$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft File: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json) Hash identifier: neof5Ke2KPYhqGRsd72a0NhSn1sKgLBuo6v/5f/kRQo= Subject key identifier: 3D:04:4D:55:A4:22:F9:42:78:9F:58:9F:A3:66:7A:1C:AF:7F:0B:1C Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 Certificate issuer: /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft Manifest number: 06DB Signing time: Thu 02 May 2024 23:04:06 +0000 Manifest this update: Thu 02 May 2024 23:04:06 +0000 Manifest next update: Thu 09 May 2024 23:04:06 +0000 Files and hashes: 1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: hvGrKSBsZyetkatr55in+I+PvYstjdBn23W1a7nqU2I=) 2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: hPwz5kadzqNwWR86Jw4PfL91pRN336yspzOQXZ+2qAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0 Validity Not Before: May 2 23:04:06 2024 GMT Not After : May 9 23:04:06 2024 GMT Subject: CN=66341be6-2e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a7:d0:2f:b8:aa:72:89:b3:7c:4d:77:c8:e9: 6e:1d:0d:17:94:1b:01:36:a7:2e:86:4b:93:4a:e8: 72:da:78:9e:d7:10:97:3b:00:47:73:85:ad:db:b6: 65:58:7f:66:31:dd:99:55:79:5f:ff:a7:d2:aa:f6: e8:19:3e:32:ff:93:2b:93:26:1a:b3:9d:2e:a7:1a: 30:49:96:de:7e:7c:74:ac:c5:25:ca:7f:3a:d1:d0: 99:52:ce:c1:82:90:54:39:82:0e:f8:c0:31:b9:7a: a4:bd:95:64:8e:4a:f3:4b:23:62:30:94:5e:2e:5e: 11:64:09:e9:1d:6f:b5:7e:ea:dd:10:6e:dd:b8:44: 8e:60:b1:05:1a:44:65:a1:38:98:16:c6:1a:6f:5d: df:80:ce:b9:20:4b:92:68:d0:14:d8:e2:38:74:d0: 62:df:2c:c4:c7:c7:dd:cf:21:a1:57:bb:dd:ad:85: 36:f1:74:e2:72:e1:b2:92:9c:69:42:34:cf:b9:32: ed:53:46:13:21:74:bf:de:2d:38:fb:9d:3d:e1:e1: 54:a5:d6:04:3b:92:b6:b3:24:95:0a:80:61:5b:78: bf:20:b0:53:95:b9:35:da:b0:38:3e:e1:7e:bd:6f: 22:7c:e9:8e:00:f3:a7:8d:e9:48:8d:b4:b3:f3:32: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:04:4D:55:A4:22:F9:42:78:9F:58:9F:A3:66:7A:1C:AF:7F:0B:1C X509v3 Authority Key Identifier: keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:01:7f:02:86:47:82:b2:ee:f1:80:ae:39:4a:3c:e5:9a:36: 4a:f5:cc:e0:6b:30:d5:05:1a:c9:c7:a7:de:3f:f3:27:ef:dc: de:96:07:f6:f4:80:2d:45:d0:07:c4:22:79:f3:12:7e:29:c8: c8:e8:52:cc:fb:27:6a:b5:5e:ee:d6:bc:0f:7c:2e:c8:5d:a3: 3a:36:69:de:19:27:0e:af:8a:61:b4:b2:9c:6c:ec:4f:a9:34: a6:c5:19:74:75:2c:27:cb:77:47:8c:63:f7:bb:97:ff:ef:3c: c7:34:14:93:c8:10:11:0e:65:33:aa:7e:94:30:f8:77:3e:1c: 3e:7a:46:e8:1f:e5:da:8e:d4:32:ff:78:ff:e2:e5:01:6f:f1: 7b:19:fb:12:45:62:13:a5:82:38:88:33:48:24:93:14:59:d5: 43:52:3f:61:4a:80:5a:2a:ed:a2:aa:4b:3b:3c:ed:12:23:fc: f8:4c:e8:b3:2a:a2:a7:24:6a:50:1b:f6:4f:c9:fb:a4:e6:6c: 9d:5a:31:69:40:10:3c:7c:31:0f:9c:ad:f3:18:dd:41:f0:8e: b2:68:5f:c4:18:c3:19:59:9d:97:28:9a:b4:48:fc:37:3f:f4: a9:fa:dc:e8:ae:76:48:96:75:3b:16:65:7d:73:90:5a:ba:61: 1f:ed:c8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE ODhCNjYzQTAwHhcNMjQwNTAyMjMwNDA2WhcNMjQwNTA5MjMwNDA2WjAYMRYwFAYD VQQDEw02NjM0MWJlNi0yZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KfQL7iqcomzfE13yOluHQ0XlBsBNqcuhkuTSuhy2nie1xCXOwBHc4Wt27Zl WH9mMd2ZVXlf/6fSqvboGT4y/5MrkyYas50upxowSZbefnx0rMUlyn860dCZUs7B gpBUOYIO+MAxuXqkvZVkjkrzSyNiMJReLl4RZAnpHW+1furdEG7duESOYLEFGkRl oTiYFsYab13fgM65IEuSaNAU2OI4dNBi3yzEx8fdzyGhV7vdrYU28XTicuGykpxp QjTPuTLtU0YTIXS/3i04+5094eFUpdYEO5K2sySVCoBhW3i/ILBTlbk12rA4PuF+ vW8ifOmOAPOnjelIjbSz8zIFsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0ETVWk IvlCeJ9Yn6NmehyvfwscMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn eXdGX0JfekpvVlRZaTJZNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPAX8ChkeCsu7xgK45SjzlmjZK9czgazDVBRrJx6feP/Mn79zelgf2 9IAtRdAHxCJ58xJ+KcjI6FLM+ydqtV7u1rwPfC7IXaM6NmneGScOr4phtLKcbOxP qTSmxRl0dSwny3dHjGP3u5f/7zzHNBSTyBARDmUzqn6UMPh3Phw+ekboH+XajtQy /3j/4uUBb/F7GfsSRWITpYI4iDNIJJMUWdVDUj9hSoBaKu2iqks7PO0SI/z4TOiz KqKnJGpQG/ZPyfuk5mydWjFpQBA8fDEPnK3zGN1B8I6yaF/EGMMZWZ2XKJq0SPw3 P/Sp+tzornZIlnU7FmV9c5BaumEf7chA -----END CERTIFICATE-----Generated at Fri May 3 00:07:14 2024 by rpki-client on console-ams.rpki-client.org