3e:65:06:37:bb:3e: 05:ba:cc:99:d5:85:aa:0d:62:13:24:1e:56:ea:46:a2:60:fc: db:be:31:b6:6b:20:a3:a2:bb:1c:3e:97:4f:64:29:0b:a2:eb: 75:d2:9b:b5:1a:62:ae:99:22:84:8f:89:c5:f9:6a:c9:42:30: 57:ec:6a:5a:20:47:2b:ec:2b:5f:28:f3:db:bb:4a:92:f6:a6: fd:0d:f3:b9:a5:3f:18:17:53:a4:6e:16:7f:ca:2f:c1:a4:c8: 07:d3:40:13:55:0c:47:bf:a6:90:3f:79:3e:31:89:ab:f2:bd: e4:3d:63:d4:91:c0:54:1b:de:54:7c:6b:47:d6:60:b2:35:77: ac:c7:01:f0:e4:18:ea:78:ff:9c:c4:88:33:76:39:32:76:6c: 03:21:75:37:38:01:06:90:2e:4f:f4:7d:ac:5a:38:da:3e:e2: 66:3e:1f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjQwNTA0MTk0MjM2WhcNMjQwNTExMTk0MjM2WjAYMRYwFAYD VQQDEw02NjM2OGZhYy1jM2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uC6Yjoub8WZ02u2LfI6Ve/oHgEh1h4juDzjNR8K2lCVVcGXaAqRY/grUFyJ nRMn1UYGKVZgSb3lv3vIh9tQl07vkEitY7DDGJZekguIEKipvukvBeyh7tj7Jt0s +qTIUlVgSbqNMM14eU6TGA80hjacJq5e1te/lkknt6CB3cgmq0oZorQ21TiECM3g +yiiXqlIgsgWbDzCyQf0V9XoyJMyZP/aEWuOMdKrIAm3EpYmcQjZ06Dm/OGqzohr +ao7AAIodj20ch56ZB6DUzNjOLL9GYvBWJDI02BEjm6ELZXeslMqoDUrWXLiElma 9eI1JTrRswq5uMkX6vVfVfkEnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIYoNpn nB/c+6oQHtR/cUjTapTVMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbsfYVlxct164tSvN6sQJDfB8bTmM6wjORUglU9yDy13fv/DEcSZ5L uUxcOHNEc194KvxVBBW9Emvsiy9r+1qO4/811jimMKlH6XsB9j5LOs+bfPg+ZQY3 uz4FusyZ1YWqDWITJB5W6kaiYPzbvjG2ayCjorscPpdPZCkLout10pu1GmKumSKE j4nF+WrJQjBX7GpaIEcr7CtfKPPbu0qS9qb9DfO5pT8YF1OkbhZ/yi/BpMgH00AT VQxHv6aQP3k+MYmr8r3kPWPUkcBUG95UfGtH1mCyNXesxwHw5BjqeP+cxIgzdjky dmwDIXU3OAEGkC5P9H2sWjjaPuJmPh/0 -----END CERTIFICATE-----Generated at Sat May 4 20:37:14 2024 by rpki-client on console-fra.rpki-client.org