$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: it5wQF8OqVVi6JsH7kqnk+gi8U5LmtKq7pLMbycVjQo= Subject key identifier: 3D:67:9B:B0:C2:41:8C:38:3C:A1:AB:03:7F:65:59:23:3F:DB:3C:40 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 040B Signing time: Sun 05 May 2024 02:16:25 +0000 Manifest this update: Sun 05 May 2024 02:16:25 +0000 Manifest next update: Sun 12 May 2024 02:16:25 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 73KPbM5aLo6SwHMgXeM/JOasDFB88iFz9GmeTST3JWk=) 2: 05CB9E7C21F011ECBA678C1DC4F9AE02.roa (hash: +9ZUIefRwBlPsm2FtFg2SuHe8cuLMLULz+kIpXH0GsU=) 3: 053ED5AA21F011ECBA678C1DC4F9AE02.roa (hash: BAnHiFVFmkVkOA24pt14UYFrEUDgx3UUzxT3cHQldVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: May 5 02:16:25 2024 GMT Not After : May 12 02:16:25 2024 GMT Subject: CN=6636ebf9-1c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:4c:e1:9b:b7:bb:fb:a2:e2:10:ac:0e:59: 22:1e:0b:8d:e8:85:91:d4:7a:bc:5e:0f:e6:f7:f3: f0:d2:df:42:b6:bd:5a:83:e0:4e:f4:17:aa:d4:de: be:49:27:19:de:87:47:1f:18:73:26:c7:12:71:3f: f8:f9:74:68:0b:79:54:f1:55:13:68:9d:b6:c0:98: 61:dc:35:8a:99:4f:7f:44:79:f0:ff:c2:bd:45:2d: 0b:b6:b0:cb:d4:b4:ee:3a:1e:bf:ce:cd:af:1f:50: 8d:74:7e:d3:a2:2b:c6:59:5f:1f:ae:3f:39:db:90: 2f:7a:ea:f0:81:f6:50:e5:09:20:e2:31:b6:f8:fe: fd:76:bf:42:84:e5:5a:95:1e:80:f0:b8:8e:b5:be: 9c:c0:2b:fe:a3:08:d9:14:04:6d:cd:25:62:88:d3: c5:86:db:dd:e1:1e:02:4d:68:17:e8:18:dd:ac:b9: 37:30:d1:94:6d:a2:58:20:1f:a0:77:24:f6:42:b4: 62:9a:3b:18:b3:10:a5:e2:ed:c5:94:a2:2a:8d:a4: 67:33:65:db:a6:ae:99:64:65:ea:5c:a3:8a:cd:16: c7:9f:61:7f:26:09:ff:bb:cc:48:09:10:4b:94:6a: 5f:3e:d4:35:08:06:1e:30:de:d4:96:e0:a2:74:30: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:67:9B:B0:C2:41:8C:38:3C:A1:AB:03:7F:65:59:23:3F:DB:3C:40 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:16:83:79:ec:00:0b:ec:5e:69:75:a9:62:8c:50:e9:11: 20:2d:54:aa:d8:0e:91:a0:fd:95:06:bf:8b:0f:3a:52:0f:36: aa:2b:cc:9b:6f:3a:fe:c5:0d:18:c2:40:05:58:63:49:9b:c7: 45:00:25:52:79:5a:51:27:5f:22:9e:2c:38:37:ad:78:97:53: 6c:74:f8:c7:db:99:2a:5a:c4:35:8a:2e:b2:10:e1:88:c9:03: d0:ed:d4:51:70:ee:33:87:ff:78:d3:ce:28:de:81:07:4e:34: d5:e2:e2:3b:69:4c:be:9c:d5:d1:0b:cc:95:bd:05:a2:97:3d: 70:32:0f:01:33:11:a0:bc:79:9f:e2:f7:92:92:c2:58:38:a8: 3c:74:fc:b3:18:d4:e7:29:0b:63:d8:92:88:27:88:7e:15:e5: 0e:1f:ab:e4:4a:53:0d:27:d6:a1:41:62:d0:71:2c:06:7b:4a: 3f:a6:60:8c:24:3e:b7:41:1a:07:55:b7:6e:c9:f7:3d:9c:7a: 5f:2b:49:f5:f3:81:41:75:96:55:7c:32:4f:12:67:41:ab:d9: bd:e9:48:5d:47:5e:fc:23:ee:5e:12:e0:49:94:00:57:9e:69: 17:8a:b3:43:62:e0:65:b1:77:42:15:13:77:bf:1e:c2:41:c3: 44:7f:73:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjQwNTA1MDIxNjI1WhcNMjQwNTEyMDIxNjI1WjAYMRYwFAYD VQQDEw02NjM2ZWJmOS0xYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUBM4Zu3u/ui4hCsDlkiHguN6IWR1Hq8Xg/m9/Pw0t9Ctr1ag+BO9Beq1N6+ SScZ3odHHxhzJscScT/4+XRoC3lU8VUTaJ22wJhh3DWKmU9/RHnw/8K9RS0LtrDL 1LTuOh6/zs2vH1CNdH7ToivGWV8frj8525AveurwgfZQ5Qkg4jG2+P79dr9ChOVa lR6A8LiOtb6cwCv+owjZFARtzSViiNPFhtvd4R4CTWgX6BjdrLk3MNGUbaJYIB+g dyT2QrRimjsYsxCl4u3FlKIqjaRnM2Xbpq6ZZGXqXKOKzRbHn2F/Jgn/u8xICRBL lGpfPtQ1CAYeMN7UluCidDAoMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1nm7DC QYw4PKGrA39lWSM/2zxAMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjLBaDeewAC+xeaXWpYoxQ6REgLVSq2A6RoP2VBr+LDzpSDzaqK8yb bzr+xQ0YwkAFWGNJm8dFACVSeVpRJ18iniw4N614l1NsdPjH25kqWsQ1ii6yEOGI yQPQ7dRRcO4zh/94084o3oEHTjTV4uI7aUy+nNXRC8yVvQWilz1wMg8BMxGgvHmf 4veSksJYOKg8dPyzGNTnKQtj2JKIJ4h+FeUOH6vkSlMNJ9ahQWLQcSwGe0o/pmCM JD63QRoHVbduyfc9nHpfK0n184FBdZZVfDJPEmdBq9m96UhdR178I+5eEuBJlABX nmkXirNDYuBlsXdCFRN3vx7CQcNEf3M0 -----END CERTIFICATE-----Generated at Sun May 5 03:09:57 2024 by rpki-client on console-ams.rpki-client.org