$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: z9sc2ZSfdx8WtkSmDUW/RgC6Pb3Lter60RJc6Y+KSl4= Subject key identifier: 94:89:63:88:9F:2B:EC:AA:46:F1:8D:DA:8A:D7:3B:9D:32:19:47:3E Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 06D1 Signing time: Fri 26 Apr 2024 22:55:58 +0000 Manifest this update: Fri 26 Apr 2024 22:55:57 +0000 Manifest next update: Fri 03 May 2024 22:55:57 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: yxTlcj4/CMQerkXOgoYN6MMDEnPs5QRxvev0yZhZ720=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: FXmw/EsM8nOiCZFQ7E5OFZH8Un4u58kKkxDSRLkiXyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Apr 26 22:55:57 2024 GMT Not After : May 3 22:55:57 2024 GMT Subject: CN=662c30fd-6fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3e:6b:47:35:86:7d:9a:83:2c:5a:39:a8:05: 2c:a0:bb:49:fe:35:b2:89:00:d6:79:1f:bb:b9:f0: f4:3f:e5:b7:b6:58:f4:22:46:1f:63:d5:57:87:3d: 98:a9:d8:2c:fe:89:79:1d:ca:bb:43:8a:ca:9c:e1: 4e:18:b6:5d:f9:98:40:f8:93:dc:bf:fb:13:05:8e: 45:31:a0:9e:c1:07:17:e0:63:63:10:2e:f6:1f:0b: 21:8e:82:f6:7d:f0:eb:cd:c5:4a:42:dd:a4:ba:81: ab:2a:c1:90:84:9e:de:57:11:1b:2a:54:d2:04:f5: 73:19:da:91:0c:eb:3a:5e:2b:5c:4b:ff:5e:68:26: da:e2:54:f0:41:93:23:3b:d6:47:cd:9b:d8:7a:0b: b0:61:d8:23:a3:b8:62:a6:83:27:9a:95:1c:db:fe: 31:92:97:5a:e9:09:2e:02:c0:45:3f:83:be:8b:08: 5d:f4:45:2a:84:b0:fc:51:e7:c0:5f:f1:ed:ae:6c: 0d:59:a9:81:70:29:7f:df:a7:a5:17:b9:15:fc:22: 9c:25:03:3d:ad:22:80:df:a8:56:20:15:5f:43:ca: ea:c4:e7:ca:07:33:fa:bc:6e:96:02:f4:57:d3:bd: cd:b5:44:0b:b7:4f:cc:4d:f5:23:0a:ab:42:55:11: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:89:63:88:9F:2B:EC:AA:46:F1:8D:DA:8A:D7:3B:9D:32:19:47:3E X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:ed:f4:19:dd:bc:84:ed:a6:61:d0:12:5d:95:c4:4f:49: 57:a2:e6:3d:3c:90:03:1c:cc:da:46:60:f6:47:b2:57:6b:75: d1:57:f7:1f:83:98:10:7a:55:74:71:c0:58:1c:e7:54:e8:2e: 19:44:08:cd:a6:96:c9:13:a9:55:5d:60:1a:82:5f:ac:f8:77: 19:6c:ea:d2:c5:b2:ae:91:13:4e:73:d5:c7:06:8a:21:fd:58: 64:9d:a7:bc:0c:ef:1e:d5:43:f5:45:71:84:63:b0:d2:e3:f8: 7b:f3:50:a4:49:0a:16:99:3b:6b:83:23:ee:65:d5:bd:55:b3: cc:f9:2c:a1:81:56:7f:d9:a8:14:5d:6d:1b:c2:8c:a3:32:50: e8:a9:28:fa:8d:63:86:cd:fc:c6:05:ad:9b:fa:d9:22:f9:1d: 04:7c:8b:18:30:0f:63:d1:be:f0:42:9a:44:e0:a1:f0:76:00: c9:c0:27:9f:40:f5:f8:89:4d:4f:3d:15:91:78:c2:64:64:ec: ef:cb:d4:fd:05:13:f5:e8:9d:6b:ed:77:94:06:e5:c4:c7:00: d9:26:86:ea:cd:bc:44:a8:b0:86:4b:65:37:5f:f8:23:bd:f4: 6d:fe:2a:26:28:99:dc:f8:5b:7a:43:4e:59:8b:1e:7b:12:58: be:da:8f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjQwNDI2MjI1NTU3WhcNMjQwNTAzMjI1NTU3WjAYMRYwFAYD VQQDEw02NjJjMzBmZC02ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8j5rRzWGfZqDLFo5qAUsoLtJ/jWyiQDWeR+7ufD0P+W3tlj0IkYfY9VXhz2Y qdgs/ol5Hcq7Q4rKnOFOGLZd+ZhA+JPcv/sTBY5FMaCewQcX4GNjEC72HwshjoL2 ffDrzcVKQt2kuoGrKsGQhJ7eVxEbKlTSBPVzGdqRDOs6XitcS/9eaCba4lTwQZMj O9ZHzZvYeguwYdgjo7hipoMnmpUc2/4xkpda6QkuAsBFP4O+iwhd9EUqhLD8UefA X/HtrmwNWamBcCl/36elF7kV/CKcJQM9rSKA36hWIBVfQ8rqxOfKBzP6vG6WAvRX 073NtUQLt0/MTfUjCqtCVREkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSJY4if K+yqRvGN2orXO50yGUc+MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY5e30Gd28hO2mYdASXZXET0lXouY9PJADHMzaRmD2R7JXa3XRV/cf g5gQelV0ccBYHOdU6C4ZRAjNppbJE6lVXWAagl+s+HcZbOrSxbKukRNOc9XHBooh /Vhknae8DO8e1UP1RXGEY7DS4/h781CkSQoWmTtrgyPuZdW9VbPM+SyhgVZ/2agU XW0bwoyjMlDoqSj6jWOGzfzGBa2b+tki+R0EfIsYMA9j0b7wQppE4KHwdgDJwCef QPX4iU1PPRWReMJkZOzvy9T9BRP16J1r7XeUBuXExwDZJobqzbxEqLCGS2U3X/gj vfRt/iomKJnc+Ft6Q05Zix57Eli+2o/+ -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:32 2024 by rpki-client on console-ams.rpki-client.org