$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: Zsf5FpRvO+7rua29l2Xgo6aVGRb0euEdHtZXLUmF+3g= Subject key identifier: 3C:42:DD:05:68:0C:44:95:C5:B5:4A:A1:78:08:63:17:B3:06:8A:16 Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 067B Signing time: Mon 06 May 2024 23:29:49 +0000 Manifest this update: Mon 06 May 2024 23:29:48 +0000 Manifest next update: Mon 13 May 2024 23:29:48 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: WQ/JuTQdEJU58zNNUos0+G3XQT9iWufEGSuCZf70iMI=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: XwziNkWK08F4hzx4s4+EgNWlJBJ2Ct7s2nnIkH1ghzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Validity Not Before: May 6 23:29:48 2024 GMT Not After : May 13 23:29:48 2024 GMT Subject: CN=663967ec-4cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:52:20:80:94:99:2e:fa:f1:6b:a8:14:a9: 46:93:cf:f3:3c:f6:0a:51:5c:53:3b:45:c5:32:8a: 9d:35:86:7a:da:02:b4:53:bb:3b:57:79:4b:34:3c: 7a:8d:2f:63:0f:48:88:e9:59:9e:55:67:cd:bc:9d: 8b:19:46:83:61:33:7b:34:6b:cb:ed:5e:e3:1c:e8: f5:fb:1e:77:cb:c5:76:3f:d5:40:d2:0c:b5:2d:2c: 19:29:06:17:00:d9:43:f2:e0:b0:8f:e4:ce:91:35: 52:13:a2:c1:10:3d:72:df:84:21:5d:c0:0d:cd:65: 6f:cd:63:65:fc:d0:44:a9:df:a4:08:7b:86:09:36: 92:09:f1:d8:68:57:6b:37:8b:73:6b:07:78:61:7e: 9d:73:87:4e:c1:59:cf:94:6b:58:37:4a:f4:98:e1: 32:05:1f:46:b2:6c:5f:2a:fb:78:f6:5f:7d:bd:b8: ac:ab:0a:85:af:68:4c:7e:5c:07:ba:52:16:29:4a: f2:4c:02:e2:03:a3:7a:b9:b4:07:af:dc:af:d3:cf: 25:c7:6f:2a:3f:e9:2c:39:8b:ae:79:b3:9f:9e:0e: 3a:2b:8d:42:ce:54:94:7e:6b:c5:ba:7a:5f:88:33: 8c:57:e0:22:f1:f1:91:d8:3f:c3:af:22:90:7d:a3: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:DD:05:68:0C:44:95:C5:B5:4A:A1:78:08:63:17:B3:06:8A:16 X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:26:55:c8:67:51:69:c4:c4:29:b1:ae:d3:53:c3:45:8b: 3c:19:ee:e0:fc:69:af:ad:5d:cc:a5:26:6b:d0:fd:45:de:16: 78:b4:99:59:da:14:62:b3:31:7b:5f:66:b8:fe:23:5a:d2:25: a1:be:eb:cc:81:dc:7f:70:67:4a:65:a1:33:53:54:54:94:bf: e7:3e:ce:52:29:5a:57:c0:3d:92:e8:5b:09:2f:93:af:5e:33: 02:82:bf:f2:b9:6c:21:5d:49:bd:c0:41:8d:c9:61:31:b4:21: 63:17:74:29:e1:29:f3:64:b8:07:e4:36:f5:a0:e1:bf:37:f1: 0d:d3:e1:53:a8:49:7d:f5:d4:02:79:ab:88:5f:0b:ab:6b:ef: b2:75:c3:f4:b8:78:e6:6c:9d:b7:a7:e1:1b:e6:61:90:ae:69: 99:a2:92:35:3a:01:e2:a1:06:b8:52:e0:69:f8:b8:a4:ea:63: 2c:44:64:32:86:48:56:62:32:a2:9d:05:b0:29:36:b8:3b:92: 9c:87:bf:61:37:e6:fe:56:05:a8:11:fe:1e:76:76:90:bc:07: a6:6f:cb:9d:0f:ca:2e:c3:f1:ea:83:26:c2:72:7e:8a:1b:cd: 88:ae:6f:f0:55:a3:cc:d4:46:3d:8f:d1:b3:3c:54:dc:9d:26: 03:9f:f9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjQwNTA2MjMyOTQ4WhcNMjQwNTEzMjMyOTQ4WjAYMRYwFAYD VQQDEw02NjM5NjdlYy00Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SpSIICUmS768WuoFKlGk8/zPPYKUVxTO0XFMoqdNYZ62gK0U7s7V3lLNDx6 jS9jD0iI6VmeVWfNvJ2LGUaDYTN7NGvL7V7jHOj1+x53y8V2P9VA0gy1LSwZKQYX ANlD8uCwj+TOkTVSE6LBED1y34QhXcANzWVvzWNl/NBEqd+kCHuGCTaSCfHYaFdr N4tzawd4YX6dc4dOwVnPlGtYN0r0mOEyBR9GsmxfKvt49l99vbisqwqFr2hMflwH ulIWKUryTALiA6N6ubQHr9yv088lx28qP+ksOYuuebOfng46K41CzlSUfmvFunpf iDOMV+Ai8fGR2D/DryKQfaNtEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxC3QVo DESVxbVKoXgIYxezBooWMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMXCZVyGdRacTEKbGu01PDRYs8Ge7g/GmvrV3MpSZr0P1F3hZ4tJlZ 2hRiszF7X2a4/iNa0iWhvuvMgdx/cGdKZaEzU1RUlL/nPs5SKVpXwD2S6FsJL5Ov XjMCgr/yuWwhXUm9wEGNyWExtCFjF3Qp4SnzZLgH5Db1oOG/N/EN0+FTqEl99dQC eauIXwura++ydcP0uHjmbJ23p+Eb5mGQrmmZopI1OgHioQa4UuBp+Lik6mMsRGQy hkhWYjKinQWwKTa4O5Kch79hN+b+VgWoEf4ednaQvAemb8udD8ouw/HqgybCcn6K G82Irm/wVaPM1EY9j9GzPFTcnSYDn/lw -----END CERTIFICATE-----Generated at Tue May 7 00:53:24 2024 by rpki-client on console-ams.rpki-client.org