$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: acG5J7cH+FffO3YucQJ9Z4sIgVAToUinmTw7OPjFQHw= Subject key identifier: C1:11:0A:31:52:CA:C0:5A:B6:6A:74:54:A0:D7:7C:77:50:CD:DC:BB Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 07F6 Signing time: Sat 04 May 2024 22:04:28 +0000 Manifest this update: Sat 04 May 2024 22:04:27 +0000 Manifest next update: Sat 11 May 2024 22:04:27 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: G4rddvEn1hTF7ZhXHijqpE2Hj59frWTFRV7YhrgYnYE=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: if+QqLot7mzVlEm2o5G8M5hH0dHIMDE/mnwGY93BhIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: May 4 22:04:27 2024 GMT Not After : May 11 22:04:27 2024 GMT Subject: CN=6636b0eb-5d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:e6:0f:8a:b3:6f:3e:91:b9:43:8b:9e:50: d2:46:f2:c0:d3:a4:bd:ad:33:61:fa:99:dc:a5:c9: 8b:e2:73:11:c6:dd:90:bd:26:57:7d:34:3e:2e:ed: f9:2c:c2:cf:06:d1:5c:e0:ad:63:1f:60:4a:a7:1d: 4b:a2:94:2a:b2:33:1c:4e:e3:40:6a:9f:3e:d2:a8: 1f:7e:e2:14:93:b3:61:44:b2:21:60:2c:73:2e:c2: e1:08:f7:2b:86:21:79:4d:95:84:c4:38:42:0d:e9: a8:86:8d:8c:13:3b:b0:4d:09:85:91:be:2f:78:c8: a9:88:9a:f6:21:f9:60:b0:e5:61:a4:10:3d:f2:47: 65:16:b6:ea:e9:41:55:36:5e:88:09:97:88:92:4e: 66:36:54:86:0e:17:fe:f8:23:51:bb:27:ff:47:26: 0c:69:58:56:aa:20:1e:8e:b2:15:f8:e6:cf:63:20: 7d:9d:f4:9c:8f:7a:1f:f5:35:da:7c:ce:6b:b8:c4: e4:75:fc:70:ed:84:d2:a8:64:c1:b0:7c:d4:f5:21: 49:a4:ae:3d:3a:4c:78:0a:78:ea:d7:24:3c:b3:3f: 13:1e:98:dc:27:ff:c0:14:47:f0:a3:65:d3:12:01: d6:90:41:1a:b6:77:71:31:ad:3a:c6:a1:38:b2:76: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:11:0A:31:52:CA:C0:5A:B6:6A:74:54:A0:D7:7C:77:50:CD:DC:BB X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:58:96:07:7f:9c:fb:7c:b1:96:21:5e:bc:2f:70:bb:4e: eb:2b:f2:6b:20:88:c6:e6:0e:44:02:a3:dd:3b:c5:76:b5:49: 92:d5:b0:bc:8f:87:68:50:76:d3:63:c7:5d:3e:d6:4c:ac:d4: ac:76:09:f2:bf:b7:05:ba:7b:b4:98:a3:f6:e7:eb:3e:3a:d0: eb:83:01:3c:6a:ce:8a:5d:6a:bf:3d:07:e8:50:b3:21:a3:80: 62:59:b0:8b:d3:77:fc:5d:3c:a9:67:da:08:84:d4:ed:65:7b: 09:53:e8:27:4b:0e:9a:81:58:48:3f:bc:97:f2:4e:3a:09:09: 4e:e4:af:35:6e:fd:21:9d:50:ca:b4:c4:e0:14:67:27:98:4d: 7d:0f:09:2a:a6:e0:eb:df:46:73:09:9e:4b:32:8a:f5:b4:ae: 8b:f1:d3:cc:bc:e8:bb:09:79:c7:e6:e4:65:f8:73:31:83:88: 60:a2:9f:27:7c:6a:29:60:60:38:03:24:61:6a:86:29:84:df: 73:4d:6c:26:9e:8f:3a:ec:c0:6f:36:f0:5d:a6:52:b9:a9:03: 87:6e:27:6f:06:8a:f2:d7:56:f1:44:8a:92:63:70:65:7c:b7: de:c7:25:bd:bf:9b:bf:85:23:49:79:c9:89:48:88:92:ee:cc: e4:71:b9:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjQwNTA0MjIwNDI3WhcNMjQwNTExMjIwNDI3WjAYMRYwFAYD VQQDEw02NjM2YjBlYi01ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1drmD4qzbz6RuUOLnlDSRvLA06S9rTNh+pncpcmL4nMRxt2QvSZXfTQ+Lu35 LMLPBtFc4K1jH2BKpx1LopQqsjMcTuNAap8+0qgffuIUk7NhRLIhYCxzLsLhCPcr hiF5TZWExDhCDemoho2MEzuwTQmFkb4veMipiJr2IflgsOVhpBA98kdlFrbq6UFV Nl6ICZeIkk5mNlSGDhf++CNRuyf/RyYMaVhWqiAejrIV+ObPYyB9nfScj3of9TXa fM5ruMTkdfxw7YTSqGTBsHzU9SFJpK49Okx4Cnjq1yQ8sz8THpjcJ//AFEfwo2XT EgHWkEEatndxMa06xqE4snZnHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMERCjFS ysBatmp0VKDXfHdQzdy7MB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCACliWB3+c+3yxliFevC9wu07rK/JrIIjG5g5EAqPdO8V2tUmS1bC8 j4doUHbTY8ddPtZMrNSsdgnyv7cFunu0mKP25+s+OtDrgwE8as6KXWq/PQfoULMh o4BiWbCL03f8XTypZ9oIhNTtZXsJU+gnSw6agVhIP7yX8k46CQlO5K81bv0hnVDK tMTgFGcnmE19DwkqpuDr30ZzCZ5LMor1tK6L8dPMvOi7CXnH5uRl+HMxg4hgop8n fGopYGA4AyRhaoYphN9zTWwmno867MBvNvBdplK5qQOHbidvBory11bxRIqSY3Bl fLfexyW9v5u/hSNJecmJSIiS7szkcbnd -----END CERTIFICATE-----Generated at Sun May 5 00:12:32 2024 by rpki-client on console-fra.rpki-client.org