$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft File: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json) Hash identifier: TGcEtOWrob9vLvx/osRTH/MBXdxAwPfkFha75A2tI98= Subject key identifier: FC:7B:75:FC:76:57:F9:04:7E:B5:A3:08:BD:8E:FE:2A:4F:C9:29:22 Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft Manifest number: 07D7 Signing time: Sat 04 May 2024 22:09:28 +0000 Manifest this update: Sat 04 May 2024 22:09:28 +0000 Manifest next update: Sat 11 May 2024 22:09:28 +0000 Files and hashes: 1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: czONWjSe6+JOhtcHrW/IpXJqtFCBcUbtM+cqNi2l5ng=) 2: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (hash: pqiDB7OjyL3iferKT2pUNrFSVfpSHUFlIIzETqmIpYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Validity Not Before: May 4 22:09:28 2024 GMT Not After : May 11 22:09:28 2024 GMT Subject: CN=6636b218-4ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:97:bb:2f:82:54:41:c8:c4:3d:bb:80:f9: d4:fc:62:3b:45:42:80:6f:3e:e0:83:74:9a:1d:34: 4e:2c:3b:ab:63:22:0a:ab:af:f9:9e:84:4d:ec:eb: e6:6f:79:68:0e:b9:42:6b:a5:8f:00:9c:58:53:cd: b7:01:1c:09:de:3a:59:6d:ca:65:6a:52:86:34:25: 77:6c:8d:bf:8f:8f:7c:19:08:f6:f9:94:44:6c:1e: 90:23:c0:07:20:1c:85:d2:a2:68:e2:d3:cd:43:e2: 4a:ed:f3:27:74:d3:61:b6:46:71:0d:c9:e9:9c:b4: 70:90:2a:51:91:31:30:3b:dd:a4:ac:be:3c:c3:7a: 2f:38:af:5f:d7:74:d8:34:64:12:d3:17:e2:df:cd: 6d:36:8b:06:4d:0b:a8:09:0d:46:57:fc:05:67:aa: c3:20:4b:1a:ea:f2:84:4c:4b:ff:d0:80:c7:55:50: 11:20:3f:9a:f3:8f:ae:e7:e5:5b:1e:67:2f:c4:f3: 21:e8:f3:b6:53:25:4b:38:d6:43:82:48:31:d5:d0: 3c:ad:e9:04:3f:a8:1f:45:e5:ea:81:27:a1:96:d0: ea:7f:f3:c7:e1:1f:b2:6a:b1:6c:d2:ab:52:c2:d6: 95:1e:45:bb:3c:7c:4f:93:9b:49:c8:13:d2:1d:44: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:75:FC:76:57:F9:04:7E:B5:A3:08:BD:8E:FE:2A:4F:C9:29:22 X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:59:18:cb:ed:bf:7a:34:fc:06:90:3b:88:47:4b:fd:fa:c7: c0:75:f6:a9:e9:21:21:19:cf:a0:d0:fe:88:af:3e:5e:67:02: 95:d5:c0:20:71:66:67:d7:4f:e8:b0:54:96:46:5a:17:b6:11: cd:a2:f3:bc:41:58:0e:75:36:01:44:6c:4f:76:b9:b7:f1:0a: 5e:f5:b1:d4:b2:0b:0c:4d:bc:12:9c:79:dd:14:63:49:cc:60: c7:94:9c:a1:5e:00:16:40:8a:4c:f2:91:1c:69:5c:3f:0e:a0: 92:e7:4b:cb:1d:6d:23:2c:89:0e:ba:f5:d2:fe:d2:fa:6b:f4: 8f:71:16:35:a7:57:21:fc:ab:0a:d7:d0:b6:32:f6:a2:e0:a9: 09:b7:87:d2:3f:a7:39:a7:27:92:a5:c0:c0:ae:16:08:f8:1f: fa:1e:64:7b:04:f2:6a:04:48:08:1e:b6:89:73:be:9b:73:1d: 92:89:70:73:2b:27:4e:c0:9c:fb:e3:c3:4e:cf:88:9e:54:13: 71:a4:f2:01:1c:c4:74:eb:75:b2:f9:b5:6a:b6:47:e3:21:78: ea:8a:25:8b:5d:c4:8c:10:b8:67:bd:fb:05:b5:1e:42:5b:e2: c1:66:61:07:d2:31:ff:d6:17:f9:9f:21:10:df:d4:72:00:54: c0:0d:a7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjQwNTA0MjIwOTI4WhcNMjQwNTExMjIwOTI4WjAYMRYwFAYD VQQDEw02NjM2YjIxOC00ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4iXuy+CVEHIxD27gPnU/GI7RUKAbz7gg3SaHTROLDurYyIKq6/5noRN7Ovm b3loDrlCa6WPAJxYU823ARwJ3jpZbcplalKGNCV3bI2/j498GQj2+ZREbB6QI8AH IByF0qJo4tPNQ+JK7fMndNNhtkZxDcnpnLRwkCpRkTEwO92krL48w3ovOK9f13TY NGQS0xfi381tNosGTQuoCQ1GV/wFZ6rDIEsa6vKETEv/0IDHVVARID+a84+u5+Vb HmcvxPMh6PO2UyVLONZDgkgx1dA8rekEP6gfReXqgSehltDqf/PH4R+yarFs0qtS wtaVHkW7PHxPk5tJyBPSHUSYsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx7dfx2 V/kEfrWjCL2O/ipPySkiMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4 VkxvOUt1NHo5TTZIdF9rSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzWRjL7b96NPwGkDuIR0v9+sfAdfap6SEhGc+g0P6Irz5eZwKV1cAg cWZn10/osFSWRloXthHNovO8QVgOdTYBRGxPdrm38Qpe9bHUsgsMTbwSnHndFGNJ zGDHlJyhXgAWQIpM8pEcaVw/DqCS50vLHW0jLIkOuvXS/tL6a/SPcRY1p1ch/KsK 19C2Mvai4KkJt4fSP6c5pyeSpcDArhYI+B/6HmR7BPJqBEgIHraJc76bcx2SiXBz KydOwJz748NOz4ieVBNxpPIBHMR063Wy+bVqtkfjIXjqiiWLXcSMELhnvfsFtR5C W+LBZmEH0jH/1hf5nyEQ39RyAFTADacM -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org