$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft File: zsJ8djIfZke8cP1A2bcKYu21h6M.mft (raw, json) Hash identifier: WYaqI2puzCwASe7dM5WUsjLcfadpkn9YMKvCWIOHSXY= Subject key identifier: C2:67:FA:78:B2:9E:1F:6B:74:4E:90:F8:31:CD:6A:32:86:43:49:C5 Authority key identifier: CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3 Certificate issuer: /CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft Manifest number: 03F0 Signing time: Fri 03 May 2024 02:19:39 +0000 Manifest this update: Fri 03 May 2024 02:19:39 +0000 Manifest next update: Fri 10 May 2024 02:19:39 +0000 Files and hashes: 1: zsJ8djIfZke8cP1A2bcKYu21h6M.crl (hash: h8NoHEZzq9gZas2lBNZgHTmv3V1wKRSArCeP4zk7L9I=) 2: 54D87FE02C2B11ECB519751BC4F9AE02.roa (hash: HxMzBwU0drdsgNcvOSUabUc0qZPrH3Qhh76eZIqC/MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0D1A/serialNumber=CEC27C76321F6647BC70FD40D9B70A62EDB587A3 Validity Not Before: May 3 02:19:39 2024 GMT Not After : May 10 02:19:39 2024 GMT Subject: CN=663449bb-2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:4c:20:9f:cd:cd:19:d6:38:b7:e5:5a:69: 6c:cd:e1:7c:6f:85:0f:70:18:36:d8:7f:ab:b4:8a: 59:02:2c:d2:ef:97:09:2a:3b:f8:d3:b2:03:a4:6d: 6f:66:7d:db:a3:e8:74:2e:a7:08:81:52:c7:ab:dc: ed:9b:99:e2:c6:8a:53:89:17:32:21:1a:17:d6:5e: 5d:55:88:9b:58:8d:0c:1c:d0:19:26:f9:aa:8b:5b: ea:e3:d6:3a:19:5c:67:2e:12:a9:7f:47:00:8d:8f: 8c:4e:1e:8e:c4:d4:44:1d:c6:2b:be:bb:7c:cd:fe: c2:1c:57:fc:a9:4a:10:d7:6f:f6:bc:09:ce:99:4a: 2f:96:05:60:20:c4:1a:6a:a1:e8:a5:3a:17:e6:a2: 93:6a:00:e7:51:87:56:b2:be:02:d4:55:c5:8f:50: 5d:aa:4d:06:b8:95:35:c8:e4:dd:c3:24:da:40:6c: e4:38:c9:1f:77:00:c2:19:25:56:b8:11:e8:60:20: 62:7d:ec:ce:eb:9a:12:1d:9a:db:91:96:92:4f:dd: 38:23:94:0e:39:12:ed:6c:fc:f9:13:dc:eb:bf:52: dc:0d:2c:71:8c:fd:17:69:d5:ac:12:8b:7c:b2:e2: 69:b4:61:6f:60:0a:75:d4:61:a5:23:d1:83:8a:9d: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:FA:78:B2:9E:1F:6B:74:4E:90:F8:31:CD:6A:32:86:43:49:C5 X509v3 Authority Key Identifier: keyid:CE:C2:7C:76:32:1F:66:47:BC:70:FD:40:D9:B7:0A:62:ED:B5:87:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsJ8djIfZke8cP1A2bcKYu21h6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0D1A/706B35982C2811ECB4902416C4F9AE02/zsJ8djIfZke8cP1A2bcKYu21h6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bd:b8:f7:79:20:b5:b5:a4:69:ec:bd:f4:d4:0e:5c:34:ab: 3a:e9:a8:ac:af:91:b9:da:78:8c:8a:cb:61:01:63:dc:57:be: 71:22:0b:1d:8f:a3:61:9e:2f:79:45:ac:e5:2f:16:34:a8:b5: 68:f4:d1:cb:3a:ed:21:2a:35:d9:6f:e4:27:15:66:6f:7b:08: d7:53:37:59:45:f9:2d:2e:10:08:ea:9c:8e:61:38:89:4d:63: 70:74:d4:11:77:a7:22:a0:b0:b7:21:7f:c1:fa:6d:1d:97:9d: f6:2c:48:70:56:bc:90:92:4c:f2:10:47:76:b1:eb:0a:f9:90: 40:d5:94:fb:cc:05:dd:b8:cc:54:d3:44:54:e3:6f:82:0b:12: c8:aa:52:84:0a:a6:84:48:f6:99:db:ef:e6:11:28:87:18:48: df:64:8f:6a:da:8f:66:b3:1b:cd:fa:87:6f:67:30:4b:a0:84: b0:40:c3:a4:df:fe:10:af:94:ff:db:13:88:28:9a:3a:cc:46: 7f:7a:ab:a1:ec:ec:de:6a:be:f0:03:a1:68:a0:d3:5f:a5:1e: db:37:88:95:ff:53:89:67:c7:6a:b0:b4:60:90:57:21:28:06: 9c:f5:92:c2:bb:16:3c:67:7d:f9:b2:1f:a8:3e:76:a5:8c:a4: 4c:fc:48:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBEMUExMTAvBgNVBAUTKENFQzI3Qzc2MzIxRjY2NDdCQzcwRkQ0MEQ5QjcwQTYy RURCNTg3QTMwHhcNMjQwNTAzMDIxOTM5WhcNMjQwNTEwMDIxOTM5WjAYMRYwFAYD VQQDEw02NjM0NDliYi0yZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3VMIJ/NzRnWOLflWmlszeF8b4UPcBg22H+rtIpZAizS75cJKjv407IDpG1v Zn3bo+h0LqcIgVLHq9ztm5nixopTiRcyIRoX1l5dVYibWI0MHNAZJvmqi1vq49Y6 GVxnLhKpf0cAjY+MTh6OxNREHcYrvrt8zf7CHFf8qUoQ12/2vAnOmUovlgVgIMQa aqHopToX5qKTagDnUYdWsr4C1FXFj1Bdqk0GuJU1yOTdwyTaQGzkOMkfdwDCGSVW uBHoYCBifezO65oSHZrbkZaST904I5QOORLtbPz5E9zrv1LcDSxxjP0XadWsEot8 suJptGFvYAp11GGlI9GDip1KswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJn+niy nh9rdE6Q+DHNajKGQ0nFMB8GA1UdIwQYMBaAFM7CfHYyH2ZHvHD9QNm3CmLttYej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEQxQS83MDZCMzU5ODJD MjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlprZThjUDFBMmJjS1l1MjFo Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzSjhkaklmWmtlOGNQMUEyYmNLWXUyMWg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEQxQS83MDZCMzU5ODJDMjgxMUVDQjQ5MDI0MTZDNEY5QUUwMi96c0o4ZGpJZlpr ZThjUDFBMmJjS1l1MjFoNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbvbj3eSC1taRp7L301A5cNKs66aisr5G52niMisthAWPcV75xIgsd j6Nhni95RazlLxY0qLVo9NHLOu0hKjXZb+QnFWZvewjXUzdZRfktLhAI6pyOYTiJ TWNwdNQRd6cioLC3IX/B+m0dl532LEhwVryQkkzyEEd2sesK+ZBA1ZT7zAXduMxU 00RU42+CCxLIqlKECqaESPaZ2+/mESiHGEjfZI9q2o9msxvN+odvZzBLoISwQMOk 3/4Qr5T/2xOIKJo6zEZ/equh7Ozear7wA6FooNNfpR7bN4iV/1OJZ8dqsLRgkFch KAac9ZLCuxY8Z335sh+oPnaljKRM/EiH -----END CERTIFICATE-----Generated at Fri May 3 04:45:27 2024 by rpki-client on console-fra.rpki-client.org