$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: 1+GnYGyzEZ6v6BsxCltkiqTQt0YsnF07cyl38gDnQZs= Subject key identifier: FC:7D:DB:78:E2:E4:B1:95:06:83:44:A7:9D:42:F6:B8:54:25:BE:5A Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 06F0 Signing time: Sat 04 May 2024 22:55:19 +0000 Manifest this update: Sat 04 May 2024 22:55:18 +0000 Manifest next update: Sat 11 May 2024 22:55:18 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: 3B+Cz1NjQpnGk9psC8ftg1W/7UUnNm/gPzxFm2rAEbw=) 2: E6C1DE9CFCB611EA9B245911C4F9AE02.roa (hash: 3Z49HwZL0ZclKRYisuk5BIfvyrDgD7nyjzYc6zYT6tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: May 4 22:55:18 2024 GMT Not After : May 11 22:55:18 2024 GMT Subject: CN=6636bcd6-eb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:cc:ea:26:29:86:21:04:31:b3:15:bd:6f: f5:71:76:17:fb:d3:6e:36:61:a6:0a:3e:30:27:71: e9:43:1d:93:d6:8b:6b:43:38:55:60:dd:76:51:ad: 31:f1:d0:6b:81:e6:ce:e6:90:e5:b9:31:31:d7:c3: 6c:46:1b:71:1c:09:e4:5f:33:4b:41:66:2a:9b:49: 29:d1:8f:25:c2:f5:c0:42:da:1b:d0:77:42:cd:34: 0c:76:9e:94:66:55:a8:c9:19:7a:43:6b:ef:b7:7e: d2:ca:7e:e1:be:f8:bb:c4:f5:be:97:1a:04:aa:85: 74:62:24:1b:df:1d:3b:4d:42:65:59:92:15:c3:f5: 23:41:72:8c:1f:5b:05:c4:92:d4:84:e2:80:e6:83: 45:d8:01:d0:4d:a5:04:68:80:4d:7c:ab:f7:71:ab: ae:cc:3e:11:5a:fb:cd:aa:0a:dc:e8:f9:a9:36:ce: 16:f3:06:dd:6d:26:af:b6:b6:3a:9c:df:fb:26:f6: 0d:a4:09:0d:42:b4:d5:bf:b1:2c:e9:40:3d:16:b3: a4:0f:8d:5e:20:0f:a9:0a:73:2f:d2:9c:17:9d:24: 9b:05:e3:6b:39:05:95:3c:a5:12:e1:f2:c5:42:f8: 1d:9d:de:0d:f2:7c:0f:b1:0e:65:9e:72:a6:bb:2a: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7D:DB:78:E2:E4:B1:95:06:83:44:A7:9D:42:F6:B8:54:25:BE:5A X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ee:9c:7b:df:0e:50:5d:8b:7d:67:ec:a6:e2:5e:1d:43:13: 13:c4:a9:e3:aa:b3:3e:bf:f2:ae:04:78:63:52:ea:d6:b8:b1: 75:cb:79:d6:7c:86:56:62:bc:74:0e:64:72:4c:96:74:56:f9: 80:49:dd:7a:3d:64:10:a7:92:e4:14:0a:dc:68:a1:a7:7d:f4: ab:7a:4f:e2:88:b2:55:ff:d3:af:e2:1f:6f:f7:a8:84:0f:38: 2a:2c:8c:f0:cd:31:76:67:fc:ac:82:36:f5:11:89:cb:91:ad: ec:b3:69:1a:33:1d:59:cd:90:76:8b:1f:e5:3e:e7:d6:f4:e3: 7a:71:3e:ab:4e:9a:90:a2:da:39:c8:e7:cb:cd:d8:87:14:bb: 5a:84:1b:cf:6b:16:fc:ed:d0:3b:02:d2:ff:fb:6b:4a:a2:69: a0:25:01:a3:e6:ec:d7:a5:7e:dd:65:58:a0:52:c7:da:59:66: 64:b4:24:6d:91:ba:00:06:40:c9:7f:37:10:42:4d:18:85:2a: dd:87:27:26:86:3a:21:66:01:47:1c:4a:8c:70:66:1f:0d:3d: 06:5e:cb:9a:70:f4:a6:75:6b:35:47:c0:6a:0e:d3:20:d9:c4: b2:0d:f4:1c:79:30:ef:74:9f:2d:ee:9a:07:32:9c:4a:7f:06: 66:82:80:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjQwNTA0MjI1NTE4WhcNMjQwNTExMjI1NTE4WjAYMRYwFAYD VQQDEw02NjM2YmNkNi1lYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArobM6iYphiEEMbMVvW/1cXYX+9NuNmGmCj4wJ3HpQx2T1otrQzhVYN12Ua0x 8dBrgebO5pDluTEx18NsRhtxHAnkXzNLQWYqm0kp0Y8lwvXAQtob0HdCzTQMdp6U ZlWoyRl6Q2vvt37Syn7hvvi7xPW+lxoEqoV0YiQb3x07TUJlWZIVw/UjQXKMH1sF xJLUhOKA5oNF2AHQTaUEaIBNfKv3cauuzD4RWvvNqgrc6PmpNs4W8wbdbSavtrY6 nN/7JvYNpAkNQrTVv7Es6UA9FrOkD41eIA+pCnMv0pwXnSSbBeNrOQWVPKUS4fLF Qvgdnd4N8nwPsQ5lnnKmuyrgGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx923ji 5LGVBoNEp51C9rhUJb5aMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ7px73w5QXYt9Z+ym4l4dQxMTxKnjqrM+v/KuBHhjUurWuLF1y3nW fIZWYrx0DmRyTJZ0VvmASd16PWQQp5LkFArcaKGnffSrek/iiLJV/9Ov4h9v96iE DzgqLIzwzTF2Z/ysgjb1EYnLka3ss2kaMx1ZzZB2ix/lPufW9ON6cT6rTpqQoto5 yOfLzdiHFLtahBvPaxb87dA7AtL/+2tKommgJQGj5uzXpX7dZVigUsfaWWZktCRt kboABkDJfzcQQk0YhSrdhycmhjohZgFHHEqMcGYfDT0GXsuacPSmdWs1R8BqDtMg 2cSyDfQceTDvdJ8t7poHMpxKfwZmgoDA -----END CERTIFICATE-----Generated at Sun May 5 00:12:35 2024 by rpki-client on console-fra.rpki-client.org