$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: SYHwyEhh5beTP959/BntZMpqTqAcJuY93H2pZFRNITE= Subject key identifier: 09:C3:0A:B8:F6:18:55:88:FC:2F:DD:74:A1:77:02:5C:71:17:11:95 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 078D Signing time: Mon 06 May 2024 22:18:51 +0000 Manifest this update: Mon 06 May 2024 22:18:50 +0000 Manifest next update: Mon 13 May 2024 22:18:50 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: xH8+s98V7avIk3eT/gAXH76YPT6RrN3Szq4mpynb3yg=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: xHShd3tlwlxB2nTBnu7DIXCsWddzN3NU74q1kH3c3cw=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: WtwzNtkr/sMDE1Pw4fKTao1GvYsAwYCq34T3uS2XRT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: May 6 22:18:50 2024 GMT Not After : May 13 22:18:50 2024 GMT Subject: CN=6639574a-fc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:37:a8:75:10:73:b4:7d:03:6d:e7:3c:ca: fd:79:1f:48:27:62:1f:f6:9b:12:22:e2:49:1d:7d: fd:60:a3:eb:3e:cb:c8:31:7c:1a:8d:ab:a4:11:a4: e5:4c:6b:66:7d:c3:82:b7:a6:e5:5d:94:67:cb:34: cc:dd:d1:88:4d:ad:60:73:eb:e4:2a:46:f0:d4:c4: 1d:85:e5:ae:1c:13:aa:26:a3:37:d8:d9:c8:0b:5a: 44:bc:e7:b3:c0:bd:49:9a:0a:3a:aa:51:f8:f8:cd: 0e:66:96:e2:7c:91:c6:15:34:b6:a3:30:1f:e6:34: 37:66:dc:ad:4d:29:b5:d9:ed:d5:a1:54:eb:65:72: 29:24:1b:fe:dc:db:c8:61:6b:f9:4b:b6:ac:38:f8: 3a:ef:a8:24:0c:f6:45:7b:60:a0:22:fc:8f:65:3c: 6a:f1:d8:e0:b8:b1:4c:08:06:6c:b4:51:c6:ad:0c: 38:b3:f4:5b:f3:31:1e:a0:80:33:f0:c2:b8:f9:b9: 48:ff:3c:14:ab:4a:78:c4:59:91:f7:ee:3c:4b:99: c3:11:35:09:22:73:d6:20:7c:4c:cc:e5:f5:96:a2: 5b:a7:0b:75:19:d1:c3:8e:40:2b:4c:b6:3f:44:b9: 6a:5a:8d:b2:d4:55:93:24:43:a0:64:6a:2c:13:11: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C3:0A:B8:F6:18:55:88:FC:2F:DD:74:A1:77:02:5C:71:17:11:95 X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0e:1a:59:77:f7:b3:ec:b4:cd:e2:81:02:93:dc:68:08:f4: da:f1:2e:82:f5:02:f2:cf:5f:8e:2a:6d:ab:35:7e:b7:31:49: 17:a9:c7:27:0c:53:72:bd:7f:43:4a:3d:23:a9:95:04:92:bb: 2b:74:2b:3a:23:a2:c3:d2:4d:2e:24:8e:64:da:1c:90:e0:79: da:5f:d1:05:b7:db:96:a8:45:da:b6:7a:24:5b:75:ff:c0:41: 7e:fc:21:b3:e6:4b:69:e1:d4:9c:54:92:5f:c8:6e:70:33:0c: 69:89:38:b1:2a:23:93:43:28:93:b3:85:00:a1:08:ca:44:82: 3a:77:8d:22:e4:2f:7f:65:47:5b:7a:7a:08:6e:00:73:e1:e5: 72:47:55:88:b7:d4:79:a5:b1:1a:f9:63:7d:f2:f2:75:40:7a: 4b:94:4b:fe:04:7b:00:b2:c3:d4:46:43:ef:72:9c:bd:02:13: 64:86:f1:09:5d:d8:ae:8c:49:48:02:f3:4f:7e:3e:59:06:65: a9:5c:31:30:e1:34:87:3c:16:5d:c4:db:2f:b3:80:d5:a3:ab: 44:8d:01:8c:b3:22:22:43:18:2c:ea:41:26:ec:bd:a7:0d:f7: 0e:df:6c:12:91:08:a7:3f:01:6e:3a:b4:30:12:7e:2a:7b:4e: 6f:62:0c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjQwNTA2MjIxODUwWhcNMjQwNTEzMjIxODUwWjAYMRYwFAYD VQQDEw02NjM5NTc0YS1mYzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0383qHUQc7R9A23nPMr9eR9IJ2If9psSIuJJHX39YKPrPsvIMXwajaukEaTl TGtmfcOCt6blXZRnyzTM3dGITa1gc+vkKkbw1MQdheWuHBOqJqM32NnIC1pEvOez wL1Jmgo6qlH4+M0OZpbifJHGFTS2ozAf5jQ3ZtytTSm12e3VoVTrZXIpJBv+3NvI YWv5S7asOPg676gkDPZFe2CgIvyPZTxq8djguLFMCAZstFHGrQw4s/Rb8zEeoIAz 8MK4+blI/zwUq0p4xFmR9+48S5nDETUJInPWIHxMzOX1lqJbpwt1GdHDjkArTLY/ RLlqWo2y1FWTJEOgZGosExEx+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnDCrj2 GFWI/C/ddKF3AlxxFxGVMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQDhpZd/ez7LTN4oECk9xoCPTa8S6C9QLyz1+OKm2rNX63MUkXqccn DFNyvX9DSj0jqZUEkrsrdCs6I6LD0k0uJI5k2hyQ4HnaX9EFt9uWqEXatnokW3X/ wEF+/CGz5ktp4dScVJJfyG5wMwxpiTixKiOTQyiTs4UAoQjKRII6d40i5C9/ZUdb enoIbgBz4eVyR1WIt9R5pbEa+WN98vJ1QHpLlEv+BHsAssPURkPvcpy9AhNkhvEJ XdiujElIAvNPfj5ZBmWpXDEw4TSHPBZdxNsvs4DVo6tEjQGMsyIiQxgs6kEm7L2n DfcO32wSkQinPwFuOrQwEn4qe05vYgxm -----END CERTIFICATE-----Generated at Tue May 7 00:53:25 2024 by rpki-client on console-ams.rpki-client.org