$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: CvMo62aG1RzoVrNGIDC1bsM8II4KEgDE1x7OkGvSQPY= Subject key identifier: 69:85:42:43:5B:CD:96:4F:29:90:26:99:CD:69:4B:E4:B1:42:D3:F2 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 04B7 Signing time: Sun 05 May 2024 01:39:32 +0000 Manifest this update: Sun 05 May 2024 01:39:32 +0000 Manifest next update: Sun 12 May 2024 01:39:32 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: 8FNw7kFsRp8GL3eH7dM+eW5+iuOZKlxWXj+6BY6O8X8=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: I19RIY+CbqZNiC1JdtkRQxYZDXeo8xJTLagwLMCtjKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: May 5 01:39:32 2024 GMT Not After : May 12 01:39:32 2024 GMT Subject: CN=6636e354-db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:83:3d:27:55:d4:9c:ee:af:24:57:a4:c4: 2d:97:1f:54:24:d5:f4:d5:9c:e1:0f:97:d6:09:54: f4:3c:fe:70:8c:ad:2e:61:7d:1b:d8:8c:bf:3a:db: c2:ad:fd:f0:9b:35:d4:52:44:5d:2e:df:b1:b6:43: ac:4c:87:8e:79:1c:04:dc:e9:15:2d:13:79:75:ff: b8:11:68:16:a4:04:21:9c:b8:6c:9b:1a:23:4b:05: 15:cc:da:fe:92:da:aa:83:9d:75:d4:0b:32:2f:1e: 9c:6c:64:93:ee:96:8d:d0:e9:72:f3:8c:93:45:ed: 1a:23:e6:c0:5d:0e:ff:05:85:4f:80:ca:8f:02:f4: 8c:e9:9b:d5:a9:d7:2c:0a:f2:8b:b0:38:99:ba:37: 7d:6d:27:91:eb:b4:ec:a1:0d:3a:a7:71:c5:4d:0e: 66:fd:90:8d:39:47:bd:1b:6a:0d:ed:c5:05:1d:d1: 29:e1:e8:f1:b1:1f:db:9e:62:2b:44:28:b2:c4:3d: 95:fc:de:46:02:90:57:22:c5:8d:25:98:78:62:39: 8d:f0:e2:90:84:66:18:cf:1b:5d:b3:6d:40:5c:93: 46:ab:0b:f2:2e:e5:5e:98:0c:74:75:c3:d0:fe:0c: 36:54:8f:3e:75:e2:66:71:4a:9b:6a:ed:95:44:ea: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:42:43:5B:CD:96:4F:29:90:26:99:CD:69:4B:E4:B1:42:D3:F2 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:18:ed:76:00:fc:c1:a1:56:d6:21:02:8b:70:7b:13:cd:2e: 43:50:e3:d5:86:17:38:6b:ed:07:b8:1d:7b:1f:55:ef:7e:b8: bb:92:55:cd:d2:d1:fa:d2:9a:93:b1:80:8f:e2:58:ba:3a:dd: 2c:4e:76:4f:9e:69:db:40:80:de:77:06:75:b7:ba:af:ab:c0: ba:7a:0e:e1:00:01:7c:a9:0d:30:3e:df:0a:03:c5:52:3f:f3: 3f:e5:86:24:f9:6e:ed:03:c6:ad:9c:46:21:0c:f1:19:dc:93: f5:33:9e:06:c1:29:b9:09:7b:ae:33:34:60:f4:a0:68:6a:55: e2:f5:bf:95:95:16:62:4f:5a:66:1b:e7:21:7c:6f:6c:a3:36: 76:17:2f:a7:b1:80:61:1f:6f:e6:d7:2b:70:04:a7:88:b0:ee: ae:ef:db:a8:9c:a8:56:40:a0:b4:64:9d:d6:79:f7:d0:fa:99: 93:01:3c:db:20:b5:55:2c:97:9b:93:fc:9e:c4:b0:f6:0b:61: f5:1f:4b:d8:8b:25:da:83:8b:64:2b:24:9e:62:ff:a6:eb:68: 7c:a9:e8:ad:fb:62:38:ac:a3:99:53:36:ab:8a:65:39:7b:ab: 48:24:80:c1:c9:95:75:3e:32:12:d8:4c:33:b6:fc:64:fd:6e: 4e:17:d2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjQwNTA1MDEzOTMyWhcNMjQwNTEyMDEzOTMyWjAYMRYwFAYD VQQDEw02NjM2ZTM1NC1kYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4P2DPSdV1JzuryRXpMQtlx9UJNX01ZzhD5fWCVT0PP5wjK0uYX0b2Iy/OtvC rf3wmzXUUkRdLt+xtkOsTIeOeRwE3OkVLRN5df+4EWgWpAQhnLhsmxojSwUVzNr+ ktqqg5111AsyLx6cbGST7paN0Oly84yTRe0aI+bAXQ7/BYVPgMqPAvSM6ZvVqdcs CvKLsDiZujd9bSeR67TsoQ06p3HFTQ5m/ZCNOUe9G2oN7cUFHdEp4ejxsR/bnmIr RCiyxD2V/N5GApBXIsWNJZh4YjmN8OKQhGYYzxtds21AXJNGqwvyLuVemAx0dcPQ /gw2VI8+deJmcUqbau2VROpHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmFQkNb zZZPKZAmmc1pS+SxQtPyMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqGO12APzBoVbWIQKLcHsTzS5DUOPVhhc4a+0HuB17H1Xvfri7klXN 0tH60pqTsYCP4li6Ot0sTnZPnmnbQIDedwZ1t7qvq8C6eg7hAAF8qQ0wPt8KA8VS P/M/5YYk+W7tA8atnEYhDPEZ3JP1M54GwSm5CXuuMzRg9KBoalXi9b+VlRZiT1pm G+chfG9sozZ2Fy+nsYBhH2/m1ytwBKeIsO6u79uonKhWQKC0ZJ3WeffQ+pmTATzb ILVVLJebk/yexLD2C2H1H0vYiyXag4tkKySeYv+m62h8qeit+2I4rKOZUzarimU5 e6tIJIDByZV1PjIS2Ewztvxk/W5OF9Ig -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org