$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: IY8w4f4dQfFuHTNFBDLPVRrBXxYtYWzGNh/1xfyFiU4= Subject key identifier: 58:2C:E0:97:77:08:30:E5:F6:BB:62:7E:D8:7A:95:FC:D5:5F:D8:1E Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: FA Signing time: Sat 27 Apr 2024 05:33:11 +0000 Manifest this update: Sat 27 Apr 2024 05:33:11 +0000 Manifest next update: Sat 04 May 2024 05:33:11 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: lG5ATMOgZnumIrnuTr0+i05Mk4vpF6/gFJsx+ja7ch4=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: vxp9DdAEwv8w7T2TYeLcZ04S/h06V4VND1+Sikmui+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Apr 27 05:33:11 2024 GMT Not After : May 4 05:33:11 2024 GMT Subject: CN=662c8e17-884f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:8f:54:84:fc:66:7d:79:b8:29:03:c3:c7: 0e:b9:0e:a5:47:33:1e:7a:e7:69:d2:01:2a:db:08: 86:d3:5b:a6:47:bd:0f:4d:a7:dd:ae:5d:96:1e:36: a7:eb:cf:19:af:ee:90:dd:85:65:89:c5:67:75:24: e7:df:ae:f7:1d:6b:24:eb:59:2f:f8:39:7f:1b:58: ee:46:00:0d:5a:bd:0b:fe:20:48:7e:ef:d8:2a:06: 96:49:10:7d:e5:96:49:eb:0e:23:8c:58:e4:50:31: 51:a4:85:e7:f4:85:3a:1b:c1:c3:06:fe:85:ba:e3: 26:f0:c6:5b:dd:53:dc:c9:da:26:a8:93:e8:b7:77: 14:4a:10:4a:70:75:d6:3b:d3:74:4f:0a:77:9f:cb: 2c:31:a8:99:df:0d:67:2f:f0:16:9f:f6:fc:16:e4: 07:b1:c9:54:03:e5:80:34:f5:23:85:12:e8:4b:c3: 62:a4:5d:d6:74:d1:5e:f0:c0:6b:1f:35:ae:34:2c: 90:8f:d7:63:4c:12:11:ea:13:0f:f0:e0:8a:e7:6b: 80:79:fa:07:40:59:75:bf:2b:9b:42:4d:32:57:9b: 65:e5:d4:37:69:aa:45:98:ff:40:54:43:d9:a5:b7: d2:3c:54:6c:63:6d:6e:1d:21:20:08:bb:30:26:d7: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2C:E0:97:77:08:30:E5:F6:BB:62:7E:D8:7A:95:FC:D5:5F:D8:1E X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:b8:e7:d9:36:fe:eb:0b:16:66:81:de:2e:0f:35:d4:26: e2:e6:f5:ba:54:b4:19:5a:05:6f:23:90:5a:c1:ff:9f:ff:04: c1:58:a4:88:8b:7e:d4:4b:cb:f3:b7:ba:f2:3c:74:6c:79:4b: 99:fe:f0:03:5c:86:60:c1:a0:4d:1e:d5:b8:8b:10:5b:63:02: e9:fa:36:e9:cd:3f:27:20:bc:dc:b1:a9:10:92:64:71:6f:5a: c8:36:3d:df:2d:3a:04:08:e4:9e:b3:d2:0d:e0:1d:48:8e:02: d7:91:b1:c9:2e:56:02:fa:d5:68:cb:ce:51:88:1b:3b:4d:97: bb:6e:0e:11:23:c4:68:61:2a:a0:6b:12:8d:f7:a9:43:c9:fb: 67:31:7e:f7:84:11:fa:4d:22:f5:c6:65:a2:79:78:ea:19:37: db:93:1c:07:30:cd:29:99:5a:0c:e9:a3:37:43:43:6c:bc:74: 35:32:93:67:d0:0a:d8:73:22:46:c8:b1:6f:a8:f6:1f:2f:0a: b2:68:6f:fa:97:01:89:80:27:1c:48:59:6e:10:b1:50:0d:ed: 81:a2:da:a3:f6:5b:76:e0:b7:2f:03:17:71:e6:5f:83:1c:5d: bb:5d:d0:7c:4d:61:6f:06:1c:34:63:7c:34:fe:68:4b:3d:9a: fc:36:89:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjQwNDI3MDUzMzExWhcNMjQwNTA0MDUzMzExWjAYMRYwFAYD VQQDEw02NjJjOGUxNy04ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaSPVIT8Zn15uCkDw8cOuQ6lRzMeeudp0gEq2wiG01umR70PTafdrl2WHjan 688Zr+6Q3YVlicVndSTn3673HWsk61kv+Dl/G1juRgANWr0L/iBIfu/YKgaWSRB9 5ZZJ6w4jjFjkUDFRpIXn9IU6G8HDBv6FuuMm8MZb3VPcydomqJPot3cUShBKcHXW O9N0Twp3n8ssMaiZ3w1nL/AWn/b8FuQHsclUA+WANPUjhRLoS8NipF3WdNFe8MBr HzWuNCyQj9djTBIR6hMP8OCK52uAefoHQFl1vyubQk0yV5tl5dQ3aapFmP9AVEPZ pbfSPFRsY21uHSEgCLswJtdbIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgs4Jd3 CDDl9rtifth6lfzVX9geMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhrjn2Tb+6wsWZoHeLg811Cbi5vW6VLQZWgVvI5Bawf+f/wTBWKSI i37US8vzt7ryPHRseUuZ/vADXIZgwaBNHtW4ixBbYwLp+jbpzT8nILzcsakQkmRx b1rINj3fLToECOSes9IN4B1IjgLXkbHJLlYC+tVoy85RiBs7TZe7bg4RI8RoYSqg axKN96lDyftnMX73hBH6TSL1xmWieXjqGTfbkxwHMM0pmVoM6aM3Q0NsvHQ1MpNn 0ArYcyJGyLFvqPYfLwqyaG/6lwGJgCccSFluELFQDe2Botqj9lt24LcvAxdx5l+D HF27XdB8TWFvBhw0Y3w0/mhLPZr8NolC -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:41 2024 by rpki-client on console-ams.rpki-client.org