$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: HcgZnkKLKdKhCeQyu2ATq+5c4B/IMYFD1aTrytsGVag= Subject key identifier: 9F:CE:FA:94:B8:9D:3D:D4:43:80:4A:86:CB:C7:96:8D:1A:26:17:A3 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 3415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 33EB Signing time: Thu 02 May 2024 14:30:01 +0000 Manifest this update: Thu 02 May 2024 14:30:00 +0000 Manifest next update: Thu 09 May 2024 14:30:00 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: yKbSK7qtIbZrS9VncZlXMbpka/dssD9joDf3BUJJl1s=) 2: 6AB08D12561011E78FC5FE7FC4F9AE02.roa (hash: 61kZnassBc8stF0ur52qBGG83zIwRfm1r942cp5jHsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13333 (0x3415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: May 2 14:30:00 2024 GMT Not After : May 9 14:30:00 2024 GMT Subject: CN=6633a368-8641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:15:7b:e7:51:27:05:a7:ee:d1:85:0a:15: c9:2e:dc:cd:db:ec:80:1d:de:d8:49:5b:40:c9:1f: 6d:55:ef:4a:29:d1:f0:90:e1:c4:e8:bf:14:d4:48: 05:b4:51:a6:de:b1:ee:71:ba:1f:42:5c:e3:5f:66: 1c:74:c9:ba:a4:4c:f0:68:76:69:f3:45:23:b6:68: 5b:97:30:e9:51:34:d7:b6:08:a0:af:c0:c2:b3:45: 82:c4:f4:6b:db:50:b7:50:a8:d3:4e:05:f7:bb:72: 50:12:2e:49:cf:e1:16:c4:26:17:e0:47:28:2c:de: 4d:58:34:39:4c:74:a1:84:db:e0:7f:3d:2c:84:27: 08:ba:dd:47:e8:73:d1:22:a3:01:bb:6d:c5:bb:dd: bb:ed:95:2c:08:42:79:4f:d2:4f:7f:ba:65:ad:ea: ed:ba:d5:6c:22:5b:9d:23:9b:de:cb:10:93:2e:7d: 4c:10:af:e0:70:27:52:50:8a:af:49:04:99:a1:e0: 87:75:58:e7:94:a9:7b:ce:16:07:60:14:bb:c7:05: ca:87:27:28:79:60:bd:5c:77:fe:d2:ef:c2:7c:a5: 9d:43:03:db:3b:e4:44:1e:0e:ac:7a:bd:fe:5c:8b: 08:98:eb:67:02:9d:42:d3:d1:64:0e:ac:0b:29:e2: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CE:FA:94:B8:9D:3D:D4:43:80:4A:86:CB:C7:96:8D:1A:26:17:A3 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9b:5f:82:e8:7e:1f:c4:03:af:da:bf:d8:12:e7:59:e3:90: 3f:82:c8:16:58:7f:dd:c4:ab:ea:78:b2:d6:03:13:6b:0c:a7: 05:53:a2:ed:dc:aa:95:be:08:12:73:21:ad:9d:2b:5d:c1:25: e0:4d:2f:c6:30:30:20:15:83:e4:0a:fb:71:bb:01:c4:63:0e: cc:71:8a:ce:05:d9:4a:fa:9d:82:f6:b8:23:52:92:dc:95:63: e4:2e:a0:88:4a:ad:ea:4c:84:cc:b2:ae:b0:46:33:21:7c:3d: 7e:ac:c2:7e:cf:92:70:e9:f7:f8:bc:6a:d2:50:4f:12:58:3d: 71:fc:1d:60:14:36:68:34:d8:ab:dd:72:8d:a2:b4:42:46:b4: a5:7d:fc:f6:89:f8:61:e0:71:d3:af:a4:cc:47:0a:6b:da:de: e6:e5:17:0c:3b:49:c3:37:0e:98:21:e2:c5:9c:98:53:03:b6: 7c:d3:c3:8f:aa:7a:78:69:61:fe:2f:ef:1d:95:fa:37:39:b7: 7d:76:68:5c:b9:0f:2f:15:cb:9d:8f:9c:dc:90:67:d8:6f:ae: 5b:15:a0:9b:80:5d:b8:2a:5b:d0:8d:c7:4f:fd:5a:52:1b:1e: 7e:00:e4:67:a6:2c:89:68:4f:31:d8:c7:bf:34:7d:0b:ca:55: e5:5d:68:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjQwNTAyMTQzMDAwWhcNMjQwNTA5MTQzMDAwWjAYMRYwFAYD VQQDEw02NjMzYTM2OC04NjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtoVe+dRJwWn7tGFChXJLtzN2+yAHd7YSVtAyR9tVe9KKdHwkOHE6L8U1EgF tFGm3rHucbofQlzjX2YcdMm6pEzwaHZp80UjtmhblzDpUTTXtgigr8DCs0WCxPRr 21C3UKjTTgX3u3JQEi5Jz+EWxCYX4EcoLN5NWDQ5THShhNvgfz0shCcIut1H6HPR IqMBu23Fu9277ZUsCEJ5T9JPf7plrertutVsIludI5veyxCTLn1MEK/gcCdSUIqv SQSZoeCHdVjnlKl7zhYHYBS7xwXKhycoeWC9XHf+0u/CfKWdQwPbO+REHg6ser3+ XIsImOtnAp1C09FkDqwLKeIptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/O+pS4 nT3UQ4BKhsvHlo0aJhejMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAm1+C6H4fxAOv2r/YEudZ45A/gsgWWH/dxKvqeLLWAxNrDKcFU6Lt 3KqVvggScyGtnStdwSXgTS/GMDAgFYPkCvtxuwHEYw7McYrOBdlK+p2C9rgjUpLc lWPkLqCISq3qTITMsq6wRjMhfD1+rMJ+z5Jw6ff4vGrSUE8SWD1x/B1gFDZoNNir 3XKNorRCRrSlffz2ifhh4HHTr6TMRwpr2t7m5RcMO0nDNw6YIeLFnJhTA7Z808OP qnp4aWH+L+8dlfo3Obd9dmhcuQ8vFcudj5zckGfYb65bFaCbgF24KlvQjcdP/VpS Gx5+AORnpiyJaE8x2Me/NH0LylXlXWil -----END CERTIFICATE-----Generated at Thu May 2 17:43:49 2024 by rpki-client on console-fra.rpki-client.org