$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: 0YwEjUaxP+0JQgxKUIHgclht6g5aUvfD5kzY7RwEVS0= Subject key identifier: 24:C0:C5:60:A6:4C:9B:7A:3A:93:2C:6C:99:74:8E:37:4E:63:42:44 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 029F Signing time: Fri 03 May 2024 03:42:22 +0000 Manifest this update: Fri 03 May 2024 03:42:21 +0000 Manifest next update: Fri 10 May 2024 03:42:21 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: D8N4jaJd0evi97qrKRX0F4Qg9Ji32CbWC4BHiXWi86I=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 7B7xZtAsyaDILpWRkOtStPc0FvXS15c7erODj+yoV30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: May 3 03:42:21 2024 GMT Not After : May 10 03:42:21 2024 GMT Subject: CN=66345d1e-81c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:bd:f4:ff:84:f0:63:0c:a8:03:61:80:62: d6:b4:2f:ca:7a:da:60:09:34:0c:6c:c2:65:af:90: 8c:65:12:e4:89:9a:06:f3:f7:4f:d0:24:05:db:cd: 2b:4a:06:21:d7:76:f6:f9:22:ee:bc:de:64:00:bf: ab:00:75:02:8d:a1:15:5d:eb:e3:90:92:61:16:15: 89:9b:6d:be:80:9d:b3:43:30:32:02:1e:0c:5d:70: fe:60:44:09:82:d2:ef:d5:e3:c0:de:3e:3a:eb:b3: b4:eb:d0:a6:66:71:5f:11:82:d5:c5:90:59:ce:21: 4e:f6:f6:e7:9f:2a:ee:fe:ef:63:6c:86:a9:46:5b: f3:0d:a6:b1:61:01:5d:fd:9b:f2:34:23:e5:90:1b: d5:df:f4:d1:28:38:a6:82:3a:f8:8a:cb:b0:c3:10: ac:4d:92:3c:af:d3:1c:34:ba:7a:48:46:58:1d:ea: e7:82:75:37:e0:d5:7d:28:53:83:c5:9a:44:87:29: 65:6c:38:01:fe:9c:16:ce:61:90:2a:70:48:e3:f7: 09:9a:dd:2d:fa:a9:1a:e0:00:cd:7f:36:f7:89:bd: 7f:a0:c1:09:7a:42:cd:53:d9:30:50:80:4b:36:63: b7:2d:00:a2:ce:ed:b4:3c:cc:53:3a:f4:93:91:28: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:C5:60:A6:4C:9B:7A:3A:93:2C:6C:99:74:8E:37:4E:63:42:44 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:53:50:31:c0:69:e8:87:bf:1b:39:ef:fe:32:88:d0:14:a2: 6f:32:1a:89:7c:03:5f:76:95:ce:59:36:fd:5a:3c:38:9a:1d: ff:5e:53:9a:9d:1e:bf:cb:8d:41:ef:ed:c7:03:f5:4c:8b:a5: 8a:53:cc:d6:d4:34:6f:5a:fc:fc:12:53:93:09:02:aa:51:21: 6a:1b:e7:23:0a:20:83:95:5d:4e:80:45:26:75:6a:5e:76:c5: 6d:c9:47:12:cb:5c:9c:e0:6d:a6:05:e4:01:6b:1f:c3:2c:0f: 3a:04:18:ad:aa:3f:dc:c1:6d:2d:04:f5:e9:be:6a:c8:bf:fb: b2:d5:3f:7a:de:2c:f4:ff:9b:65:d8:65:e9:9e:3b:ce:2b:c3: df:52:c4:e5:63:ba:77:b4:f7:29:1e:bd:f2:c9:c2:15:f0:55: 00:66:e8:1f:70:36:c4:3e:09:cc:bc:22:d6:8f:87:e6:0b:65: c5:04:69:ec:d6:56:9c:c9:92:12:2a:aa:6a:eb:96:eb:e6:ca: fa:b3:7e:85:85:62:d2:fb:1d:09:e8:eb:47:63:9a:ae:11:6d: ac:ee:00:3c:f6:c1:33:d1:a5:fc:4f:ab:79:e5:7c:c2:1f:ad: 3a:11:44:cb:95:71:e5:0b:b8:93:2f:ca:cb:e1:0e:01:69:b3: a6:37:32:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjQwNTAzMDM0MjIxWhcNMjQwNTEwMDM0MjIxWjAYMRYwFAYD VQQDEw02NjM0NWQxZS04MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2G99P+E8GMMqANhgGLWtC/KetpgCTQMbMJlr5CMZRLkiZoG8/dP0CQF280r SgYh13b2+SLuvN5kAL+rAHUCjaEVXevjkJJhFhWJm22+gJ2zQzAyAh4MXXD+YEQJ gtLv1ePA3j4667O069CmZnFfEYLVxZBZziFO9vbnnyru/u9jbIapRlvzDaaxYQFd /ZvyNCPlkBvV3/TRKDimgjr4isuwwxCsTZI8r9McNLp6SEZYHerngnU34NV9KFOD xZpEhyllbDgB/pwWzmGQKnBI4/cJmt0t+qka4ADNfzb3ib1/oMEJekLNU9kwUIBL NmO3LQCizu20PMxTOvSTkSi9iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTAxWCm TJt6OpMsbJl0jjdOY0JEMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7U1AxwGnoh78bOe/+MojQFKJvMhqJfANfdpXOWTb9Wjw4mh3/XlOa nR6/y41B7+3HA/VMi6WKU8zW1DRvWvz8ElOTCQKqUSFqG+cjCiCDlV1OgEUmdWpe dsVtyUcSy1yc4G2mBeQBax/DLA86BBitqj/cwW0tBPXpvmrIv/uy1T963iz0/5tl 2GXpnjvOK8PfUsTlY7p3tPcpHr3yycIV8FUAZugfcDbEPgnMvCLWj4fmC2XFBGns 1lacyZISKqpq65br5sr6s36FhWLS+x0J6OtHY5quEW2s7gA89sEz0aX8T6t55XzC H606EUTLlXHlC7iTL8rL4Q4BabOmNzKo -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org