$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: KacjBwwzdbtpRPsz6zNjXy6j80o4Ue2eA2Th7He4J/s= Subject key identifier: D5:26:0E:0D:25:D0:5F:19:45:30:21:7A:43:75:56:41:23:50:79:C8 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 07E2 Signing time: Tue 30 Apr 2024 22:16:53 +0000 Manifest this update: Tue 30 Apr 2024 22:16:52 +0000 Manifest next update: Tue 07 May 2024 22:16:52 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: ocmaN642+jYq/VuduWZwWNvAAZr3j31DDG32jrGAPrI=) 2: B3900AB8D6E611EEAD5FBD64C4F9AE02.roa (hash: DYns0ivgrckF3unWHyEGrijl6WFHyyfy4r6hMwFGNGc=) 3: 9E43A19CD6E611EEAE5D8F64C4F9AE02.roa (hash: ShLJrtzXni57aVHcps3NYL30Ym5SX2SH0OFQXLrKWh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Apr 30 22:16:52 2024 GMT Not After : May 7 22:16:52 2024 GMT Subject: CN=66316dd4-80ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f3:d6:6b:97:1c:43:95:a8:29:69:2f:05:fc: 38:70:1f:29:30:dd:4c:4e:6a:22:a2:75:76:2d:41: 06:32:c3:08:a8:3d:5a:f7:da:65:44:86:fc:7b:ae: 26:6a:52:0d:ea:6e:af:21:e8:24:a1:81:e4:a2:39: 49:fa:e2:ba:b6:67:36:e3:b4:ca:fe:64:e2:6f:e1: b6:cf:1b:f6:1f:50:c3:3b:e8:78:54:a4:79:78:0f: 15:ea:c7:90:c1:2c:24:ba:91:17:ee:3c:81:28:e2: 35:f1:e7:bf:c0:78:26:40:c8:f5:99:70:5c:a9:34: 55:7c:09:2d:ea:ff:8b:9d:26:f0:32:8b:00:70:2a: c3:10:e9:88:94:46:7c:08:b5:c8:e9:67:d1:ef:5d: 38:7b:06:a3:f3:44:0e:94:0c:92:38:ea:cc:2d:a5: ba:97:05:5a:81:1d:a2:98:1e:7c:ba:6d:7a:6e:9a: 05:b5:63:23:a6:a5:84:1b:90:b3:04:93:67:64:6f: 80:67:70:2b:24:96:66:95:13:9b:0a:ed:f1:e9:ca: aa:54:38:88:59:22:b5:7f:1b:c1:07:bb:43:ae:68: 04:dd:3e:98:e1:8d:69:51:25:25:30:3f:63:fc:00: ed:59:a9:50:72:3b:1c:cb:dc:5e:4c:fb:f6:a2:52: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:26:0E:0D:25:D0:5F:19:45:30:21:7A:43:75:56:41:23:50:79:C8 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:91:67:3c:37:40:1e:f2:6c:84:e3:dc:0e:b3:fd:c5:5c:f7: d3:d4:68:09:78:81:14:cd:b8:35:75:aa:47:49:f4:0f:31:10: 22:55:20:15:bc:cd:75:34:1f:77:56:15:f3:c4:3c:11:ee:4d: ed:14:99:8a:e1:68:a6:74:d4:ba:e4:94:0c:1b:4b:c2:43:29: f9:ee:34:e7:8d:35:47:19:18:74:0c:08:8a:28:ce:5c:f2:d3: 7c:21:43:3b:13:eb:41:ac:e8:7b:e0:1b:17:a8:d5:c4:f7:cc: 1f:1f:94:74:99:71:bf:22:4a:ec:93:53:eb:64:f7:2a:7b:cd: 95:4f:31:0d:20:56:e5:8c:3d:44:b0:2c:7f:75:c5:54:fb:59: c5:fa:83:93:5d:1c:17:30:03:7d:79:9b:76:44:27:9a:16:c7: 33:ab:d1:8e:db:f4:71:04:e6:d8:f7:d9:74:27:53:27:fa:4a: e6:84:9c:dc:e0:c8:af:c0:d0:79:2c:96:ef:d9:b5:91:73:88: 10:b4:b1:ce:cc:94:89:11:7a:f2:3d:ba:a9:8a:c7:6c:82:39: 5a:98:fb:d6:c2:ab:73:93:71:b9:5a:97:00:77:d6:d8:07:a9: d1:64:8f:d9:8d:43:63:e5:81:1b:1c:a1:73:af:aa:61:a4:28: 60:8a:bd:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjQwNDMwMjIxNjUyWhcNMjQwNTA3MjIxNjUyWjAYMRYwFAYD VQQDEw02NjMxNmRkNC04MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vPWa5ccQ5WoKWkvBfw4cB8pMN1MTmoionV2LUEGMsMIqD1a99plRIb8e64m alIN6m6vIegkoYHkojlJ+uK6tmc247TK/mTib+G2zxv2H1DDO+h4VKR5eA8V6seQ wSwkupEX7jyBKOI18ee/wHgmQMj1mXBcqTRVfAkt6v+LnSbwMosAcCrDEOmIlEZ8 CLXI6WfR7104ewaj80QOlAySOOrMLaW6lwVagR2imB58um16bpoFtWMjpqWEG5Cz BJNnZG+AZ3ArJJZmlRObCu3x6cqqVDiIWSK1fxvBB7tDrmgE3T6Y4Y1pUSUlMD9j /ADtWalQcjscy9xeTPv2olIu+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUmDg0l 0F8ZRTAhekN1VkEjUHnIMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJkWc8N0Ae8myE49wOs/3FXPfT1GgJeIEUzbg1dapHSfQPMRAiVSAV vM11NB93VhXzxDwR7k3tFJmK4WimdNS65JQMG0vCQyn57jTnjTVHGRh0DAiKKM5c 8tN8IUM7E+tBrOh74BsXqNXE98wfH5R0mXG/Ikrsk1PrZPcqe82VTzENIFbljD1E sCx/dcVU+1nF+oOTXRwXMAN9eZt2RCeaFsczq9GO2/RxBObY99l0J1Mn+krmhJzc 4MivwNB5LJbv2bWRc4gQtLHOzJSJEXryPbqpisdsgjlamPvWwqtzk3G5WpcAd9bY B6nRZI/ZjUNj5YEbHKFzr6phpChgir0w -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org