$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: SpS7i/88QxLH6uvOiR8m+0kSj7FLZVZvTKEaS3+InUo= Subject key identifier: 47:75:B6:5C:15:2B:EC:23:8B:2C:77:F3:24:D7:27:1D:C1:30:41:AD Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 0742 Signing time: Tue 30 Apr 2024 22:41:47 +0000 Manifest this update: Tue 30 Apr 2024 22:41:46 +0000 Manifest next update: Tue 07 May 2024 22:41:46 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: t0kSp93Cjqc3aVbvVofJaoMKZoS3U5w8EHAItCxKPBE=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: OYa6pZQjPMNNTwycOThVBVCHRmNZFoJ1RzY6PDCzyqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Apr 30 22:41:46 2024 GMT Not After : May 7 22:41:46 2024 GMT Subject: CN=663173aa-59d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:45:fa:f3:6e:f6:eb:fd:d8:df:1d:22:e8: 47:ab:f8:b7:6a:3f:dc:44:f5:f2:cd:bc:f0:80:e6: 6c:c8:a4:2c:d5:4d:30:89:8e:a9:be:57:d2:23:4a: af:aa:24:98:ee:99:d9:5b:d2:ee:71:fc:28:1d:ed: 89:63:a3:e8:a5:e6:cf:3f:8d:03:6b:77:27:ce:ef: 82:4c:e8:33:91:b0:39:71:8c:67:f9:55:63:5c:23: f9:bc:79:b6:84:19:bd:99:1d:0a:b3:ea:61:30:6b: ea:77:18:b2:c7:91:ca:0b:51:74:c9:10:68:a4:31: 34:e8:b4:cf:08:7c:1e:b8:58:13:fc:4a:70:96:0c: 86:e6:2d:ed:2f:50:59:54:70:5e:3c:69:0a:dc:be: cb:da:fb:58:48:68:33:24:cd:86:11:e1:ad:d8:e2: a4:9a:7e:41:ee:99:f1:e6:e6:2a:3e:c4:55:f1:6e: af:a5:0e:33:28:f0:e8:4d:6e:50:8c:db:6c:db:b1: b6:d7:4b:88:d8:44:11:1e:e5:ed:68:df:bf:d8:06: 9f:13:9e:83:f5:f9:ce:d3:30:39:50:f6:d4:c9:a2: 37:f8:c8:74:68:63:4c:17:c9:bc:07:74:43:60:cd: c1:88:10:2b:f2:da:99:d5:4d:15:6d:3f:60:65:3f: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:B6:5C:15:2B:EC:23:8B:2C:77:F3:24:D7:27:1D:C1:30:41:AD X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:af:3b:72:36:a8:d3:b8:17:9c:99:1f:a5:69:3f:e7:00:08: 05:1a:11:9d:47:7a:24:07:80:30:22:af:a6:c5:d1:6a:1f:10: b1:d7:79:df:bc:42:f6:14:f4:43:d0:42:b2:7b:0d:ab:56:df: b0:10:ce:62:92:db:24:91:34:04:c2:07:cd:68:e3:90:96:d6: 19:ca:ce:e0:b2:57:e1:f6:96:1d:0f:46:21:e0:f6:db:2b:95: 6d:c8:d9:d3:64:39:c0:47:50:de:f6:5c:26:bd:df:dd:d4:43: b3:3b:52:53:ab:c7:f3:27:d5:66:56:40:06:81:6e:cd:fd:96: 47:f5:87:78:74:09:95:e7:cd:b7:aa:9e:4e:e6:d1:34:16:5d: 80:81:a3:0b:c7:74:3a:0b:32:2b:a0:5a:bb:7a:66:18:0c:95: f5:4f:d6:38:1c:e9:9c:50:39:3f:01:24:a9:8a:37:9a:98:04: a3:44:70:c0:9f:7c:35:3b:6c:08:57:7a:24:5f:a4:53:5e:b9: fe:17:d3:ad:87:2e:a5:81:02:16:12:cb:2d:27:6c:08:7f:23: 3d:cd:81:83:79:6a:be:a6:a3:1a:5d:a8:0d:33:27:16:4b:48: 32:a7:ef:b7:56:65:e2:ee:09:c5:cc:22:c0:1b:da:e5:61:5a: d4:fa:51:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjQwNDMwMjI0MTQ2WhcNMjQwNTA3MjI0MTQ2WjAYMRYwFAYD VQQDEw02NjMxNzNhYS01OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4ZF+vNu9uv92N8dIuhHq/i3aj/cRPXyzbzwgOZsyKQs1U0wiY6pvlfSI0qv qiSY7pnZW9LucfwoHe2JY6PopebPP40Da3cnzu+CTOgzkbA5cYxn+VVjXCP5vHm2 hBm9mR0Ks+phMGvqdxiyx5HKC1F0yRBopDE06LTPCHweuFgT/EpwlgyG5i3tL1BZ VHBePGkK3L7L2vtYSGgzJM2GEeGt2OKkmn5B7pnx5uYqPsRV8W6vpQ4zKPDoTW5Q jNts27G210uI2EQRHuXtaN+/2AafE56D9fnO0zA5UPbUyaI3+Mh0aGNMF8m8B3RD YM3BiBAr8tqZ1U0VbT9gZT/KMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd1tlwV K+wjiyx38yTXJx3BMEGtMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKrztyNqjTuBecmR+laT/nAAgFGhGdR3okB4AwIq+mxdFqHxCx13nf vEL2FPRD0EKyew2rVt+wEM5iktskkTQEwgfNaOOQltYZys7gslfh9pYdD0Yh4Pbb K5VtyNnTZDnAR1De9lwmvd/d1EOzO1JTq8fzJ9VmVkAGgW7N/ZZH9Yd4dAmV5823 qp5O5tE0Fl2AgaMLx3Q6CzIroFq7emYYDJX1T9Y4HOmcUDk/ASSpijeamASjRHDA n3w1O2wIV3okX6RTXrn+F9Othy6lgQIWEsstJ2wIfyM9zYGDeWq+pqMaXagNMycW S0gyp++3VmXi7gnFzCLAG9rlYVrU+lEh -----END CERTIFICATE-----Generated at Tue Apr 30 23:52:31 2024 by rpki-client on console-ams.rpki-client.org