$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: DaTgJY0HKqWlH5IJ7g1WZuPcoWlzJXWxwj4ZfOnzGIY= Subject key identifier: DE:04:03:1C:19:F9:DA:8D:4C:22:85:11:87:69:35:65:D1:39:3A:E6 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1CA2 Signing time: Tue 30 Apr 2024 16:39:22 +0000 Manifest this update: Tue 30 Apr 2024 16:39:22 +0000 Manifest next update: Tue 07 May 2024 16:39:22 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: 4NvyM6yaNAkJaoE/JMUTGhzLk94fYeYZkksGD0Ub/cw=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: ce/f73SfrYJPg/gjQh7xIiEuRGOCIfNjuOOVpMGHrCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7353 (0x1cb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Apr 30 16:39:22 2024 GMT Not After : May 7 16:39:22 2024 GMT Subject: CN=66311eba-a5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:9a:ea:53:8a:0d:ff:b4:3d:7c:62:12:95: cd:fb:32:c6:09:bb:27:90:d0:ec:93:c6:15:25:d4: a5:c6:8d:e4:b2:d9:4a:15:8a:b6:bc:83:95:16:86: d2:69:c6:60:3c:70:35:89:28:0f:10:06:1c:8c:61: 3b:6e:8c:82:9d:ac:82:d4:07:2e:32:e7:59:63:89: b6:82:a4:00:56:1a:6a:75:1f:38:1a:b0:c9:8d:61: 94:c6:b2:83:63:50:9a:b9:3d:bc:88:d6:e5:5f:cd: 4d:2e:7a:b3:62:85:33:19:9e:bc:96:34:49:64:bb: f2:0e:5a:50:e0:3b:b3:98:97:ed:ef:99:fb:dd:70: 7d:39:cf:dd:e8:c7:8a:3d:92:e5:9b:5b:80:63:3a: 68:b9:df:fc:e5:f2:89:53:aa:7e:6f:6c:ac:0b:4e: 45:f8:cf:5d:4b:b6:e8:3b:57:e1:a0:d8:06:e4:06: 8e:a6:a5:ea:b3:a9:2a:0d:ce:c6:74:fb:f1:01:9f: 7b:88:5a:eb:77:64:d6:b3:dc:21:88:00:b9:ef:af: c0:1f:b6:25:a1:f4:eb:fd:a9:4d:f3:75:f4:05:bc: 95:a1:4b:3f:ec:d7:cd:15:59:7a:94:47:74:49:dc: be:91:1e:9f:72:ef:3a:dd:c4:aa:c6:e4:b1:20:98: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:03:1C:19:F9:DA:8D:4C:22:85:11:87:69:35:65:D1:39:3A:E6 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:96:e9:e0:85:27:f7:96:06:1f:0d:8a:3d:56:ec:ca:20:e1: c3:24:26:56:0c:2c:81:b6:d9:87:5d:1e:f7:72:6d:56:2b:8a: 40:db:80:15:01:cf:ec:6b:00:9c:5d:dd:a6:98:cf:c4:55:53: 69:13:76:9a:e7:a7:21:e7:e9:61:f0:66:fe:e4:02:ba:5a:9b: 1c:bc:5e:0e:ec:5f:1c:9a:f7:b0:1b:75:89:54:ad:75:39:24: 03:6f:14:92:73:0c:a5:f2:d9:93:f0:87:b6:5b:68:ae:dd:bf: 49:e6:24:36:df:4e:46:9c:d1:dc:35:73:c4:91:9f:d5:70:18: 6c:46:1e:f7:d9:59:d8:5e:32:12:f0:21:2d:7f:ea:56:b8:db: ae:6c:78:0f:23:a1:24:97:f5:b7:b4:22:4f:86:d6:9c:ae:85: b4:7c:f5:7a:bd:1b:e8:8b:33:16:f6:77:95:05:f3:6a:5d:25: 75:c9:e8:31:7a:b5:d1:78:2b:92:44:ac:78:32:a3:91:64:7f: 6c:bd:6d:a0:e4:0f:76:4f:b1:b8:50:ce:11:65:a8:8b:e3:12: 0f:90:72:0a:29:95:0e:08:d7:e6:da:f7:94:ca:55:fa:ca:f0: 36:1c:db:63:c3:59:59:ab:a4:85:71:dc:a8:2d:ac:4d:88:59: ad:f2:a4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjQwNDMwMTYzOTIyWhcNMjQwNTA3MTYzOTIyWjAYMRYwFAYD VQQDEw02NjMxMWViYS1hNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAWa6lOKDf+0PXxiEpXN+zLGCbsnkNDsk8YVJdSlxo3kstlKFYq2vIOVFobS acZgPHA1iSgPEAYcjGE7boyCnayC1AcuMudZY4m2gqQAVhpqdR84GrDJjWGUxrKD Y1CauT28iNblX81NLnqzYoUzGZ68ljRJZLvyDlpQ4DuzmJft75n73XB9Oc/d6MeK PZLlm1uAYzpoud/85fKJU6p+b2ysC05F+M9dS7boO1fhoNgG5AaOpqXqs6kqDc7G dPvxAZ97iFrrd2TWs9whiAC576/AH7YlofTr/alN83X0BbyVoUs/7NfNFVl6lEd0 Sdy+kR6fcu863cSqxuSxIJj1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4EAxwZ +dqNTCKFEYdpNWXROTrmMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8lunghSf3lgYfDYo9VuzKIOHDJCZWDCyBttmHXR73cm1WK4pA24AV Ac/sawCcXd2mmM/EVVNpE3aa56ch5+lh8Gb+5AK6WpscvF4O7F8cmvewG3WJVK11 OSQDbxSScwyl8tmT8Ie2W2iu3b9J5iQ2305GnNHcNXPEkZ/VcBhsRh732VnYXjIS 8CEtf+pWuNuubHgPI6Ekl/W3tCJPhtacroW0fPV6vRvoizMW9neVBfNqXSV1yegx erXReCuSRKx4MqORZH9svW2g5A92T7G4UM4RZaiL4xIPkHIKKZUOCNfm2veUylX6 yvA2HNtjw1lZq6SFcdyoLaxNiFmt8qR+ -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:37 2024 by rpki-client on console-fra.rpki-client.org