$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft File: Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft (raw, json) Hash identifier: +Wdu0qkuSW29jhYAW/xb2F19T6vDEClzHefKq0rGMFA= Subject key identifier: 6F:EF:A7:74:15:50:FC:D2:31:4A:B3:EC:4E:F2:B4:B1:AF:56:E7:0B Authority key identifier: 67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC Certificate issuer: /CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Certificate serial: 1AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft Manifest number: 1AA7 Signing time: Mon 06 May 2024 16:48:37 +0000 Manifest this update: Mon 06 May 2024 16:48:36 +0000 Manifest next update: Mon 13 May 2024 16:48:36 +0000 Files and hashes: 1: Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl (hash: wtHmpk5bwy3FHPmf/O00js+Shi5jEVKHeMXPUf2mlAQ=) 2: 152A08D898BF11EAA3B42868C4F9AE02.roa (hash: LDkq+Cv6m3DvNwFYBMrL6vavbpcI2lTrWSBKHFPKPEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6831 (0x1aaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31FA/serialNumber=67A3A35E89764FFE97868F55CC60ED9D95A65BFC Validity Not Before: May 6 16:48:36 2024 GMT Not After : May 13 16:48:36 2024 GMT Subject: CN=663909e4-c2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:50:bd:2e:12:0a:63:17:c7:e2:44:2f:1b:b8: 31:75:d3:6a:0a:5c:e4:02:f4:cc:c6:8f:77:8d:d9: 9b:48:4b:a7:35:7b:d7:6c:25:b3:b5:56:f9:2c:bc: d5:ef:4b:0a:77:d5:8a:e0:20:96:62:a0:25:72:45: f4:b4:8b:41:94:90:a2:e6:8a:60:53:fa:c5:4a:c1: 23:4a:46:3c:8a:8d:df:89:bd:07:cc:6e:d6:80:74: 3a:23:f8:4e:1c:9c:87:8e:73:05:c3:2e:74:7a:e9: b6:bf:95:ac:a7:cc:e8:99:c3:ef:17:b8:de:84:f8: c8:41:9e:01:84:c3:88:39:10:38:a4:4c:37:8e:76: b1:63:d4:26:c6:4b:15:df:1e:d4:96:df:7c:02:4f: 9b:9a:a3:10:72:01:fa:f6:cc:5b:0d:cf:06:7a:95: 53:52:a9:11:2d:bc:59:1d:26:af:30:60:07:d0:b5: 4d:4f:9f:ff:4f:ad:8e:57:96:fd:63:ed:54:72:84: f8:3c:03:46:8c:05:ea:75:f9:19:a0:88:68:31:e9: fa:6d:25:6f:7f:15:03:16:b9:a4:a8:96:9b:a3:0d: ff:70:5c:12:76:7d:0c:f3:9c:6f:3d:25:19:48:81: 6e:68:99:a3:ca:f9:68:9a:ea:2a:67:dd:77:e6:b8: 80:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:A7:74:15:50:FC:D2:31:4A:B3:EC:4E:F2:B4:B1:AF:56:E7:0B X509v3 Authority Key Identifier: keyid:67:A3:A3:5E:89:76:4F:FE:97:86:8F:55:CC:60:ED:9D:95:A6:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z6OjXol2T_6Xho9VzGDtnZWmW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31FA/0D210B1C0A3F11E7A5A4621AC4F9AE02/Z6OjXol2T_6Xho9VzGDtnZWmW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:21:98:f3:2c:04:13:c1:83:57:b7:a5:bd:62:f9:79:45:cf: 53:74:99:50:c1:85:13:0e:a6:31:8e:25:56:70:e7:05:51:00: 02:e8:c9:e1:c8:35:9f:20:fa:ef:08:e0:71:48:e9:73:df:3f: 72:58:0c:1b:3f:03:68:ed:ea:a3:07:1d:3f:3f:b5:bf:1b:95: 02:6c:4b:ce:de:5d:b2:e3:16:dd:ec:8f:bb:47:e5:e5:53:0d: fb:c0:14:fc:f5:a1:3b:d2:2a:38:12:a1:28:11:ad:7a:46:99: 7e:ac:1b:e2:d2:a0:54:f4:69:19:0d:df:b8:7b:ee:ed:0b:71: 64:b3:31:93:78:b3:bd:9c:ed:4e:d1:71:ee:45:a0:e3:8c:84: 7f:3f:0a:03:f5:53:cf:fb:d9:db:9a:0e:d2:b7:8d:76:45:b6: 51:a6:ac:f4:7a:69:5e:8e:2b:22:1f:8f:d9:15:60:55:e8:67: 40:b2:fd:2c:39:37:80:4b:d9:17:7a:68:1f:74:9d:bb:d2:d4: e1:d8:60:e1:38:b1:31:af:a2:75:82:ff:80:57:2f:b8:e5:dd: 5b:49:91:9e:3a:8b:1b:28:93:6e:b6:10:01:1c:59:e6:37:f3: a5:fe:16:0a:3f:8e:73:71:2c:5c:b0:f1:8b:bd:10:fb:e6:30: 58:a1:2c:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxRkExMTAvBgNVBAUTKDY3QTNBMzVFODk3NjRGRkU5Nzg2OEY1NUNDNjBFRDlE OTVBNjVCRkMwHhcNMjQwNTA2MTY0ODM2WhcNMjQwNTEzMTY0ODM2WjAYMRYwFAYD VQQDEw02NjM5MDllNC1jMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VC9LhIKYxfH4kQvG7gxddNqClzkAvTMxo93jdmbSEunNXvXbCWztVb5LLzV 70sKd9WK4CCWYqAlckX0tItBlJCi5opgU/rFSsEjSkY8io3fib0HzG7WgHQ6I/hO HJyHjnMFwy50eum2v5Wsp8zomcPvF7jehPjIQZ4BhMOIORA4pEw3jnaxY9QmxksV 3x7Ult98Ak+bmqMQcgH69sxbDc8GepVTUqkRLbxZHSavMGAH0LVNT5//T62OV5b9 Y+1UcoT4PANGjAXqdfkZoIhoMen6bSVvfxUDFrmkqJabow3/cFwSdn0M85xvPSUZ SIFuaJmjyvlomuoqZ9135riAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/vp3QV UPzSMUqz7E7ytLGvVucLMB8GA1UdIwQYMBaAFGejo16Jdk/+l4aPVcxg7Z2Vplv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFGQS8wRDIxMEIxQzBB M0YxMUU3QTVBNDYyMUFDNEY5QUUwMi9aNk9qWG9sMlRfNlhobzlWekdEdG5aV21X X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o2T2pYb2wyVF82WGhvOVZ6R0R0blpXbVdfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFGQS8wRDIxMEIxQzBBM0YxMUU3QTVBNDYyMUFDNEY5QUUwMi9aNk9qWG9sMlRf NlhobzlWekdEdG5aV21XX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZIZjzLAQTwYNXt6W9Yvl5Rc9TdJlQwYUTDqYxjiVWcOcFUQAC6Mnh yDWfIPrvCOBxSOlz3z9yWAwbPwNo7eqjBx0/P7W/G5UCbEvO3l2y4xbd7I+7R+Xl Uw37wBT89aE70io4EqEoEa16Rpl+rBvi0qBU9GkZDd+4e+7tC3FkszGTeLO9nO1O 0XHuRaDjjIR/PwoD9VPP+9nbmg7St412RbZRpqz0emlejisiH4/ZFWBV6GdAsv0s OTeAS9kXemgfdJ270tTh2GDhOLExr6J1gv+AVy+45d1bSZGeOosbKJNuthABHFnm N/Ol/hYKP45zcSxcsPGLvRD75jBYoSwE -----END CERTIFICATE-----Generated at Mon May 6 17:43:28 2024 by rpki-client on console-ams.rpki-client.org